Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6cTQSwfxMUKfmBlew5yd0uylCGk.roa
File:                     6cTQSwfxMUKfmBlew5yd0uylCGk.roa (raw, json)
Hash identifier:          J484RRX7yv1SX3gcZPCWqYVETn0O8MATs+D5RhX6iSE=
Subject key identifier:   E9:C4:D0:4B:07:F1:31:42:9F:98:19:5E:C3:9C:9D:D2:EC:A5:08:69
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       02D8FE5F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6cTQSwfxMUKfmBlew5yd0uylCGk.roa
Signing time:             Tue 01 Feb 2022 15:44:14 +0000
ROA not before:           Tue 01 Feb 2022 15:44:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2856
IP address blocks:        141.11.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47775327 (0x2d8fe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Feb  1 15:44:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9c4d04b07f131429f98195ec39c9dd2eca50869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:ca:1d:83:e5:b5:b6:02:35:31:ca:93:32:
                    7f:be:56:58:df:dc:d9:01:6c:79:bc:ec:ae:ac:ff:
                    22:a9:8d:82:1a:83:29:a9:3e:b9:fd:2d:9d:09:30:
                    ed:b5:00:16:87:ee:ce:00:42:7f:1e:c2:0f:44:07:
                    89:94:b1:30:09:ec:8f:2e:76:76:ac:b0:fc:51:85:
                    51:0b:ee:41:db:70:6c:5a:ea:3d:9b:0d:91:e3:1a:
                    c6:a4:f5:4c:db:91:ca:f9:f3:7b:3c:51:e2:4a:e0:
                    1b:7c:57:6c:76:d7:a0:d8:a9:e5:9f:de:db:80:e0:
                    a0:31:19:96:c5:95:0c:87:42:5f:20:e9:55:65:63:
                    05:54:3c:d7:c9:8b:bb:bc:2e:09:90:4f:29:3e:bf:
                    f0:dd:b6:cf:84:ac:29:6b:74:b4:7b:34:30:53:6f:
                    19:77:5c:37:6a:d4:9f:44:e5:4a:41:48:f6:66:0c:
                    0e:21:27:ef:e4:7d:f2:a0:05:d7:56:60:a1:ce:58:
                    c9:77:98:a3:88:7b:76:92:09:a0:5e:24:7d:85:c3:
                    0e:3c:02:a1:a1:5e:e4:a3:b2:da:a1:d5:41:16:a3:
                    d6:97:b8:f9:e9:18:c1:8d:99:53:ae:e9:c1:6e:5a:
                    26:74:b0:a4:cd:e2:23:5e:6f:a0:61:1d:f5:13:70:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:D0:4B:07:F1:31:42:9F:98:19:5E:C3:9C:9D:D2:EC:A5:08:69
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6cTQSwfxMUKfmBlew5yd0uylCGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:07:10:51:a3:91:30:df:9b:d3:8b:40:ad:2b:ee:c2:98:
         3e:3e:1c:5d:49:c2:41:04:a2:54:68:01:8f:c5:37:4b:c7:25:
         dc:6c:bb:f4:ef:56:58:03:ee:f4:8a:d0:0d:b6:cf:b5:a6:ad:
         78:38:1b:4a:2d:7b:10:f1:b3:f2:45:94:77:5f:5c:15:23:6d:
         46:43:e7:8f:fe:3e:1e:03:a3:b5:91:df:44:bd:0d:86:b8:03:
         9f:50:7e:8b:22:37:44:35:6e:09:16:61:57:d9:83:12:8b:ce:
         5a:7f:6f:46:8d:14:33:52:95:80:82:97:94:c1:fd:c8:e2:a5:
         bb:e7:1b:4f:29:09:c1:08:b1:fa:aa:fe:57:19:ff:4a:1c:32:
         13:af:67:df:1d:2e:38:84:e1:03:9b:0a:8f:ea:79:10:6c:c1:
         0d:38:93:64:02:3a:92:3d:e1:fc:a4:34:69:a6:b7:16:9e:7e:
         92:5c:ca:56:9c:96:1a:99:e0:08:a7:6c:98:6d:35:d6:6e:91:
         33:bd:b4:74:00:86:d6:24:b5:ec:67:e5:88:c7:95:a8:97:a6:
         3c:22:61:a2:4f:60:d9:42:19:ab:6a:b4:f6:13:03:21:51:d6:
         db:9c:aa:33:33:2c:e9:ca:6f:7e:c6:2e:f4:70:10:9b:00:70:
         a6:04:c7:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtj+XzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
MTE1NDQxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTljNGQwNGIwN2Yx
MzE0MjlmOTgxOTVlYzM5YzlkZDJlY2E1MDg2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpGyh2D5bW2AjUxypMyf75WWN/c2QFsebzsrqz/IqmNghqD
Kak+uf0tnQkw7bUAFofuzgBCfx7CD0QHiZSxMAnsjy52dqyw/FGFUQvuQdtwbFrq
PZsNkeMaxqT1TNuRyvnzezxR4krgG3xXbHbXoNip5Z/e24DgoDEZlsWVDIdCXyDp
VWVjBVQ818mLu7wuCZBPKT6/8N22z4SsKWt0tHs0MFNvGXdcN2rUn0TlSkFI9mYM
DiEn7+R98qAF11Zgoc5YyXeYo4h7dpIJoF4kfYXDDjwCoaFe5KOy2qHVQRaj1pe4
+ekYwY2ZU67pwW5aJnSwpM3iI15voGEd9RNwBIMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTpxNBLB/ExQp+YGV7DnJ3S7KUIaTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzZjVFFTd2Z4TVVLZm1CbGV3NXlkMHV5bENHay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo0LSDANBgkqhkiG9w0BAQsFAAOC
AQEAKeMHEFGjkTDfm9OLQK0r7sKYPj4cXUnCQQSiVGgBj8U3S8cl3Gy79O9WWAPu
9IrQDbbPtaateDgbSi17EPGz8kWUd19cFSNtRkPnj/4+HgOjtZHfRL0NhrgDn1B+
iyI3RDVuCRZhV9mDEovOWn9vRo0UM1KVgIKXlMH9yOKlu+cbTykJwQix+qr+Vxn/
ShwyE69n3x0uOIThA5sKj+p5EGzBDTiTZAI6kj3h/KQ0aaa3Fp5+klzKVpyWGpng
CKdsmG011m6RM720dACG1iS17GfliMeVqJemPCJhok9g2UIZq2q09hMDIVHW25yq
MzMs6cpvfsYu9HAQmwBwpgTH4g==
-----END CERTIFICATE-----