Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/QI_Y_oJKSYHIwuRbyXyvtjsFyQU.roa
File:                     QI_Y_oJKSYHIwuRbyXyvtjsFyQU.roa (raw, json)
Hash identifier:          64w4q8KtfzHAD6fUGCFELZmevZfreG07fPHPwUv3knQ=
Subject key identifier:   40:8F:D8:FE:82:4A:49:81:C8:C2:E4:5B:C9:7C:AF:B6:3B:05:C9:05
Certificate issuer:       /CN=f864314dccd6d43dbd7f3543160741e7723b17de
Certificate serial:       0800D5C2
Authority key identifier: F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GQxTczW1D29fzVDFgdB53I7F94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/QI_Y_oJKSYHIwuRbyXyvtjsFyQU.roa
Signing time:             Sat 01 Jan 2022 10:54:48 +0000
ROA not before:           Sat 01 Jan 2022 10:54:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34373
IP address blocks:        45.128.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134272450 (0x800d5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f864314dccd6d43dbd7f3543160741e7723b17de
        Validity
            Not Before: Jan  1 10:54:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=408fd8fe824a4981c8c2e45bc97cafb63b05c905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:47:a6:73:87:19:f1:28:49:17:ab:0a:92:
                    dc:dd:43:7a:8e:e5:30:ca:83:fe:6f:95:17:8d:09:
                    d0:84:16:ef:51:ba:5d:b9:32:24:1f:f1:8f:48:4d:
                    cd:70:58:5e:f4:9c:74:d0:1b:3e:60:12:97:84:79:
                    44:a8:dd:70:55:b0:af:64:77:4a:b1:08:e3:2c:b8:
                    c0:90:98:37:54:47:16:df:42:77:bb:bb:a1:e7:14:
                    87:81:a3:7e:a4:57:a6:21:74:44:84:87:77:e3:ae:
                    41:77:f6:bf:2a:77:9d:1c:4e:52:9f:99:eb:75:9c:
                    65:8c:b3:4c:80:49:0e:83:fa:f2:66:f6:cb:98:3e:
                    77:6d:f5:d9:ce:c2:3f:cb:b2:0c:18:d6:f5:23:8e:
                    1a:fe:51:b7:14:18:96:93:8f:cf:8b:d5:32:bf:96:
                    e1:ad:63:e6:23:1f:af:40:ed:21:97:bf:ca:d9:a0:
                    38:33:41:67:8a:81:20:38:6d:0e:a4:8c:4b:00:c6:
                    7b:c2:86:02:0b:0c:16:d6:38:10:f7:ed:6d:66:f2:
                    f3:64:00:c0:19:dd:eb:16:f2:03:bd:6c:ef:60:a1:
                    34:17:d2:fd:23:6f:8f:c1:c5:4e:d8:61:ae:ad:71:
                    94:27:8c:1b:c3:f1:b5:fc:54:5b:57:9d:b4:b5:b0:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8F:D8:FE:82:4A:49:81:C8:C2:E4:5B:C9:7C:AF:B6:3B:05:C9:05
            X509v3 Authority Key Identifier:
                keyid:F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GQxTczW1D29fzVDFgdB53I7F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/QI_Y_oJKSYHIwuRbyXyvtjsFyQU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/1-GQxTczW1D29fzVDFgdB53I7F94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:73:c7:9e:55:7c:ea:c1:dd:2c:78:36:41:f8:ea:8a:33:d3:
