Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa
File:                     Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa (raw, json)
Hash identifier:          9WG4nL8GuRDoJA4+M+4y6SLEkqm8yBzNRX9zln+EcDs=
Subject key identifier:   05:FF:2F:6A:21:A9:E9:6F:F3:54:41:B0:88:74:8F:8E:58:42:5D:E5
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       045DD12D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa
Signing time:             Wed 04 May 2022 12:15:30 +0000
ROA not before:           Wed 04 May 2022 12:15:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        141.11.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73257261 (0x45dd12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  4 12:15:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05ff2f6a21a9e96ff35441b088748f8e58425de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:15:91:6c:6c:63:d2:a7:c1:0d:9a:ef:64:
                    a3:7b:21:51:4f:9d:1e:e4:95:5e:e1:cf:9c:ae:af:
                    1c:f6:d3:6e:a2:32:7d:6d:0d:36:4f:b8:39:55:b3:
                    1d:69:af:24:f4:27:29:05:b6:12:5a:c8:4c:e9:c3:
                    01:0b:03:df:2a:62:f8:ab:cc:a0:c9:01:0f:04:64:
                    ab:e4:4e:a4:a1:3a:45:50:5b:4a:8e:9d:f6:c0:c8:
                    66:d6:33:94:96:94:dd:32:f4:88:c2:fa:0c:d2:46:
                    dc:41:6f:c8:f5:8e:65:b1:d1:11:cf:ae:16:d3:31:
                    73:52:5f:eb:1b:64:24:27:e6:4c:a0:22:d6:5d:c7:
                    b3:65:78:2c:94:09:b5:6c:68:b9:f8:83:09:42:5f:
                    5f:96:e8:36:90:6d:56:59:a1:ec:d6:17:6d:97:f8:
                    30:79:97:b6:b5:f8:14:fb:2e:09:26:dd:bb:b4:61:
                    23:1f:ea:75:cc:88:53:bb:ef:f3:59:40:e4:59:48:
                    15:1d:dc:13:67:93:ea:4c:ad:1a:9b:34:0f:0e:03:
                    ca:7e:28:ce:e0:70:ea:14:97:d2:2f:ee:6e:76:fb:
                    ce:c1:d2:e8:ec:d3:c4:92:9e:4b:a4:0d:f8:e9:37:
                    4c:46:22:da:f4:ea:11:34:59:7a:07:ed:40:3c:01:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FF:2F:6A:21:A9:E9:6F:F3:54:41:B0:88:74:8F:8E:58:42:5D:E5
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:06:e5:29:88:47:99:98:67:53:b1:30:0f:03:30:fe:50:7f:
         40:93:26:ec:16:b0:77:6f:94:bb:87:7a:33:00:87:59:b1:b2:
         3f:a3:25:73:5f:86:fd:71:cb:f5:4a:a2:a2:1d:43:88:54:8e:
         6d:7c:43:57:da:ab:0b:4f:ce:58:08:99:0c:9d:7a:4e:2f:1e:
         84:9f:af:ac:90:5d:43:aa:b6:2d:4a:e3:28:e2:11:83:b4:b7:
         e8:13:54:c2:55:4d:32:13:d2:b6:95:54:57:5f:dd:3f:07:db:
         ae:d8:13:72:68:94:a3:2b:e0:4d:5a:f0:17:0e:cd:aa:22:a8:
         2a:f3:ea:3a:c7:4a:13:d2:ff:71:6f:6e:0d:9f:b7:e9:e7:15:
         51:ee:88:94:d9:51:ac:1e:fa:b0:77:89:c0:54:59:f1:06:29:
         90:98:bc:43:44:a0:60:07:6b:03:d9:27:98:63:ee:1a:76:18:
         3e:03:a5:f8:f7:52:4b:52:aa:f8:63:bc:a4:06:88:6d:92:c3:
         be:03:01:05:34:8e:79:a4:32:03:40:85:94:b6:4f:cf:71:d2:
         8b:d3:d2:45:55:07:ee:60:63:55:35:3d:06:19:32:16:8d:b8:
         9d:fc:f7:9b:4f:51:02:23:c5:e7:3c:03:b7:b8:a1:b5:cb:52:
         29:f0:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----