Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cyr2yBn7AsopLJQJDR8Dbc47Hz0.roa
File:                     cyr2yBn7AsopLJQJDR8Dbc47Hz0.roa (raw, json)
Hash identifier:          grE5ZyERr7cB0u3qohETJdf7wLTB3GXOWLOpit+4JbE=
Subject key identifier:   73:2A:F6:C8:19:FB:02:CA:29:2C:94:09:0D:1F:03:6D:CE:3B:1F:3D
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0184347985B49C8260588394A5A9465439BD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cyr2yBn7AsopLJQJDR8Dbc47Hz0.roa
Signing time:             Tue 01 Nov 2022 18:34:50 +0000
ROA not before:           Tue 01 Nov 2022 18:34:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209737
IP address blocks:        141.11.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:34:79:85:b4:9c:82:60:58:83:94:a5:a9:46:54:39:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Nov  1 18:34:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=732af6c819fb02ca292c94090d1f036dce3b1f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:1f:ad:94:3d:dc:ea:4e:0d:19:34:01:fa:
                    70:fc:8e:66:11:15:0e:f5:6b:d4:7a:25:15:5b:59:
                    f7:ef:da:eb:d5:3d:72:61:8d:da:9d:23:2b:c7:e4:
                    e6:8f:2c:eb:7d:73:e6:80:0e:13:b6:8d:3e:77:f6:
                    89:9b:9a:e0:62:63:f5:c7:7a:1d:cb:61:f1:08:ca:
                    71:31:d6:85:7a:2c:75:1c:23:d1:eb:1e:bb:d2:38:
                    8c:61:e1:95:b1:fd:14:d6:92:aa:e6:d9:9b:4c:17:
                    4f:78:39:62:3e:16:dd:db:0a:01:32:fe:bd:3f:bd:
                    9d:0a:2e:6b:dc:b4:01:e7:67:5c:c0:8d:57:15:0a:
                    07:06:7d:a4:1e:f2:c4:5c:14:6c:59:1c:50:8a:8a:
                    55:5f:e5:4c:0e:2b:78:9e:35:60:59:2b:a7:f5:7c:
                    47:51:1a:c8:49:c3:a7:08:c9:28:e1:ed:d2:08:1b:
                    9b:f3:2a:26:23:1f:b5:10:78:09:bd:ce:d9:be:82:
                    65:2b:aa:7f:ab:9c:fc:1f:6d:91:6f:66:ca:02:49:
                    4b:dd:01:d1:67:32:e6:23:94:c3:5a:58:c5:74:55:
                    ab:7e:0a:50:fc:e0:48:d7:39:15:09:3a:c7:15:9b:
                    c4:12:9d:fb:0e:b6:16:74:61:c9:74:79:3c:d2:39:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:F6:C8:19:FB:02:CA:29:2C:94:09:0D:1F:03:6D:CE:3B:1F:3D
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cyr2yBn7AsopLJQJDR8Dbc47Hz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:97:b3:25:9f:45:3c:27:60:de:5e:d4:cd:d3:23:d1:56:32:
         53:8e:78:68:45:ae:1a:0b:18:0d:ae:c6:49:59:21:ca:28:1f:
         d3:ea:2b:b0:a7:72:b1:04:bd:f6:38:a3:19:81:f0:d8:07:88:
         d2:9c:2c:d4:d9:0d:85:ea:fc:0b:bc:51:a7:ae:d3:21:58:69:
         78:bd:eb:22:c5:db:0f:58:0d:58:bc:d0:26:3b:8d:b5:6a:6f:
         55:e0:9f:03:21:60:4f:04:5b:c3:ce:fe:69:3c:e3:60:d6:db:
         e8:59:4a:bf:32:db:13:eb:07:b8:94:28:8d:4b:54:35:39:b8:
         70:49:4c:0d:ff:02:ff:78:79:00:73:17:d8:c3:a1:57:6b:39:
         22:23:1e:d0:9a:09:3b:23:7e:49:93:d8:bc:98:21:37:b5:a8:
         81:25:f2:1c:f5:12:65:08:2e:f2:a2:c3:50:2c:9d:90:cb:d5:
         a5:b5:13:80:ff:a8:91:e4:c8:a7:14:fc:f4:5c:19:6e:b8:0f:
         4a:4f:d4:f6:a1:3e:50:69:c6:5c:fe:9b:c9:17:1c:6b:c3:de:
         65:fc:31:73:07:ef:05:47:7f:a2:2e:b4:2c:62:4a:2d:ae:31:
         9d:53:3a:dd:ad:ee:20:46:58:bd:a8:5e:8d:f4:9e:af:9e:08:
         05:36:cb:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ0eYW0nIJgWIOUpalGVDm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTAxMTgzNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzJhZjZjODE5ZmIwMmNhMjkyYzk0MDkwZDFmMDM2ZGNlM2IxZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIsfrZQ93OpODRk0Afpw/I5mERUO
9WvUeiUVW1n379rr1T1yYY3anSMrx+TmjyzrfXPmgA4Tto0+d/aJm5rgYmP1x3od
y2HxCMpxMdaFeix1HCPR6x670jiMYeGVsf0U1pKq5tmbTBdPeDliPhbd2woBMv69
P72dCi5r3LQB52dcwI1XFQoHBn2kHvLEXBRsWRxQiopVX+VMDit4njVgWSun9XxH
URrIScOnCMko4e3SCBub8yomIx+1EHgJvc7ZvoJlK6p/q5z8H22Rb2bKAklL3QHR
ZzLmI5TDWljFdFWrfgpQ/OBI1zkVCTrHFZvEEp37DrYWdGHJdHk80jmGFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMq9sgZ+wLKKSyUCQ0fA23OOx89MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvY3lyMnlCbjdBc29wTEpRSkRSOERiYzQ3SHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjQvcMA0G
CSqGSIb3DQEBCwUAA4IBAQBEl7Mln0U8J2DeXtTN0yPRVjJTjnhoRa4aCxgNrsZJ
WSHKKB/T6iuwp3KxBL32OKMZgfDYB4jSnCzU2Q2F6vwLvFGnrtMhWGl4vesixdsP
WA1YvNAmO421am9V4J8DIWBPBFvDzv5pPONg1tvoWUq/MtsT6we4lCiNS1Q1Obhw
SUwN/wL/eHkAcxfYw6FXazkiIx7Qmgk7I35Jk9i8mCE3taiBJfIc9RJlCC7yosNQ
LJ2Qy9WltROA/6iR5MinFPz0XBluuA9KT9T2oT5QacZc/pvJFxxrw95l/DFzB+8F
R3+iLrQsYkotrjGdUzrdre4gRli9qF6N9J6vnggFNstL
-----END CERTIFICATE-----