Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa
File:                     30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa (raw, json)
Hash identifier:          chHAJ7VQ8iXkdzSyBz4uUklHHjXmRl3+fr0NhM4fLzo=
Subject key identifier:   DF:40:73:F5:E8:44:64:29:4E:3B:85:D3:72:AD:E6:FD:C7:C0:67:F3
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04C23DB4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa
Signing time:             Fri 20 May 2022 14:03:29 +0000
ROA not before:           Fri 20 May 2022 14:03:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79838644 (0x4c23db4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 20 14:03:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df4073f5e84464294e3b85d372ade6fdc7c067f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:b6:f6:2b:a3:00:53:34:87:d6:3b:7b:af:
                    4e:e6:89:4f:d9:eb:61:ce:93:64:62:86:86:48:5e:
                    45:96:27:03:2a:00:de:ef:2e:51:a4:dd:31:01:5e:
                    c8:2c:0b:4b:92:af:97:be:92:ee:c3:3c:ad:c9:e7:
                    cc:08:65:ef:2b:ca:a6:bc:08:55:ec:9f:30:e1:e1:
                    6f:a0:09:f8:2f:10:97:00:ef:13:de:d8:96:76:76:
                    7c:a7:19:22:f5:15:9a:0a:39:59:29:30:08:83:c5:
                    1d:7c:08:1d:df:f8:e4:de:5e:12:ab:79:35:6b:18:
                    b4:a1:1a:9f:87:5f:59:fd:39:c4:fe:1d:66:e5:d2:
                    fa:c1:65:6f:9b:c8:6a:ab:c8:ce:83:81:4d:bd:b6:
                    60:b4:51:1d:1f:2f:9e:dc:b2:86:d2:d2:69:53:6e:
                    10:e3:3b:8e:e6:01:de:a8:a5:71:85:2d:41:3e:48:
                    16:57:4f:96:d3:53:e0:8e:b2:de:cd:5b:9c:e9:65:
                    ee:88:34:79:fe:94:e4:ff:d7:d4:d9:73:5a:1c:df:
                    19:72:f9:28:7b:d1:35:d5:8d:2d:f9:bf:5e:16:40:
                    83:25:46:19:42:c7:24:75:8a:05:51:6f:8a:8a:6f:
                    1a:97:76:d1:e1:ed:61:a0:10:f0:5f:9f:ef:8f:7f:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:73:F5:E8:44:64:29:4E:3B:85:D3:72:AD:E6:FD:C7:C0:67:F3
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:43:06:84:23:2b:35:cc:f8:da:4a:53:99:27:2c:68:0a:f3:
         43:67:2b:ac:7c:fb:12:de:ba:be:eb:c9:3d:b8:45:e4:70:51:
         c3:bd:e0:a6:43:b7:80:10:c5:8c:03:8b:59:a8:30:97:44:ea:
         e3:95:da:44:e5:95:1c:5e:a2:cc:8e:ae:60:fb:7e:f7:b1:04:
         64:be:77:f9:0f:be:7e:83:08:f4:c3:91:4d:04:30:89:03:63:
         e5:3d:f5:fe:3e:a7:6a:1d:cb:a0:45:4e:ac:24:af:3e:4e:ec:
         56:31:24:76:ba:96:95:49:a0:96:d8:2e:be:ef:30:81:22:65:
         59:3f:f8:59:8c:a3:40:9d:d3:44:71:50:11:16:46:a9:f5:37:
         3a:04:5d:44:f2:bb:26:e4:cd:30:ca:07:65:7d:98:fe:ca:10:
         06:a9:83:20:2e:67:35:44:4d:81:c3:30:29:a6:d6:bd:cd:e5:
         7a:0b:0e:ac:b7:44:02:f2:9f:d0:ea:a8:cf:21:9c:a7:4e:53:
         1d:b6:76:43:a8:8d:16:09:3e:e1:3b:f8:d6:6f:4d:07:97:45:
         d4:66:86:20:7c:53:15:b0:bf:65:20:50:54:61:2c:cc:59:dd:
         9e:e0:df:f3:4a:a4:c2:11:33:2a:61:c1:bd:b9:0d:66:3b:80:
         d3:61:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----