Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_J766EpM_sOalRvom-p0vbIhnDE.roa
File:                     _J766EpM_sOalRvom-p0vbIhnDE.roa (raw, json)
Hash identifier:          t1ll571sSD5h+qHsHxueL1n1C66nnHMfEQ9XmH8krrY=
Subject key identifier:   FC:9E:FA:E8:4A:4C:FE:C3:9A:95:1B:E8:9B:EA:74:BD:B2:21:9C:31
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       02630AB8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_J766EpM_sOalRvom-p0vbIhnDE.roa
Signing time:             Sat 01 Jan 2022 08:03:19 +0000
ROA not before:           Sat 01 Jan 2022 08:03:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19437
IP address blocks:        141.11.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40045240 (0x2630ab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan  1 08:03:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc9efae84a4cfec39a951be89bea74bdb2219c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:f8:4b:82:03:fd:44:1a:49:99:53:0c:22:
                    ba:8b:a8:82:b3:97:d7:86:e8:eb:33:88:8d:68:20:
                    8c:c4:83:ac:4f:2b:89:35:fd:fc:74:e4:94:cd:82:
                    cf:2a:f6:b3:9c:69:43:f5:2e:7f:9b:5c:c4:31:83:
                    e6:b4:60:b7:a0:12:4f:83:65:6f:5a:40:cf:f6:7f:
                    f8:a5:cc:90:c0:90:1e:a3:19:88:c9:a7:f3:01:7b:
                    b8:25:82:82:24:d5:e5:c1:92:9b:0d:34:5d:d5:33:
                    85:7e:aa:f0:08:ab:ea:24:fb:02:51:29:3d:d6:0b:
                    01:ae:94:32:7d:e6:3e:62:a3:bd:22:6d:14:e6:65:
                    6e:6d:c9:f4:f0:38:bd:83:63:5f:27:97:9d:ff:b1:
                    58:b2:f7:53:3b:ef:e6:6f:05:45:18:32:90:f1:04:
                    29:49:1a:5a:84:8e:8a:2d:58:26:70:32:9b:c7:aa:
                    38:24:c5:11:cf:ff:ef:88:6f:03:da:4f:28:13:57:
                    79:59:03:cc:59:2b:97:47:79:52:a7:2f:8f:85:40:
                    b5:87:17:98:5b:3f:6f:53:bf:72:5d:16:cd:c9:e7:
                    e2:3e:d1:e7:23:10:7c:3b:89:2c:44:eb:2f:89:76:
                    6a:c8:5e:5d:36:5e:a0:ba:0b:f1:6a:3d:5c:08:3c:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:FA:E8:4A:4C:FE:C3:9A:95:1B:E8:9B:EA:74:BD:B2:21:9C:31
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_J766EpM_sOalRvom-p0vbIhnDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:88:9a:34:74:08:4f:dc:13:5a:6b:cb:fd:4d:5a:50:22:cc:
         03:26:77:d5:30:0c:b6:b6:91:e9:01:21:71:81:5b:8f:df:a6:
         5e:6b:75:dc:a9:96:a2:47:32:2a:98:1a:b3:33:19:18:ae:45:
         1a:49:fc:92:d7:5d:c7:de:1d:0d:34:8f:1f:4d:b5:5a:02:1a:
         ba:79:93:c1:e6:2e:79:6b:dd:e3:c4:96:67:77:70:7e:87:ae:
         26:c0:e9:74:4d:fc:d9:70:54:ba:05:47:09:3d:dc:40:b1:f2:
         1a:e7:e8:82:51:bb:de:33:90:a7:c8:bb:54:40:dd:62:72:03:
         ee:00:61:f2:c8:ac:a7:90:62:51:33:17:22:5b:86:97:84:21:
         07:2e:cf:67:fe:e5:c4:33:4e:93:e3:5c:63:5b:f6:39:90:73:
         c7:7d:11:44:f0:86:02:e0:d4:ae:58:7e:6b:95:6a:a1:64:f3:
         40:33:ba:17:39:aa:d7:fc:0c:78:6c:59:f8:18:6d:fc:2a:f0:
         4d:74:ad:ed:c0:67:bd:ba:bc:2a:7f:ee:ad:e7:e8:e6:2f:0f:
         44:fd:20:97:4c:ca:d7:75:b7:40:f3:ac:84:a3:8e:91:6b:9c:
         05:61:88:9f:06:fc:cc:4e:d2:e8:85:14:85:06:96:ab:8c:bb:
         79:9b:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----