Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/W2TqMjeBh7iuU4jfI4-8CDirdjU.roa
File:                     W2TqMjeBh7iuU4jfI4-8CDirdjU.roa (raw, json)
Hash identifier:          lkxeE1cNlZneQm5n/YmbZfRPFXet7ewUpO2yV3a5DLg=
Subject key identifier:   5B:64:EA:32:37:81:87:B8:AE:53:88:DF:23:8F:BC:08:38:AB:76:35
Certificate issuer:       /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial:       018B91E5C498B2FBFE3937F2742A01F81C63
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/W2TqMjeBh7iuU4jfI4-8CDirdjU.roa
Signing time:             Thu 02 Nov 2023 21:17:16 +0000
ROA not before:           Thu 02 Nov 2023 21:17:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202539
IP address blocks:        45.12.200.0/24 maxlen: 24
                          2a0e:bf00::/32 maxlen: 48
                          2001:67c:1160::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:91:e5:c4:98:b2:fb:fe:39:37:f2:74:2a:01:f8:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
        Validity
            Not Before: Nov  2 21:17:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b64ea32378187b8ae5388df238fbc0838ab7635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:58:a4:21:f3:53:e9:b0:e1:bb:5b:76:f2:
                    ea:6e:d2:11:60:97:e9:e3:54:5a:90:5c:6b:34:39:
                    2e:55:4c:49:d3:54:16:ab:e0:0d:65:4d:88:eb:3d:
                    59:2b:9f:77:76:36:1b:cc:52:e9:0c:91:64:81:ad:
                    18:dc:36:0f:87:b4:2b:f3:2e:68:69:79:22:44:11:
                    a2:4d:5f:fe:09:ec:b0:1f:21:50:02:e1:9d:cb:dd:
                    03:2f:f8:0d:66:70:28:91:a1:c1:a1:d2:99:cd:3c:
                    0f:dc:af:5a:ca:d3:5e:8b:14:16:f9:0e:0c:a4:18:
                    e2:e7:59:b9:41:13:19:f8:a6:85:10:e5:0d:2c:63:
                    4a:a7:fd:26:66:9f:7e:97:f5:66:3a:28:71:c5:dc:
                    0b:e1:85:11:2d:2b:2d:a6:62:9d:12:64:d8:59:b3:
                    4c:0c:87:0c:e9:9b:61:54:da:67:ae:9f:34:fe:70:
                    da:7a:9b:e2:a0:a1:12:53:60:84:d8:98:98:8b:9d:
                    6f:ed:8c:61:c7:7d:8c:ce:c7:74:a6:78:90:2c:96:
                    3a:4d:b3:96:66:8b:ff:ac:a1:13:fd:b0:1d:27:fe:
                    69:2f:d9:2c:15:69:56:02:88:1f:0d:a0:20:28:e6:
                    75:d2:15:88:a6:92:cd:c1:1c:bc:48:89:bc:9c:2b:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:EA:32:37:81:87:B8:AE:53:88:DF:23:8F:BC:08:38:AB:76:35
            X509v3 Authority Key Identifier:
                keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/W2TqMjeBh7iuU4jfI4-8CDirdjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.200.0/24
                IPv6:
                  2001:67c:1160::/48
                  2a0e:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:6e:ab:88:33:8b:bf:1d:d8:83:35:5e:9f:28:29:23:0c:
         fd:3b:2a:73:91:61:e7:eb:63:28:7f:92:a3:66:04:ce:89:a2:
         e4:5a:b5:da:b2:1b:d2:1b:2f:fa:d0:d5:82:7e:db:d9:07:a0:
         25:9b:fc:1e:5b:d7:77:88:a7:e6:92:79:da:96:49:5f:2f:b7:
         3e:f2:03:9f:c1:dd:a5:3c:af:a7:73:77:91:7f:91:c9:55:3a:
         05:4f:ec:b8:d0:02:74:fb:96:8c:0c:1d:04:93:e0:05:81:16:
         5b:b5:f5:51:c2:9d:94:b1:09:42:b8:ad:b2:e3:a1:39:6c:21:
         a7:4b:93:2a:74:1e:b9:a3:5b:21:6d:0e:9f:9f:3c:43:30:64:
         7b:82:46:a8:b5:cf:3b:1e:f7:2f:71:92:60:0c:a4:1d:af:10:
         b0:96:d3:00:0a:58:91:8b:61:2c:70:2c:03:c6:b2:f0:cc:70:
         84:4b:fd:d7:7a:ba:62:26:54:e3:8f:f8:af:1e:6e:ad:d6:0b:
         83:a7:5c:1e:ef:4e:a8:c7:2b:a6:61:4f:6c:6a:8e:22:93:d3:
         5e:e1:85:97:d5:5e:69:29:52:97:13:f2:5d:04:ed:55:24:7e:
         fb:83:40:0b:a1:a5:0e:a4:4a:14:13:e0:7c:b5:b5:a3:d0:ff:
         b9:40:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----