Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/Q2-WgFo17AAqfn_fGfbj_iv3Klc.roa
File:                     Q2-WgFo17AAqfn_fGfbj_iv3Klc.roa (raw, json)
Hash identifier:          0/uOO/ySHUCtEi1d/9CgRHe21Sgajq+MI87DTmK4ZyQ=
Subject key identifier:   43:6F:96:80:5A:35:EC:00:2A:7E:7F:DF:19:F6:E3:FE:2B:F7:2A:57
Certificate issuer:       /CN=1048dd12120601282143285eba666b13b434798e
Certificate serial:       AF4288
Authority key identifier: 10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/Q2-WgFo17AAqfn_fGfbj_iv3Klc.roa
Signing time:             Mon 28 Mar 2022 09:49:58 +0000
ROA not before:           Mon 28 Mar 2022 09:49:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400529
IP address blocks:        45.134.10.0/24 maxlen: 24
                          45.134.10.0/23 maxlen: 24
                          45.134.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11485832 (0xaf4288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1048dd12120601282143285eba666b13b434798e
        Validity
            Not Before: Mar 28 09:49:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=436f96805a35ec002a7e7fdf19f6e3fe2bf72a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:5b:13:a9:b4:4b:45:52:e8:ce:e2:de:18:
                    43:f5:6e:c7:21:2d:13:13:7c:6f:97:75:8a:39:97:
                    df:bd:89:d4:b5:15:5a:12:4e:f1:64:fa:3c:8f:54:
                    9d:08:fe:47:b9:0c:7f:12:d1:f6:95:37:c4:35:29:
                    e8:3d:4b:ec:e6:0b:44:c0:a6:6f:d1:3e:d2:18:ff:
                    d7:98:c7:61:38:23:fa:1c:56:1d:b6:fb:ce:e1:ea:
                    6c:eb:05:33:64:0b:13:d6:08:70:01:47:bd:fa:c9:
                    05:f9:c1:3b:48:76:18:f0:a2:e6:87:fe:df:30:f0:
                    fa:f3:37:fe:a6:88:fd:83:d7:58:53:9f:35:4e:bf:
                    b1:63:f9:cf:93:d7:45:c4:69:18:0a:43:42:94:de:
                    2b:f0:71:8d:2c:54:d7:aa:6a:a2:50:45:38:14:27:
                    9b:d2:ff:f3:94:ce:bd:59:a9:2f:86:f6:2d:25:6f:
                    cc:bc:38:4e:2c:cb:39:d8:22:9f:70:75:f7:49:54:
                    43:90:d3:84:95:49:73:e0:7f:23:76:62:78:1d:dc:
                    b7:ec:9d:aa:94:92:ea:c5:eb:a5:b0:01:e6:df:14:
                    dc:f4:e1:12:8a:33:9d:4c:b6:41:1d:10:c7:a1:9d:
                    da:eb:21:82:b3:41:36:fd:8e:83:c5:57:e3:b5:c8:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:96:80:5A:35:EC:00:2A:7E:7F:DF:19:F6:E3:FE:2B:F7:2A:57
            X509v3 Authority Key Identifier:
                keyid:10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/Q2-WgFo17AAqfn_fGfbj_iv3Klc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:c0:0b:6a:68:32:49:18:53:51:19:f9:16:62:a6:0f:d6:
         b3:88:dc:3f:1d:6c:2b:b1:de:66:28:6c:37:e4:de:f8:77:fe:
         5f:21:49:74:64:ea:4f:78:04:0e:23:67:98:42:55:dc:30:1a:
         d9:68:d8:7c:b3:17:6d:3b:2d:38:7c:ee:ec:94:34:2e:78:a5:
         d2:75:f4:7e:b6:5a:60:bc:87:ab:03:2d:b5:f1:2f:75:1c:de:
         86:34:08:3e:de:6d:49:1f:f1:52:51:d1:fc:06:eb:98:03:6a:
         01:8a:0d:e4:81:9e:13:d8:ca:96:8e:85:23:1e:ad:3f:dc:17:
         d1:b9:69:4c:90:39:36:23:82:e5:aa:26:a3:0e:5e:30:9f:ce:
         dc:cb:50:09:39:2c:2e:6a:d2:3d:bd:8b:6c:d7:a7:4e:5e:1e:
         6c:1d:d2:3a:c0:d7:7d:c6:14:6e:95:f2:10:d6:66:aa:fc:32:
         ce:d2:40:c2:c7:ec:30:68:20:4b:4b:44:14:84:ea:e8:bb:e7:
         c7:7d:18:cd:7f:b9:c3:da:af:eb:b5:c7:fc:13:c2:79:7f:44:
         e4:d3:7b:68:50:c7:8c:5b:66:19:00:03:48:f6:d3:86:4d:9b:
         65:80:01:2f:79:f8:07:31:91:19:b5:19:91:29:a8:79:3c:a8:
         66:71:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----