Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/1ChYJh7LJPCr3eOd-xxW_cWk7Ww.roa
File:                     1ChYJh7LJPCr3eOd-xxW_cWk7Ww.roa (raw, json)
Hash identifier:          sDL5ebx38y/2FKe1hvx8eYMj2X9mzDP4RHIh8eGG3to=
Subject key identifier:   D4:28:58:26:1E:CB:24:F0:AB:DD:E3:9D:FB:1C:56:FD:C5:A4:ED:6C
Certificate issuer:       /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial:       018CC9B8815E7C6095985EF9FF04ED7E301A
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/1ChYJh7LJPCr3eOd-xxW_cWk7Ww.roa
Signing time:             Tue 02 Jan 2024 10:29:21 +0000
ROA not before:           Tue 02 Jan 2024 10:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208135
IP address blocks:        45.158.40.0/22 maxlen: 24
                          2a0f:5380::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:b8:81:5e:7c:60:95:98:5e:f9:ff:04:ed:7e:30:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
        Validity
            Not Before: Jan  2 10:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d42858261ecb24f0abdde39dfb1c56fdc5a4ed6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:81:f8:51:83:9a:3f:ab:fc:a4:f1:bb:7a:
                    09:09:ae:25:d0:f0:69:47:2c:17:f0:b2:bf:db:e6:
                    11:40:e2:0e:ad:6f:d6:53:54:c6:42:3b:5d:0a:e8:
                    d5:02:7e:53:65:31:3f:d2:36:7a:cc:43:b2:6b:bf:
                    a7:eb:8f:c5:71:4c:be:f2:83:8a:89:2d:77:b4:b9:
                    41:41:a6:21:df:9f:8f:40:5e:7d:9d:43:22:60:5d:
                    52:fb:20:8d:e7:74:a2:20:8b:19:f6:d0:8b:8d:8e:
                    d2:c9:3d:78:75:dd:f5:3b:8f:e4:cc:fe:cf:9d:bb:
                    74:21:6f:60:54:cb:f1:49:16:f0:88:67:95:30:c1:
                    dc:c5:44:c5:c2:4d:25:dd:e8:7f:84:08:fa:7a:b9:
                    6d:85:a5:23:c5:fa:22:b5:04:1e:06:7a:68:88:43:
                    e4:94:8c:a3:03:36:47:20:f7:b5:48:61:65:75:33:
                    bc:2d:68:84:c4:cf:2f:54:d2:99:ec:9b:d2:e8:66:
                    c7:15:63:e5:84:14:45:ab:b1:23:d9:52:2c:a7:39:
                    84:b8:79:80:ee:44:3a:6c:57:2d:3a:a7:1c:d2:44:
                    f9:06:44:d6:cc:cf:6b:1a:5a:44:5f:a3:c5:2c:17:
                    1b:a7:1d:0f:4e:0f:d1:0d:99:a1:c9:12:48:ae:74:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:58:26:1E:CB:24:F0:AB:DD:E3:9D:FB:1C:56:FD:C5:A4:ED:6C
            X509v3 Authority Key Identifier:
                keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/1ChYJh7LJPCr3eOd-xxW_cWk7Ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.40.0/22
                IPv6:
                  2a0f:5380::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:57:b2:e1:b9:66:f7:bb:a0:ad:dc:7b:9c:2e:dd:a6:6c:07:
         33:76:5e:b9:11:4e:7f:69:86:2b:67:8e:81:e6:6f:63:c8:c4:
         00:0c:de:f0:7c:ac:35:fe:52:ca:a3:44:62:6b:59:0f:53:bf:
         24:66:41:4d:e5:34:1a:9c:82:87:7a:c2:64:43:83:48:cc:3f:
         56:3e:94:9d:25:b1:f4:e6:48:7c:9e:37:8c:88:df:0f:a0:14:
         bf:66:98:7e:af:3b:a4:4d:3c:ba:ce:c3:04:ce:7b:c5:c0:c1:
         85:15:b4:f3:a1:7f:41:52:73:31:7e:2f:f2:a3:4c:28:66:5c:
         e1:7f:81:97:53:f9:04:48:ae:f1:84:3b:b0:3c:05:48:0c:13:
         93:f5:e7:4d:77:83:67:0d:b9:b6:e4:5d:2e:0d:f4:b9:a1:ae:
         cd:a9:19:65:e7:b0:7d:e5:5d:3e:5b:7f:41:2c:61:ae:a1:ea:
         21:7a:92:c5:b7:36:80:7d:e0:f7:bd:19:77:ef:f1:08:18:2b:
         38:1f:ae:8d:0c:ac:1e:55:7f:58:72:07:41:6b:aa:cc:b5:e1:
         2f:5d:ae:ac:f6:70:31:6c:24:65:e0:6e:82:14:c3:ab:af:e9:
         09:2f:d4:15:0a:08:46:c5:38:e3:b4:24:e8:9b:4a:0f:b2:df:
         7b:5d:0d:68
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJuIFefGCVmF75/wTtfjAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj
ZjVhYzcwHhcNMjQwMTAyMTAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDI4NTgyNjFlY2IyNGYwYWJkZGUzOWRmYjFjNTZmZGM1YTRlZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gSB+FGDmj+r/KTxu3oJCa4l0PBp
RywX8LK/2+YRQOIOrW/WU1TGQjtdCujVAn5TZTE/0jZ6zEOya7+n64/FcUy+8oOK
iS13tLlBQaYh35+PQF59nUMiYF1S+yCN53SiIIsZ9tCLjY7SyT14dd31O4/kzP7P
nbt0IW9gVMvxSRbwiGeVMMHcxUTFwk0l3eh/hAj6erlthaUjxfoitQQeBnpoiEPk
lIyjAzZHIPe1SGFldTO8LWiExM8vVNKZ7JvS6GbHFWPlhBRFq7Ej2VIspzmEuHmA
7kQ6bFctOqcc0kT5BkTWzM9rGlpEX6PFLBcbpx0PTg/RDZmhyRJIrnQCyQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNQoWCYeyyTwq93jnfscVv3FpO1sMB8GA1UdIwQY
MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct
OTg4NmNiMWI2NDBlLzEvMUNoWUpoN0xKUENyM2VPZC14eFdfY1drN1d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl
LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ4oMA0E
AgACMAcDBQMqD1OAMA0GCSqGSIb3DQEBCwUAA4IBAQBpV7LhuWb3u6Ct3HucLt2m
bAczdl65EU5/aYYrZ46B5m9jyMQADN7wfKw1/lLKo0Ria1kPU78kZkFN5TQanIKH
esJkQ4NIzD9WPpSdJbH05kh8njeMiN8PoBS/Zph+rzukTTy6zsMEznvFwMGFFbTz
oX9BUnMxfi/yo0woZlzhf4GXU/kESK7xhDuwPAVIDBOT9edNd4NnDbm25F0uDfS5
oa7NqRll57B95V0+W39BLGGuoeohepLFtzaAfeD3vRl37/EIGCs4H66NDKweVX9Y
cgdBa6rMteEvXa6s9nAxbCRl4G6CFMOrr+kJL9QVCghGxTjjtCTom0oPst97XQ1o
-----END CERTIFICATE-----