Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/h0XsJd2lPfbJa6wFnq4lxl0JbBo.roa
File:                     h0XsJd2lPfbJa6wFnq4lxl0JbBo.roa (raw, json)
Hash identifier:          OhLge/UXi8Hisg76iKn7DopL9C3CIARNrMUYU58cGxw=
Subject key identifier:   87:45:EC:25:DD:A5:3D:F6:C9:6B:AC:05:9E:AE:25:C6:5D:09:6C:1A
Certificate issuer:       /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial:       17DC1236
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/h0XsJd2lPfbJa6wFnq4lxl0JbBo.roa
Signing time:             Thu 28 Apr 2022 00:02:08 +0000
ROA not before:           Thu 28 Apr 2022 00:02:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8866
IP address blocks:        46.249.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400298550 (0x17dc1236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
        Validity
            Not Before: Apr 28 00:02:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8745ec25dda53df6c96bac059eae25c65d096c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:2f:8c:21:ef:82:30:33:f2:6f:a1:20:ab:
                    cb:f9:d8:05:b4:af:96:e2:27:78:5e:9f:17:11:c5:
                    ec:b7:4a:31:77:8a:14:dc:b4:99:0f:e4:f7:7f:db:
                    a7:43:a2:7f:fa:3c:fd:08:01:17:fc:de:cc:e9:f6:
                    7c:c6:ad:b8:20:cc:1b:c0:1a:7f:ef:c3:f0:5b:c3:
                    a9:98:f2:6b:13:58:a6:64:e9:0f:4a:f1:63:ab:de:
                    1a:fd:7c:19:d3:93:05:7e:81:e4:c4:2b:84:36:4f:
                    75:b9:49:8b:8a:ab:47:ac:ec:21:cc:ea:ef:c2:50:
                    9f:05:f7:d9:c8:7d:27:75:f1:18:09:a3:59:86:7c:
                    81:a2:49:62:2e:63:f4:9f:52:7a:a2:ed:49:25:9d:
                    b4:c1:eb:cd:d6:35:fa:10:f1:91:2a:02:be:69:f5:
                    77:bc:93:6d:34:27:f6:ce:4b:eb:90:c3:04:f8:5b:
                    8d:13:00:e0:32:55:5a:70:7a:43:e7:0e:f3:34:d1:
                    7c:b8:9f:bf:d5:1e:35:5b:b3:c3:c5:e9:68:50:4c:
                    bf:bb:93:70:a2:42:ec:aa:cb:17:16:d0:65:a3:c4:
                    69:23:09:18:03:17:12:dc:bd:b4:99:5d:51:0d:a4:
                    05:10:e6:3f:00:f2:29:4e:68:11:35:00:9e:81:ae:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:EC:25:DD:A5:3D:F6:C9:6B:AC:05:9E:AE:25:C6:5D:09:6C:1A
            X509v3 Authority Key Identifier:
                keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/h0XsJd2lPfbJa6wFnq4lxl0JbBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:02:ed:bd:58:bf:99:58:f7:82:69:63:94:83:c9:83:e2:
         83:91:3a:f1:c9:a8:4d:1f:8c:3e:99:70:27:8c:fc:60:5b:b3:
         d9:af:9b:3b:0f:02:41:27:1a:74:d1:db:37:82:d1:34:3f:9f:
         d5:c1:e4:f8:ce:fc:a0:66:2a:c3:9c:f3:89:b3:b6:1e:d2:cd:
         61:78:f8:88:fe:aa:9f:1f:ac:aa:08:fd:91:a4:a6:f5:97:79:
         64:56:33:6b:68:4b:30:b0:1b:46:b6:57:76:0b:df:c7:ed:34:
         29:9e:1c:6e:3c:97:c3:b1:17:8b:5f:07:37:b6:3a:5a:e4:a0:
         9e:b9:e3:fb:c0:54:08:39:51:ee:4d:d2:3f:ba:95:30:55:a1:
         76:f3:75:65:8c:89:f3:43:f4:6f:81:c1:4b:98:e5:e4:54:47:
         c6:2d:1e:8b:01:0d:63:76:97:d5:a9:04:76:c7:ef:df:fd:b9:
         50:dd:1d:7e:57:2b:8b:88:4e:41:d2:ec:be:7b:83:77:67:68:
         76:73:a5:03:7e:b3:79:f7:3e:e0:91:ee:a5:3d:22:34:12:b1:
         1d:88:f4:12:97:b1:3d:d8:b1:85:f0:2a:71:5e:23:03:43:07:
         e5:ce:cc:7f:b0:99:5d:5c:53:f4:f3:19:d6:2f:2d:12:cd:1b:
         4d:52:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----