Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/ZYLv_NT-PFCwWu5jQHOGlTqRYAY.roa
File:                     ZYLv_NT-PFCwWu5jQHOGlTqRYAY.roa (raw, json)
Hash identifier:          UuAU2bCwiBzrNeIX1XJQZvr9UA8ZUITIgyDZZVSpUeg=
Subject key identifier:   65:82:EF:FC:D4:FE:3C:50:B0:5A:EE:63:40:73:86:95:3A:91:60:06
Certificate issuer:       /CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Certificate serial:       018BC46E
Authority key identifier: 07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/ZYLv_NT-PFCwWu5jQHOGlTqRYAY.roa
Signing time:             Sat 01 Jan 2022 11:59:09 +0000
ROA not before:           Sat 01 Jan 2022 11:59:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.91.192.0/24 maxlen: 24
                          45.91.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25937006 (0x18bc46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
        Validity
            Not Before: Jan  1 11:59:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6582effcd4fe3c50b05aee63407386953a916006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:f8:f2:b1:fa:1a:ef:7c:ce:92:fe:75:ca:
                    9d:23:6a:e5:5d:84:c0:16:93:5f:20:a7:c8:a5:a7:
                    7a:c8:d5:68:41:5b:d8:30:83:ad:67:2c:cd:1e:99:
                    42:bd:4f:42:25:6e:84:3d:09:9e:7e:03:38:48:ff:
                    5a:cb:13:95:60:5c:27:70:d8:b2:e6:f3:97:c8:1c:
                    82:14:64:17:f5:04:76:32:52:6a:21:e3:36:70:25:
                    ff:82:c4:54:0e:5f:b8:af:cf:95:ac:2b:aa:c5:c0:
                    ce:13:95:df:ef:fc:a8:0e:18:23:fe:3e:96:4a:e1:
                    6e:b4:d8:cc:26:97:0e:e5:ae:9a:58:f1:55:61:24:
                    28:0d:bb:32:6d:ab:2d:56:b6:0a:30:d6:c0:be:5a:
                    04:d9:30:20:b3:65:9c:49:90:17:3f:a8:36:77:2d:
                    43:f4:ed:7d:6d:f9:66:89:4c:66:7f:a0:a7:6f:71:
                    ba:01:d3:ea:bc:61:e1:a7:3c:f5:35:42:6b:a0:90:
                    f5:dc:20:da:d5:34:55:85:f2:ae:58:8e:b7:b8:9a:
                    c1:f0:b2:66:65:89:5b:47:28:ff:0d:05:ac:1f:71:
                    44:42:5b:35:51:89:b1:4a:f2:9b:ec:67:7c:c7:ed:
                    45:3f:07:96:c5:8f:1d:8e:06:eb:61:d1:6e:98:55:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:EF:FC:D4:FE:3C:50:B0:5A:EE:63:40:73:86:95:3A:91:60:06
            X509v3 Authority Key Identifier:
                keyid:07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/ZYLv_NT-PFCwWu5jQHOGlTqRYAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:94:3f:bd:4e:95:c7:3a:81:95:d5:e1:4a:f4:d7:67:2b:4c:
         77:ef:3d:0a:96:36:e2:e8:ca:5a:0c:46:3b:56:44:85:20:35:
         16:83:1d:42:1a:36:21:15:40:37:66:96:c9:de:dc:e6:4b:75:
         b5:05:50:fb:43:49:b1:5b:a5:3a:39:97:82:2f:ef:32:eb:96:
         f5:e3:53:96:27:98:38:13:4c:0c:5b:0a:5f:be:29:20:9b:6d:
         7a:eb:f4:41:8c:c3:92:9a:93:2f:77:7b:62:97:b8:be:d0:f0:
         44:5c:c8:f6:e6:08:ce:0b:11:50:63:72:f1:eb:67:c0:45:33:
         5b:41:98:1e:4b:14:f8:e9:22:94:bc:0f:ad:55:da:bc:2b:f1:
         76:d5:86:73:1f:37:7c:a9:90:58:d6:0e:e2:b4:ff:2b:09:6e:
         88:3b:75:43:72:f6:4f:cd:84:bb:3b:9d:92:01:36:19:81:c4:
         3c:2c:5a:74:8e:06:48:14:43:67:eb:e5:94:86:fa:3a:3c:a7:
         91:ae:9a:15:d4:22:eb:80:e4:e4:ce:84:8b:07:18:04:00:39:
         5b:f0:96:49:c0:f7:49:36:d9:0d:6e:15:6a:bd:84:ab:34:04:
         b1:0c:4b:5f:fa:b2:44:2a:ed:ba:34:92:b6:fc:73:a8:c6:ea:
         c6:f3:15:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYvEbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Nzk1ZDQ3YjYzYTBmZTE5ZDNmMDAxODQ1YmNmZTIwMWM4ZTYwYWEzMB4XDTIyMDEw
MTExNTkwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU4MmVmZmNkNGZl
M2M1MGIwNWFlZTYzNDA3Mzg2OTUzYTkxNjAwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNC+PKx+hrvfM6S/nXKnSNq5V2EwBaTXyCnyKWnesjVaEFb
2DCDrWcszR6ZQr1PQiVuhD0Jnn4DOEj/WssTlWBcJ3DYsubzl8gcghRkF/UEdjJS
aiHjNnAl/4LEVA5fuK/PlawrqsXAzhOV3+/8qA4YI/4+lkrhbrTYzCaXDuWumljx
VWEkKA27Mm2rLVa2CjDWwL5aBNkwILNlnEmQFz+oNnctQ/TtfW35ZolMZn+gp29x
ugHT6rxh4ac89TVCa6CQ9dwg2tU0VYXyrliOt7iawfCyZmWJW0co/w0FrB9xREJb
NVGJsUrym+xnfMftRT8HlsWPHY4G62HRbphVFT8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRlgu/81P48ULBa7mNAc4aVOpFgBjAfBgNVHSMEGDAWgBQHldR7Y6D+GdPw
AYRbz+IByOYKozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I1WFVlMk9nX2huVDhBR0VXOF9pQWNqbUNxTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvNDQwOWI4LWE4MWUtNDI5YS05N2EyLTQ2YzM5MTUwODQzNi8x
L1pZTHZfTlQtUEZDd1d1NWpRSE9HbFRxUllBWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
NDQwOWI4LWE4MWUtNDI5YS05N2EyLTQ2YzM5MTUwODQzNi8xL0I1WFVlMk9nX2hu
VDhBR0VXOF9pQWNqbUNxTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1bwDANBgkqhkiG9w0BAQsFAAOC
AQEAgJQ/vU6VxzqBldXhSvTXZytMd+89CpY24ujKWgxGO1ZEhSA1FoMdQho2IRVA
N2aWyd7c5kt1tQVQ+0NJsVulOjmXgi/vMuuW9eNTlieYOBNMDFsKX74pIJtteuv0
QYzDkpqTL3d7Ype4vtDwRFzI9uYIzgsRUGNy8etnwEUzW0GYHksU+OkilLwPrVXa
vCvxdtWGcx83fKmQWNYO4rT/KwluiDt1Q3L2T82EuzudkgE2GYHEPCxadI4GSBRD
Z+vllIb6Ojynka6aFdQi64Dk5M6EiwcYBAA5W/CWScD3STbZDW4Var2EqzQEsQxL
X/qyRCrtujSStvxzqMbqxvMVGA==
-----END CERTIFICATE-----