Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/GyXkblbQZYsLJxTAxIIjzdytTw0.roa
File:                     GyXkblbQZYsLJxTAxIIjzdytTw0.roa (raw, json)
Hash identifier:          Flz4Kk6KRxkJkny8ZZFJB4zxSjjRIGa/9fLGf/Pkh5E=
Subject key identifier:   1B:25:E4:6E:56:D0:65:8B:0B:27:14:C0:C4:82:23:CD:DC:AD:4F:0D
Certificate issuer:       /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial:       01856E01CC54FCCBA398FEBFA01ABC6E82FE
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/GyXkblbQZYsLJxTAxIIjzdytTw0.roa
Signing time:             Sun 01 Jan 2023 15:44:49 +0000
ROA not before:           Sun 01 Jan 2023 15:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207990
IP address blocks:        45.158.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:cc:54:fc:cb:a3:98:fe:bf:a0:1a:bc:6e:82:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
        Validity
            Not Before: Jan  1 15:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b25e46e56d0658b0b2714c0c48223cddcad4f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:75:59:ba:46:2d:a4:c4:ff:d6:96:d0:7a:
                    14:b2:ea:c3:5f:e5:fb:11:dd:0b:47:da:69:44:07:
                    f3:1a:b4:98:24:54:fa:f3:c2:f6:21:fe:75:37:3c:
                    1c:f2:c1:9a:c2:93:32:f9:44:f0:c3:5c:95:10:c2:
                    91:b7:e0:1a:29:43:76:69:5d:bd:e1:49:61:2e:a0:
                    bc:b6:5d:27:b3:23:42:6d:1f:8c:5f:22:92:16:99:
                    c7:90:d9:10:de:9b:e9:3a:7a:e0:22:f6:58:e7:19:
                    07:5f:22:83:74:72:79:8d:4e:59:b2:6f:81:1f:48:
                    c3:14:e5:c7:29:6a:15:6e:a6:a3:25:ef:f7:77:25:
                    00:20:84:11:de:aa:38:89:0d:b4:70:59:97:8e:29:
                    df:e9:29:5f:e6:e2:74:a1:4c:86:72:70:7a:82:f8:
                    aa:f4:3e:74:ba:fb:c2:3b:91:dc:1e:5e:cc:d2:65:
                    17:f4:64:5c:88:bd:35:43:41:83:5f:8c:39:45:b5:
                    66:60:0f:ba:c2:6e:e2:5b:7b:14:53:2f:fc:0c:b2:
                    6a:91:65:1e:35:3c:a1:e9:da:02:ed:38:2b:35:d5:
                    e0:f5:38:4e:b6:0b:02:5e:63:76:b1:bb:68:77:ef:
                    00:46:61:7d:3c:ce:c9:98:6c:fe:24:cb:05:16:a8:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:E4:6E:56:D0:65:8B:0B:27:14:C0:C4:82:23:CD:DC:AD:4F:0D
            X509v3 Authority Key Identifier:
                keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/GyXkblbQZYsLJxTAxIIjzdytTw0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:05:0a:93:5d:30:3c:07:09:5e:90:63:1f:e4:37:a5:db:ca:
         22:fa:42:76:94:0b:17:45:ce:fa:5b:97:8a:6a:48:86:c8:e1:
         f1:a9:5d:63:d8:36:b9:ea:c3:05:90:02:04:c9:83:f5:ff:dd:
         47:52:f0:ea:4e:3a:45:a3:8a:ec:c4:90:15:e0:00:55:ad:f0:
         25:0e:65:64:29:34:81:ac:86:9d:5f:1d:fa:2a:83:37:5b:dd:
         d2:58:14:d0:b9:c0:8d:f5:d0:35:25:c6:e8:d6:46:56:19:44:
         4f:38:18:df:b7:79:6c:2e:c8:df:66:95:49:ff:ea:c2:e9:07:
         f2:92:a7:ef:1c:16:46:d1:77:68:84:ef:30:b7:cc:2b:43:71:
         53:ea:b5:02:11:f1:13:08:ca:e8:28:72:37:e7:ad:34:a1:63:
         ce:f7:41:09:fb:77:6e:1f:50:74:6f:d1:59:96:f6:78:52:ce:
         b8:0f:08:ea:9e:ec:09:d8:de:0c:59:6c:d4:f5:9d:5f:d8:e6:
         18:1f:0c:39:40:d7:8e:eb:2c:7b:e2:16:70:6c:94:5a:77:c7:
         38:0e:74:2f:b4:c2:3f:24:00:49:f7:2a:17:f8:8a:6f:d3:d5:
         6b:c3:49:30:cc:81:c5:1f:c7:3d:16:e9:ab:97:ad:36:b6:b8:
         0a:d5:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----