Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa
File:                     9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (raw, json)
Hash identifier:          VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=
Subject key identifier:   F4:DA:7F:AA:A5:07:36:14:6E:80:0F:F5:C4:1D:99:23:A1:A4:3D:17
Certificate issuer:       /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial:       0194228DE95E60F8F013A3420F9671456E21
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa
Signing time:             Wed 01 Jan 2025 15:48:33 +0000
ROA not before:           Wed 01 Jan 2025 15:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51269
IP address blocks:        45.157.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:e9:5e:60:f8:f0:13:a3:42:0f:96:71:45:6e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
        Validity
            Not Before: Jan  1 15:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f4da7faaa50736146e800ff5c41d9923a1a43d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:92:9c:a6:ff:34:a5:da:1c:2a:1d:46:5d:
                    60:d2:b2:a9:af:48:7f:6c:a6:ce:61:a4:23:d0:22:
                    56:bf:86:90:34:7b:5e:f9:19:3b:43:ed:b9:53:94:
                    68:65:03:ae:a3:c4:c2:57:49:f3:b9:05:52:99:e9:
                    83:79:db:19:f8:ef:4d:b5:e5:8a:c2:8d:1b:b6:5e:
                    fb:2c:91:e7:78:51:b6:ac:06:b1:db:bc:a5:a6:24:
                    2b:e9:75:c3:99:6d:86:d4:94:7c:83:68:5b:71:e9:
                    0b:9b:20:52:9e:b8:4d:c8:d0:85:06:3c:1e:cc:b5:
                    88:f3:16:c0:6e:b1:81:f6:6e:6c:51:c2:43:e1:4c:
                    15:33:fa:33:29:2b:4c:4f:c2:1a:98:f9:91:25:6a:
                    78:bc:88:d4:3d:df:07:51:5b:e7:6b:8c:f4:b4:5b:
                    06:0e:35:c0:e2:ba:dc:e6:c6:fb:80:d1:df:2f:77:
                    ef:59:2a:1b:30:ae:fb:81:70:be:9e:35:23:0c:57:
                    01:c4:61:1c:13:dc:cc:5b:63:e7:6c:3a:02:a9:ef:
                    3a:aa:97:ac:37:3a:97:7f:29:c3:8f:dd:50:2a:2f:
                    5a:9c:9f:82:4a:59:d0:e4:ba:90:47:53:7a:7a:71:
                    74:37:10:2c:c7:ce:be:a6:6f:81:fb:1f:cc:2e:cb:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:7F:AA:A5:07:36:14:6E:80:0F:F5:C4:1D:99:23:A1:A4:3D:17
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:0f:0b:44:b3:f9:ab:0e:15:1e:2b:af:a5:68:6e:8e:07:
         72:67:e6:fa:8d:cf:d2:e9:47:1e:52:9c:4b:7c:c3:51:10:89:
         a2:e8:ba:68:3d:c4:37:91:1f:97:ed:f1:d2:a0:bd:95:3e:df:
         1c:d2:7f:e2:16:84:fd:7d:b0:aa:d7:aa:ec:64:43:66:9a:c4:
         98:4b:bb:c5:37:b6:19:cc:53:ec:de:51:00:3b:71:05:00:8a:
         35:b0:c5:71:65:12:b0:0e:5c:63:a5:f3:8b:a8:b8:85:1e:1a:
         c7:be:44:8e:1b:ee:88:cc:9e:6a:2d:7f:18:f0:2f:1f:8f:c2:
         49:37:c0:77:1b:a6:db:0d:e1:d2:62:8b:c7:bf:26:9e:cd:b5:
         83:32:1b:e4:6d:8f:d5:13:79:4e:53:a2:ea:5a:f7:28:9d:e5:
         8c:3d:68:ae:0b:87:77:4b:47:97:bc:6d:14:d5:98:5b:df:8d:
         b5:9b:dc:bc:7f:b9:bd:c0:51:df:49:e8:88:41:dc:bb:6e:ad:
         3f:d4:4d:42:3f:43:f7:f6:92:dd:75:cf:cc:ce:a3:fa:4e:cd:
         22:9a:0d:b4:36:da:17:48:8f:9a:77:83:92:cc:7a:f4:c6:7e:
         63:c9:1c:8f:ce:e5:57:37:70:e9:b1:f0:38:14:5e:1f:17:05:
         35:0e:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----