Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/7pG6HEcAFSjWLWjNSiUCGlb6rwE.roa
File:                     7pG6HEcAFSjWLWjNSiUCGlb6rwE.roa (raw, json)
Hash identifier:          H+9Xk7fnZ1i5TmO8OXrD+fRI1Y1gA7DwI4VCaL9Gu1s=
Subject key identifier:   EE:91:BA:1C:47:00:15:28:D6:2D:68:CD:4A:25:02:1A:56:FA:AF:01
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       01856DCAFA77F5D7DB9EF38D463D744A5EE0
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/7pG6HEcAFSjWLWjNSiUCGlb6rwE.roa
Signing time:             Sun 01 Jan 2023 14:44:57 +0000
ROA not before:           Sun 01 Jan 2023 14:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        45.136.248.0/24 maxlen: 24
                          2a09:3704::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:fa:77:f5:d7:db:9e:f3:8d:46:3d:74:4a:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Jan  1 14:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee91ba1c47001528d62d68cd4a25021a56faaf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:73:45:32:62:1e:28:a6:b3:f8:fd:b6:5c:ee:
                    d5:11:c5:bd:ff:cf:9a:46:3d:ad:7d:3a:88:da:9f:
                    1e:7a:71:9a:36:84:64:30:eb:25:67:91:cc:4a:2f:
                    05:42:1c:e3:48:ad:48:7a:82:62:5b:7e:6b:68:a9:
                    37:fa:8e:6e:77:d4:0f:a5:b1:71:c1:95:74:ef:33:
                    0b:cd:39:3e:7b:77:64:84:16:02:e6:09:f0:ab:b9:
                    e3:b7:de:74:91:a4:96:e5:15:aa:f6:b9:34:9e:69:
                    b2:6a:6e:e6:ac:1c:d6:28:cc:8a:25:e3:ef:63:96:
                    fb:10:de:91:22:39:7b:3a:42:13:26:05:93:b4:a3:
                    db:71:88:6c:77:19:a6:fe:e1:2d:37:e7:ad:83:92:
                    67:81:3d:ed:c9:3e:ec:da:86:5c:4d:ac:c8:fc:52:
                    ce:75:fa:5b:aa:ee:ff:87:22:af:a7:37:d4:9a:fd:
                    10:3b:f1:ee:ea:32:6f:0a:f6:69:a0:76:dc:fc:9a:
                    d2:85:e3:a8:ba:b6:89:a3:f0:be:4a:18:2e:29:2f:
                    de:4d:a7:7a:9b:b4:89:14:e4:a7:94:3a:c8:44:2c:
                    8a:25:cc:f9:ae:52:82:24:09:06:ab:42:0d:21:f7:
                    d5:a8:dc:44:80:0e:9f:1c:64:bb:6b:ee:6c:6d:47:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:BA:1C:47:00:15:28:D6:2D:68:CD:4A:25:02:1A:56:FA:AF:01
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/7pG6HEcAFSjWLWjNSiUCGlb6rwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.248.0/24
                IPv6:
                  2a09:3704::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:70:fc:9a:27:72:69:cd:38:2f:98:62:2b:eb:26:21:92:
         06:e8:3d:a1:88:87:d2:89:42:58:8d:8f:a5:f1:82:83:43:a5:
         75:a3:82:1e:d6:a4:2e:dc:2f:b9:c1:65:84:18:d7:ea:38:db:
         b6:07:b6:de:64:a7:07:c5:45:9e:14:8d:af:ca:d9:89:1f:96:
         62:25:fa:32:ec:8f:c4:22:d4:16:92:0a:58:2f:6c:6f:63:44:
         f4:ac:dd:1f:da:91:3a:83:78:60:ee:e7:e9:3d:ce:7c:1a:0c:
         21:0b:74:b5:3c:fa:c6:b4:0a:b7:28:e2:18:e3:36:3d:4f:cc:
         16:17:55:42:32:bb:ed:7b:77:43:3c:eb:9d:62:2d:57:94:7a:
         20:e3:91:58:ed:b2:64:0c:a4:12:b4:b6:4c:9f:4d:b6:c8:72:
         30:1c:3b:d1:f2:80:67:0d:6c:8a:ae:cf:2c:b5:8d:fd:51:e4:
         b3:c0:a0:c9:6b:db:c6:79:59:0c:ce:f0:9d:70:35:fc:80:7a:
         a7:6b:a3:eb:bf:85:cf:63:06:3a:70:5b:e9:49:fe:87:94:1f:
         08:d4:b8:81:66:d7:d2:0c:1e:3e:46:2a:39:84:29:fe:7a:f8:
         6a:d7:a8:3d:bb:62:08:2c:c3:aa:e1:73:bd:fa:2c:d3:81:a1:
         ab:67:1d:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtyvp39dfbnvONRj10Sl7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjMwMTAxMTQ0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTkxYmExYzQ3MDAxNTI4ZDYyZDY4Y2Q0YTI1MDIxYTU2ZmFhZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XNFMmIeKKaz+P22XO7VEcW9/8+a
Rj2tfTqI2p8eenGaNoRkMOslZ5HMSi8FQhzjSK1IeoJiW35raKk3+o5ud9QPpbFx
wZV07zMLzTk+e3dkhBYC5gnwq7njt950kaSW5RWq9rk0nmmyam7mrBzWKMyKJePv
Y5b7EN6RIjl7OkITJgWTtKPbcYhsdxmm/uEtN+etg5JngT3tyT7s2oZcTazI/FLO
dfpbqu7/hyKvpzfUmv0QO/Hu6jJvCvZpoHbc/JrSheOouraJo/C+ShguKS/eTad6
m7SJFOSnlDrIRCyKJcz5rlKCJAkGq0INIffVqNxEgA6fHGS7a+5sbUfP/wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO6RuhxHABUo1i1ozUolAhpW+q8BMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvN3BHNkhFY0FGU2pXTFdqTlNpVUNHbGI2cndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYj4MA0E
AgACMAcDBQAqCTcEMA0GCSqGSIb3DQEBCwUAA4IBAQBY53D8midyac04L5hiK+sm
IZIG6D2hiIfSiUJYjY+l8YKDQ6V1o4Ie1qQu3C+5wWWEGNfqONu2B7beZKcHxUWe
FI2vytmJH5ZiJfoy7I/EItQWkgpYL2xvY0T0rN0f2pE6g3hg7ufpPc58GgwhC3S1
PPrGtAq3KOIY4zY9T8wWF1VCMrvte3dDPOudYi1XlHog45FY7bJkDKQStLZMn022
yHIwHDvR8oBnDWyKrs8stY39UeSzwKDJa9vGeVkMzvCdcDX8gHqna6Prv4XPYwY6
cFvpSf6HlB8I1LiBZtfSDB4+Rio5hCn+evhq16g9u2IILMOq4XO9+izTgaGrZx1t
-----END CERTIFICATE-----