         26:29:75:8d:b9:1f:ec:1e:09:7d:3e:2a:0e:5c:9e:7a:bc:6a:
         fb:e7:87:62:0b:af:00:d3:0c:a6:d4:38:61:41:92:11:09:31:
         4a:25:74:29:e7:bc:e1:b3:67:ea:f7:87:49:a7:75:a1:a0:6f:
         59:ce:9a:c0:d4:4e:a5:cd:93:37:67:ca:18:6c:57:2f:78:b9:
         a8:74:3f:a8:4e:11:1d:46:38:e8:4c:25:f9:cb:66:4d:08:d5:
         80:b3:47:3d:74:72:7b:2a:7a:67:ca:9c:08:97:6c:82:90:7d:
         42:df:23:a2:55:87:b7:33:d4:24:7b:6b:a5:17:f1:9f:21:06:
         2b:06:47:b3:06:96:1b:d6:a3:16:5e:9f:0a:45:45:4c:31:6d:
         94:0e:a2:95:bf:d3:02:11:61:5c:a8:50:67:c1:11:ef:53:fc:
         6a:fa:39:5f:5e:c7:55:16:5c:f1:3a:05:96:25:3e:f4:73:99:
         27:ce:9f:99:33:61:39:15:00:76:18:ef:80:da:eb:4f:d4:ca:
         45:ba:2e:7a:f7:25:db:f3:ff:56:ba:d6:f8:78:a7:02:87:09:
         c7:ce:d1:a6:e3:6c:f3:63:c1:75:37:03:6d:6b:85:63:a5:3e:
         5f:c3:6f:34
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECADVwjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODY0MzE0ZGNjZDZkNDNkYmQ3ZjM1NDMxNjA3NDFlNzcyM2IxN2RlMB4XDTIyMDEw
MTEwNTQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDA4ZmQ4ZmU4MjRh
NDk4MWM4YzJlNDViYzk3Y2FmYjYzYjA1YzkwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMskR6ZzhxnxKEkXqwqS3N1Deo7lMMqD/m+VF40J0IQW71G6
XbkyJB/xj0hNzXBYXvScdNAbPmASl4R5RKjdcFWwr2R3SrEI4yy4wJCYN1RHFt9C
d7u7oecUh4GjfqRXpiF0RISHd+OuQXf2vyp3nRxOUp+Z63WcZYyzTIBJDoP68mb2
y5g+d2312c7CP8uyDBjW9SOOGv5RtxQYlpOPz4vVMr+W4a1j5iMfr0DtIZe/ytmg
ODNBZ4qBIDhtDqSMSwDGe8KGAgsMFtY4EPftbWby82QAwBnd6xbyA71s72ChNBfS
/SNvj8HFTthhrq1xlCeMG8PxtfxUW1edtLWwhMECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBRAj9j+gkpJgcjC5FvJfK+2OwXJBTAfBgNVHSMEGDAWgBT4ZDFNzNbUPb1/
NUMWB0HncjsX3jAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtR1F4VGN6VzFEMjlmelZERmdkQjUzSTdGOTQuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2Y2LzU4ZjU5ZS1hOGJmLTQyZjMtODU1Yi1jNTBkMmRlODYwZjQv
MS9RSV9ZX29KS1NZSEl3dVJieVh5dnRqc0Z5UVUucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2
LzU4ZjU5ZS1hOGJmLTQyZjMtODU1Yi1jNTBkMmRlODYwZjQvMS8xLUdReFRjelcx
RDI5ZnpWREZnZEI1M0k3Rjk0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBhc8eeVXzqwd0seDZB+OqKM9MmKXWNuR/sHgl9PioOXJ56vGr754diC68A
0wym1DhhQZIRCTFKJXQp57zhs2fq94dJp3WhoG9ZzprA1E6lzZM3Z8oYbFcveLmo
dD+oThEdRjjoTCX5y2ZNCNWAs0c9dHJ7KnpnypwIl2yCkH1C3yOiVYe3M9Qke2ul
F/GfIQYrBkezBpYb1qMWXp8KRUVMMW2UDqKVv9MCEWFcqFBnwRHvU/xq+jlfXsdV
FlzxOgWWJT70c5knzp+ZM2E5FQB2GO+A2utP1MpFui569yXb8/9Wutb4eKcChwnH
ztGm42zzY8F1NwNta4VjpT5fw280
-----END CERTIFICATE-----