Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_SJR5kvFqHKlmCK0W9YmxqN0JW8.roa
File:                     _SJR5kvFqHKlmCK0W9YmxqN0JW8.roa (raw, json)
Hash identifier:          fbm+z0GZKCetfoJHjszUQcqdapU3OJozwpFj9FJSpSc=
Subject key identifier:   FD:22:51:E6:4B:C5:A8:72:A5:98:22:B4:5B:D6:26:C6:A3:74:25:6F
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       01846D9E06E5BE5C319D0BF776F3216DFB02
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_SJR5kvFqHKlmCK0W9YmxqN0JW8.roa
Signing time:             Sat 12 Nov 2022 20:53:03 +0000
ROA not before:           Sat 12 Nov 2022 20:53:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        45.136.248.0/24 maxlen: 24
                          2a09:3704::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:6d:9e:06:e5:be:5c:31:9d:0b:f7:76:f3:21:6d:fb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Nov 12 20:53:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd2251e64bc5a872a59822b45bd626c6a374256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:7c:37:09:3d:f3:3a:e2:52:7e:a9:b2:d8:
                    07:43:76:b9:b4:e9:f6:d9:4b:74:97:96:e4:50:11:
                    9d:3b:c1:1b:53:43:bb:cf:d2:ac:9c:fa:3a:4c:41:
                    b9:93:1d:aa:68:15:19:43:fc:6b:5d:d6:ce:2b:0b:
                    a0:fc:6f:ac:ae:d8:8f:78:0e:2a:15:d0:50:bc:6c:
                    d9:85:95:e6:24:ea:9c:3e:f2:8a:8e:53:81:40:3b:
                    4f:db:8c:6e:cf:78:4c:0b:9f:31:4e:46:8a:93:54:
                    58:1e:43:20:de:25:8a:cb:ac:7f:0f:4e:8a:a6:15:
                    a1:fe:c0:87:b0:08:77:93:46:34:f4:72:9c:e0:be:
                    ae:10:d1:df:75:8c:bc:4b:d1:19:51:8e:e7:c7:19:
                    47:80:05:7f:9b:7b:91:a4:34:3b:8e:6e:a3:66:6b:
                    b9:f8:0b:7f:78:d7:ce:9c:96:8c:7f:40:50:b9:eb:
                    d5:e3:af:2d:21:8e:8a:cd:c2:25:4c:51:45:21:b2:
                    38:62:48:92:6b:c5:21:68:27:2c:f8:86:46:79:5e:
                    30:73:a1:26:cb:69:04:db:95:11:9c:12:87:8d:32:
                    8f:96:d2:f2:c8:c9:c9:3f:33:c6:08:45:15:df:a1:
                    07:a3:bd:87:ce:fe:52:a1:af:52:72:35:04:6e:46:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:51:E6:4B:C5:A8:72:A5:98:22:B4:5B:D6:26:C6:A3:74:25:6F
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_SJR5kvFqHKlmCK0W9YmxqN0JW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.248.0/24
                IPv6:
                  2a09:3704::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:9d:b7:11:2d:09:29:14:59:11:42:62:62:0c:e7:0a:5b:40:
         d6:59:7d:0e:8f:a9:1e:cd:6d:97:ea:97:88:c7:65:ca:ed:7d:
         83:4c:88:aa:e1:c3:cb:93:66:4c:7c:1e:13:3e:d6:1a:6c:2e:
         bf:86:fd:7f:71:06:cb:f3:4c:ad:8e:7f:6b:c7:fc:8a:dc:53:
         bf:29:a1:f3:1d:d9:29:64:48:09:0f:c8:c8:f2:31:5f:c6:e5:
         9e:01:f6:90:c4:b9:c5:a9:0b:bd:9a:b9:dd:6d:70:a1:ce:72:
         b2:be:10:6c:61:1a:f2:63:97:fb:4e:31:f5:bd:4c:e3:98:0c:
         8e:7a:b8:c9:09:46:0d:34:fd:71:3c:a6:54:04:94:de:2f:a1:
         77:4e:e7:0a:34:5b:a6:cb:64:90:6f:1d:98:d9:18:12:e1:89:
         b5:28:a4:3d:e3:ae:07:15:52:e0:59:c3:e9:ae:ab:9b:e4:ef:
         af:86:2e:b1:e1:31:99:46:7d:48:37:59:d5:24:be:6e:05:9b:
         3c:ad:21:f9:fd:e3:71:4f:0d:6b:67:4b:91:e6:98:fb:bf:85:
         5f:fb:23:21:3e:a4:09:31:84:02:58:3a:a2:0a:36:a4:e6:0e:
         f3:ee:51:d0:89:1b:c9:28:22:0f:39:3f:73:6b:60:14:d9:9b:
         62:91:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----