Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa
File:                     0JloI2_75jwiir4szMdbiI5_ddM.roa (raw, json)
Hash identifier:          A8OYLBZbT2YAAUQCUcttehwl8ylLZtIOHaKpz3M/jBw=
Subject key identifier:   D0:99:68:23:6F:FB:E6:3C:22:8A:BE:2C:CC:C7:5B:88:8E:7F:75:D3
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       0185737A9930826423D834D2FA67FC9E6D3A
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa
Signing time:             Mon 02 Jan 2023 17:14:52 +0000
ROA not before:           Mon 02 Jan 2023 17:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        45.142.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:7a:99:30:82:64:23:d8:34:d2:fa:67:fc:9e:6d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Jan  2 17:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d09968236ffbe63c228abe2cccc75b888e7f75d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:ec:f1:5e:92:7c:f0:1e:f8:2b:6a:fe:f2:
                    48:a8:db:3a:e2:05:77:dc:9d:71:53:ec:9c:26:a7:
                    09:eb:53:c2:44:80:b3:fb:ad:b4:9b:ab:35:ac:65:
                    d2:c2:df:56:b2:ec:1d:0b:47:37:66:66:84:2d:f2:
                    60:ef:a4:8a:45:3f:17:02:b8:a8:e8:46:9c:d1:ad:
                    b9:41:fe:23:03:6b:97:3c:a8:b5:28:d2:74:d7:13:
                    b8:67:52:40:02:c5:f7:8d:09:2e:26:87:62:ba:29:
                    f6:15:a9:04:db:a8:1a:95:fd:2e:8e:59:e2:fe:9e:
                    10:8f:48:05:4e:59:eb:58:d7:89:2f:7e:ff:6c:72:
                    81:a9:74:8b:04:b6:e1:14:d7:0f:f1:29:49:0a:19:
                    a5:41:2a:4c:96:aa:14:c2:76:0b:2a:a8:2d:6e:38:
                    6d:20:7d:7f:ea:36:b2:8d:bf:54:b1:67:2b:ee:99:
                    0f:c0:8d:bb:3e:9a:db:b7:12:23:7e:f9:24:b5:d2:
                    e5:d9:80:eb:c8:63:88:eb:36:51:20:94:c2:fb:ff:
                    c3:1c:f1:10:db:a0:eb:5a:46:17:6e:99:ac:65:28:
                    b3:b6:07:f4:1d:b7:c2:a0:2d:25:43:9a:90:9b:ae:
                    df:16:7e:0f:7a:8a:84:73:29:23:44:51:8b:6e:e1:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:68:23:6F:FB:E6:3C:22:8A:BE:2C:CC:C7:5B:88:8E:7F:75:D3
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/0JloI2_75jwiir4szMdbiI5_ddM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:58:dc:23:14:2d:28:bf:3c:23:0a:0e:a5:11:09:9c:47:ab:
         96:ad:9e:a5:00:43:09:22:12:0f:3b:db:58:2a:0f:0f:a5:f7:
         b7:3a:59:e7:ac:64:0d:99:80:e1:b8:eb:ac:98:29:eb:6b:e0:
         cf:99:77:e5:46:dd:37:17:38:c0:8e:02:f8:d6:c9:ba:8e:d3:
         4a:e1:1e:7e:4d:a3:d4:50:fb:b7:36:7b:b7:7b:a0:92:97:49:
         b6:81:26:91:9b:51:07:0e:15:01:c9:74:a3:3f:80:e3:c5:9e:
         2b:96:fc:19:33:8f:0a:fc:42:07:c0:10:a4:17:d3:5d:26:af:
         a1:ae:e9:f4:51:c3:3e:46:d4:fc:6f:5d:34:2f:08:8e:7a:c4:
         50:b5:04:a1:c2:84:e3:07:0a:3c:51:8b:67:d1:79:e6:47:5c:
         87:7d:c4:85:a5:5a:16:4d:7c:f9:b7:86:85:51:0f:98:4b:05:
         76:a6:72:96:76:0b:a4:be:17:62:0b:1c:a4:50:dd:5f:b5:33:
         4b:b3:8e:95:b5:7d:27:0b:86:2e:a4:fb:4f:0c:b5:da:30:af:
         c3:68:22:b6:49:91:98:8b:8a:6d:72:7d:bb:10:48:48:71:8d:
         3d:52:b9:76:a2:01:fd:b4:f0:04:9c:76:91:f9:89:af:34:3c:
         cd:f0:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----