Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/F2zq6Mfi0nDOcXkIrkp4G5Nf-mI.roa
File:                     F2zq6Mfi0nDOcXkIrkp4G5Nf-mI.roa (raw, json)
Hash identifier:          l9BBObmw2dgQswPnZo2nc9QYJ156S/h2NoC5Hh+6Sr4=
Subject key identifier:   17:6C:EA:E8:C7:E2:D2:70:CE:71:79:08:AE:4A:78:1B:93:5F:FA:62
Certificate issuer:       /CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Certificate serial:       01BEAFDA
Authority key identifier: 07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/F2zq6Mfi0nDOcXkIrkp4G5Nf-mI.roa
Signing time:             Thu 20 Jan 2022 08:15:09 +0000
ROA not before:           Thu 20 Jan 2022 08:15:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.91.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29274074 (0x1beafda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
        Validity
            Not Before: Jan 20 08:15:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=176ceae8c7e2d270ce717908ae4a781b935ffa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:9f:fe:56:a2:84:50:57:6a:1e:99:19:5b:
                    c9:c8:fc:11:a7:7e:90:8a:c4:83:6a:e1:4a:cc:dd:
                    77:7d:fb:33:8f:c7:63:4f:f8:75:c8:73:26:f5:bb:
                    69:9e:8c:11:62:a9:e9:a9:0a:b3:41:eb:f9:29:cd:
                    10:5d:39:7f:76:53:64:72:0e:06:e6:db:72:b9:62:
                    6f:8a:22:07:a0:42:6d:ca:59:22:4e:05:2b:83:f4:
                    77:f8:e0:b5:e4:d8:9b:ba:9e:fd:0a:59:70:41:ad:
                    46:ea:3c:70:2c:4f:6c:1f:be:0b:2c:9f:e7:bc:17:
                    fd:26:a8:cf:df:82:04:d9:54:d7:fe:23:1f:18:bf:
                    bc:57:00:31:20:23:b8:c0:1a:f5:17:b4:6c:28:5a:
                    14:30:c8:65:87:b1:43:68:b8:52:ae:02:7f:73:ef:
                    43:a4:4e:25:56:b0:75:93:4d:47:f4:46:1f:c5:04:
                    36:69:f4:c1:8f:44:c0:64:85:74:3d:69:ce:a6:01:
                    12:b2:86:ee:3f:a2:3f:51:4c:52:14:cb:35:38:b5:
                    6a:34:d1:59:76:27:86:68:db:92:1f:4f:30:95:f7:
                    b3:4e:9f:4c:e7:65:26:d6:68:20:7e:49:09:f6:12:
                    a0:de:ef:e7:6e:b9:2f:01:82:24:e2:77:71:97:12:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:EA:E8:C7:E2:D2:70:CE:71:79:08:AE:4A:78:1B:93:5F:FA:62
            X509v3 Authority Key Identifier:
                keyid:07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/F2zq6Mfi0nDOcXkIrkp4G5Nf-mI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:5d:2d:3e:48:c0:05:b2:af:75:05:a8:99:ed:84:05:d4:
         cb:3e:9d:2d:f1:72:25:98:1a:da:8b:d8:87:70:b0:39:80:cd:
         7f:78:a1:9b:c4:9d:4b:37:98:d2:9a:37:d0:e8:d6:41:a2:ba:
         dc:77:31:93:bb:4f:34:ed:07:8a:76:31:37:ad:ad:79:43:4c:
         c6:9f:c8:f6:81:c2:dd:fe:21:b3:07:59:58:12:aa:5b:73:42:
         03:80:62:56:fa:aa:88:f2:01:ad:c6:da:44:04:94:18:d4:ff:
         bf:23:11:14:0f:89:02:42:11:e4:8e:36:45:dc:b0:b9:bf:29:
         0c:af:2d:d2:f6:6b:c1:6e:79:81:f5:b3:76:de:e1:bc:8c:17:
         15:c6:d9:12:75:d7:72:00:f1:69:69:07:bb:a9:20:b0:ba:c0:
         ac:ce:8b:8d:6f:28:07:15:e5:b0:83:dc:e8:8e:f4:73:0f:14:
         b1:bb:63:49:51:54:fc:9e:cd:c2:98:44:25:16:8a:d1:60:f5:
         63:15:35:1c:33:8e:4e:d7:a9:f6:37:65:ac:57:0d:c0:e3:cc:
         74:83:5b:ff:9f:8e:1c:f8:5b:eb:5d:87:94:3c:6b:2d:cf:be:
         cd:95:e5:fc:1f:14:73:fb:15:82:a0:5c:2c:2a:66:f1:09:41:
         d3:f8:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----