Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Jp4BqiTc0IPBIEJlUyklOl-sdpc.roa
File:                     Jp4BqiTc0IPBIEJlUyklOl-sdpc.roa (raw, json)
Hash identifier:          /gDyWIJ3icqGE57p5Von627Sgu1AApSiB1cqI/TfAPQ=
Subject key identifier:   26:9E:01:AA:24:DC:D0:83:C1:20:42:65:53:29:25:3A:5F:AC:76:97
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       03B28615
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Jp4BqiTc0IPBIEJlUyklOl-sdpc.roa
Signing time:             Fri 01 Apr 2022 22:13:35 +0000
ROA not before:           Fri 01 Apr 2022 22:13:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207588
IP address blocks:        141.11.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62031381 (0x3b28615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr  1 22:13:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=269e01aa24dcd083c12042655329253a5fac7697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:28:a1:37:82:ee:89:e4:a9:97:df:31:34:
                    1f:93:bd:d4:03:05:c3:ee:73:ab:7d:b3:44:68:9c:
                    26:a6:3d:c9:57:7a:dc:95:56:12:ee:95:04:19:56:
                    ae:a2:8a:78:6a:64:32:83:78:64:43:ee:4f:06:ed:
                    86:23:ca:9e:fa:fc:eb:87:51:c3:d7:66:69:eb:4f:
                    9c:7c:ff:46:36:9c:2a:0e:a1:ca:51:43:d0:87:7c:
                    83:bf:fa:86:60:1e:c1:61:cf:1d:5b:d4:d9:8b:de:
                    1a:db:fa:25:da:fd:7d:11:56:ab:93:93:6b:2f:07:
                    b7:d5:08:11:f8:86:64:3d:98:10:27:3b:d5:42:bd:
                    82:e2:b6:1a:bc:12:d0:23:a7:83:0f:8b:6e:a9:ce:
                    6e:6a:86:7d:f3:b2:25:5d:74:a1:49:0d:e2:78:62:
                    86:f2:ec:be:7a:a7:f8:7f:af:f8:aa:e6:d1:c0:61:
                    e0:4f:5a:69:a9:41:d0:af:bf:13:5a:44:3c:37:4a:
                    40:3d:06:52:8f:5f:ce:f5:58:b3:56:ad:c8:96:99:
                    30:80:3b:71:55:dc:cf:71:56:d6:78:eb:90:c7:ff:
                    ea:ef:2e:f5:6a:82:83:c6:9f:bc:00:59:7e:fd:bf:
                    86:56:b5:70:c8:96:39:5b:35:d8:e9:51:60:c4:fe:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9E:01:AA:24:DC:D0:83:C1:20:42:65:53:29:25:3A:5F:AC:76:97
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Jp4BqiTc0IPBIEJlUyklOl-sdpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:39:8b:78:0e:ea:82:c0:93:4e:61:fa:15:18:95:a9:8a:dd:
         46:46:33:bb:4f:e8:4b:cd:17:43:7d:38:68:08:5c:05:36:58:
         f7:07:fd:f4:cc:b5:50:3f:33:f3:3e:ef:86:0a:02:5d:39:45:
         1d:f0:57:fc:6d:07:f0:d0:fa:20:9e:cc:4f:c6:f8:94:42:5f:
         c2:93:40:de:73:67:d5:a1:55:be:e4:c6:4c:c8:67:75:37:dd:
         54:c5:54:ea:f6:c7:23:7b:48:a1:1a:af:0e:2c:69:80:7d:53:
         57:ca:2d:90:be:20:21:d0:98:4e:54:e2:6c:a0:d3:ce:f5:dd:
         8e:d9:dd:56:ca:f0:7c:af:74:50:fd:69:e5:cc:9c:7f:42:0c:
         59:8d:dc:39:ff:37:a2:55:9c:97:f4:2b:10:72:77:aa:b4:07:
         69:f0:a7:b2:41:66:52:f4:d1:b1:cc:2d:fc:ec:45:8a:b5:31:
         09:fd:94:c4:f7:04:9d:4c:20:57:7c:6c:95:91:a1:5f:ad:0e:
         3d:2a:0d:80:fc:26:e7:b2:3b:cc:5b:2b:03:08:5d:38:12:e7:
         dc:8d:12:f4:42:8f:72:1a:18:7f:a9:67:5a:ae:e5:0e:32:d0:
         bb:95:e3:96:bd:a0:cb:27:7f:19:c7:a9:42:76:c3:75:94:e5:
         45:3b:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----