Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9VVJ7aWl41RR9pv8XvVybJqtJFw.roa
File:                     9VVJ7aWl41RR9pv8XvVybJqtJFw.roa (raw, json)
Hash identifier:          DdZENd+JcP/LtCDzXt9zAz/mHzfpi8ISeJr2v762Ung=
Subject key identifier:   F5:55:49:ED:A5:A5:E3:54:51:F6:9B:FC:5E:F5:72:6C:9A:AD:24:5C
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04A8D490
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9VVJ7aWl41RR9pv8XvVybJqtJFw.roa
Signing time:             Mon 16 May 2022 09:19:29 +0000
ROA not before:           Mon 16 May 2022 09:19:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        141.11.30.0/24 maxlen: 24
                          141.11.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78173328 (0x4a8d490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 16 09:19:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f55549eda5a5e35451f69bfc5ef5726c9aad245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:f1:1c:a9:4e:88:f9:03:4a:83:51:b8:76:
                    8d:c7:5f:f2:15:71:6c:9f:cf:16:c0:e0:dd:83:8f:
                    75:9b:1d:76:4c:ad:5e:cd:7b:0a:e5:ae:72:e0:2c:
                    c2:69:bd:3e:2f:e3:95:5c:9f:9f:fd:c8:49:51:5a:
                    2b:a1:d2:29:43:98:27:2f:61:cc:33:47:8e:11:0c:
                    cd:4c:ad:62:f3:71:39:f3:47:43:3e:6a:6d:13:38:
                    34:6b:db:fd:4d:5a:a1:26:89:72:2b:9a:9d:32:0b:
                    d6:f0:4f:fb:6a:fb:df:8b:24:36:6c:4c:06:11:55:
                    97:95:09:ff:e2:39:ac:71:ff:51:90:c6:25:38:50:
                    ad:0b:6b:6d:5c:24:fe:73:25:8b:96:a0:7e:cc:d8:
                    fc:a3:99:7b:1b:af:69:5a:44:e7:d2:2a:35:b5:c9:
                    ae:df:e9:57:8c:e3:98:e2:f3:e0:ea:fb:fd:37:3a:
                    18:3b:7f:5f:ce:3c:05:a3:60:7c:35:db:9b:71:96:
                    24:65:83:d0:3e:a2:13:37:6f:fa:55:5e:74:2a:dc:
                    79:7e:3e:fc:a7:02:4b:4d:de:ef:e6:bc:0e:99:6a:
                    37:24:af:2f:f2:0d:5f:df:8a:bb:fc:47:19:1d:cd:
                    05:bf:9c:3f:63:98:b0:b8:2f:23:c0:94:4d:57:ad:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:49:ED:A5:A5:E3:54:51:F6:9B:FC:5E:F5:72:6C:9A:AD:24:5C
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9VVJ7aWl41RR9pv8XvVybJqtJFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.30.0/24
                  141.11.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:db:8c:19:4f:4e:5f:c5:f3:53:2f:69:b6:7c:01:31:8f:
         a0:40:58:3c:26:7e:b7:b9:e4:c5:5d:79:43:d4:4a:d2:e2:d3:
         cd:4b:37:46:b8:63:2e:4a:fb:70:1f:49:33:f7:d5:73:97:f6:
         ea:ef:c5:5b:e2:f8:0e:14:9c:d0:c9:47:d8:c7:90:39:2a:66:
         77:43:49:1f:26:a9:0a:b1:ab:08:43:47:9b:e1:bb:1d:01:46:
         a2:2e:a6:7c:8c:7f:cb:bd:f6:e6:bd:49:90:ec:21:31:8b:e0:
         65:31:e5:fa:65:62:ca:79:fc:59:1c:44:69:ee:28:71:c9:89:
         12:48:dd:b1:05:92:6e:c5:b8:98:2a:4c:b8:8f:ce:08:ce:8a:
         86:00:45:b4:8c:ef:8e:24:dd:a6:a5:52:29:60:d6:f4:d6:58:
         fe:91:ec:9e:2e:bf:2d:43:13:1f:20:37:4e:f3:e0:e5:15:ed:
         90:f7:67:b5:5e:b2:a8:9a:e2:94:8f:9c:f5:30:6b:8a:f2:32:
         34:8e:b3:20:5e:87:10:b6:21:89:e3:80:4d:fd:a2:da:99:32:
         c2:2e:86:e5:12:5a:e7:ea:59:4f:03:be:60:5d:1e:51:dd:0f:
         ec:15:eb:01:e6:3f:16:9b:db:0d:1a:a4:64:3d:a5:17:0a:02:
         f5:c3:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----