Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/AjqAxLr7GUUuuMh1wGyM6ySPpLs.roa
File:                     AjqAxLr7GUUuuMh1wGyM6ySPpLs.roa (raw, json)
Hash identifier:          z06XKemYSvqdeQorADrIkE571XDp51gWGb/jds6XPx4=
Subject key identifier:   02:3A:80:C4:BA:FB:19:45:2E:B8:C8:75:C0:6C:8C:EB:24:8F:A4:BB
Certificate issuer:       /CN=edca1c3626528a99b5f0c006fbff33b7ce6cb1ae
Certificate serial:       0185723A2470578F74A46CEE3B94C5211963
Authority key identifier: ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cocNiZSipm18MAG-_8zt85ssa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/AjqAxLr7GUUuuMh1wGyM6ySPpLs.roa
Signing time:             Mon 02 Jan 2023 11:24:51 +0000
ROA not before:           Mon 02 Jan 2023 11:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44205
IP address blocks:        45.8.120.0/22 maxlen: 24
                          2a0e:8900::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:24:70:57:8f:74:a4:6c:ee:3b:94:c5:21:19:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca1c3626528a99b5f0c006fbff33b7ce6cb1ae
        Validity
            Not Before: Jan  2 11:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=023a80c4bafb19452eb8c875c06c8ceb248fa4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:95:a2:8a:c6:0f:82:74:30:e2:18:3b:81:
                    b1:77:ee:13:ea:2e:2a:a8:08:14:55:e8:7d:0e:22:
                    2f:5e:77:4a:d2:ff:86:f0:93:4c:84:f8:5e:e6:78:
                    68:69:d5:49:6a:9a:e4:c1:db:8c:c4:3f:85:86:89:
                    f9:c2:ee:8c:bc:8c:4e:70:c2:02:aa:44:8f:02:7a:
                    f1:e5:8b:53:97:fb:65:e2:d3:d2:45:64:49:fb:5f:
                    9b:ef:5b:40:6a:aa:e9:da:d8:5e:a5:3d:98:57:e7:
                    4f:eb:01:c0:c7:4d:41:71:85:e5:9b:ad:53:40:82:
                    28:49:25:43:f9:4c:27:22:b9:28:70:f1:d7:8e:24:
                    6c:3c:21:d7:af:19:98:d1:84:7f:87:65:c0:ef:48:
                    c0:4e:9b:99:fc:6b:5d:18:e6:a7:67:8b:e5:64:7e:
                    61:24:d6:cc:67:4d:69:54:78:d6:7a:eb:02:23:50:
                    58:5f:5f:6d:65:36:5e:0c:ac:6f:04:66:61:06:f6:
                    a0:70:af:75:b0:19:02:51:5e:ea:68:17:d4:46:e4:
                    64:4c:62:74:5d:37:b5:6f:21:4e:12:ca:6c:08:22:
                    60:ed:d8:c1:c3:6e:35:b1:8e:3d:6a:1a:f2:ab:a6:
                    52:c5:46:1b:6b:b0:8b:44:66:d0:1b:3e:26:48:84:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:80:C4:BA:FB:19:45:2E:B8:C8:75:C0:6C:8C:EB:24:8F:A4:BB
            X509v3 Authority Key Identifier:
                keyid:ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cocNiZSipm18MAG-_8zt85ssa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/AjqAxLr7GUUuuMh1wGyM6ySPpLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/7cocNiZSipm18MAG-_8zt85ssa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.120.0/22
                IPv6:
                  2a0e:8900::/29

    Signature Algorithm: sha256WithRSAEncryption
         d4:f4:11:d9:5b:cf:b2:d7:89:d5:3d:b5:3f:44:ea:56:11:0a:
         07:04:37:7a:d7:bb:a2:34:40:bf:be:9c:76:3d:30:f9:c7:6f:
         00:9c:c2:b0:37:e1:8c:b2:55:8e:65:72:a0:c8:e3:5a:9d:e1:
         33:90:46:f3:5c:92:93:2e:97:35:c7:89:cb:0b:97:e6:20:ed:
         f1:b7:ba:df:92:e7:eb:4b:28:d9:ee:4b:17:09:00:01:50:42:
         9d:19:f6:0f:11:72:b4:ce:86:66:33:41:96:17:2d:37:1b:9a:
         55:38:34:4b:a0:24:fe:6c:79:bc:84:45:fe:d4:70:f3:4e:72:
         97:a6:c8:42:99:0e:05:52:dc:24:f3:ee:fa:0f:2f:b9:47:90:
         b4:90:f3:83:d0:a5:b2:10:8a:4e:1b:98:24:96:fe:d9:eb:72:
         0a:ec:90:47:fe:f1:9c:d4:d3:25:45:de:d0:26:57:ae:55:18:
         6b:7f:94:5e:32:91:57:7c:e7:2c:7c:a4:35:f9:95:09:db:6b:
         ac:9c:11:88:e3:78:a0:86:b2:39:0d:2c:84:ae:16:e4:c1:33:
         a9:38:db:98:e5:e3:7d:0a:99:fb:52:87:03:be:2f:cd:c0:77:
         db:33:80:57:2d:b4:9c:a0:c6:e6:0c:e4:5f:88:5d:d4:0f:45:
         bc:2a:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----