Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa
File:                     8PphXYr8vLC6AuhzDvOWB3dvDwo.roa (raw, json)
Hash identifier:          q/gqYDRcwWYkolce/VdkLerUjhoVuHQpyeRwfT6lrgM=
Subject key identifier:   F0:FA:61:5D:8A:FC:BC:B0:BA:02:E8:73:0E:F3:96:07:77:6F:0F:0A
Certificate issuer:       /CN=ef2759c202a0b25a47807cafa1ccbbad96c28a62
Certificate serial:       025B0160
Authority key identifier: EF:27:59:C2:02:A0:B2:5A:47:80:7C:AF:A1:CC:BB:AD:96:C2:8A:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ydZwgKgslpHgHyvocy7rZbCimI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa
Signing time:             Sat 01 Jan 2022 13:05:29 +0000
ROA not before:           Sat 01 Jan 2022 13:05:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        45.147.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39518560 (0x25b0160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2759c202a0b25a47807cafa1ccbbad96c28a62
        Validity
            Not Before: Jan  1 13:05:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0fa615d8afcbcb0ba02e8730ef39607776f0f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:6d:80:c8:68:7b:c6:19:c6:90:23:fb:9c:
                    39:f3:9b:4e:0e:f8:be:41:82:f6:c2:bc:fa:0e:18:
                    87:a0:9d:96:ea:a3:19:f1:f0:46:7a:8e:cb:fb:93:
                    60:db:9c:f3:b7:aa:6c:90:6d:a3:b8:b6:a7:98:e9:
                    14:ca:85:8b:13:0b:4d:c3:45:f3:ff:df:89:dd:2f:
                    69:4a:71:c9:36:c2:45:15:a0:24:90:dc:8a:eb:02:
                    7c:de:ee:90:4c:18:c4:dc:7f:74:9a:08:f1:4d:98:
                    97:b6:e8:d5:5a:3d:77:47:82:18:dd:07:c5:b2:f4:
                    24:77:f5:3a:b2:01:2c:aa:05:3d:e6:d4:29:74:fe:
                    26:7a:5c:e9:31:58:9a:17:3f:76:9f:2c:30:21:a4:
                    33:b6:7f:fd:00:33:d2:f3:ac:91:f4:3d:9a:ed:49:
                    57:3e:9b:f4:bf:e7:bc:f2:e2:e0:bc:be:3c:4a:dc:
                    03:d0:88:d9:de:54:39:ca:e0:bb:6f:ca:a0:41:8b:
                    eb:11:f3:bb:50:1f:34:ee:c3:df:0f:76:41:6f:5c:
                    cc:a2:33:d3:e5:50:cc:1c:8a:78:19:ef:d4:50:d4:
                    59:71:11:17:ff:db:55:1b:a6:89:5b:23:fd:0a:1d:
                    10:9a:59:7b:21:7e:b8:0e:8d:c2:2e:d5:7f:5f:15:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:61:5D:8A:FC:BC:B0:BA:02:E8:73:0E:F3:96:07:77:6F:0F:0A
            X509v3 Authority Key Identifier:
                keyid:EF:27:59:C2:02:A0:B2:5A:47:80:7C:AF:A1:CC:BB:AD:96:C2:8A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ydZwgKgslpHgHyvocy7rZbCimI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/8PphXYr8vLC6AuhzDvOWB3dvDwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e203ad-2e94-49b2-9d12-a03b2a3d8c29/1/7ydZwgKgslpHgHyvocy7rZbCimI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:40:3b:be:5a:3b:06:9e:ab:dc:15:30:a3:d5:2e:95:ab:18:
         00:55:95:3a:18:e9:85:2e:51:93:c7:59:db:29:bf:92:5d:ee:
         1c:f6:5b:0b:05:6c:6c:23:0f:80:1d:93:4c:c8:78:6f:d5:b7:
         6f:c0:ff:39:96:bb:dc:06:ba:9f:b2:35:38:47:2c:ee:8d:fc:
         d5:5f:4d:bd:d5:ae:a2:10:24:18:a8:9e:26:4e:bb:fc:e7:1b:
         f8:f0:e0:4b:d6:9d:1d:ef:98:26:7a:5e:35:9a:d3:9e:b6:73:
         c5:33:d2:35:b3:a2:66:1a:e6:4c:ec:16:77:f8:d2:26:f2:70:
         7a:85:90:90:cb:14:39:4f:29:eb:0d:1c:3e:a4:4e:4b:58:28:
         2f:c7:f8:88:d7:4b:5f:5c:30:33:51:60:4f:c7:ed:b7:3b:80:
         e6:01:d8:2b:6c:66:a0:f1:73:6b:92:96:e3:db:08:ab:cb:26:
         86:ab:8a:3e:37:67:4b:97:97:48:c8:c7:67:3c:12:19:70:27:
         cb:9f:42:24:1b:ac:83:a7:89:93:5c:2b:73:d0:39:a5:f5:8a:
         21:f0:eb:8b:28:7d:16:94:b3:74:39:72:4f:33:11:c8:b9:8b:
         c1:ad:d1:cb:d1:4c:6e:a1:8c:a1:17:13:4a:d6:6a:60:5e:84:
         11:77:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----