Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa
File:                     gWGbzs-34PuMLRbuOyIykkZZXYk.roa (raw, json)
Hash identifier:          s0QsCtRM5GKlOCrmLJlLPxyT/tMoQsQ+/Bw/dNVgZ6U=
Subject key identifier:   81:61:9B:CE:CF:B7:E0:FB:8C:2D:16:EE:3B:22:32:92:46:59:5D:89
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0503B602
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa
Signing time:             Thu 09 Jun 2022 15:06:02 +0000
ROA not before:           Thu 09 Jun 2022 15:06:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        141.11.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84129282 (0x503b602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jun  9 15:06:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81619bcecfb7e0fb8c2d16ee3b22329246595d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:fc:aa:53:4b:2a:78:36:22:45:c7:c2:8b:
                    7e:d8:ba:40:5d:e7:92:79:0c:8c:5a:20:69:eb:71:
                    ae:1a:8b:bd:6e:be:2b:9b:ef:5b:2d:76:84:64:18:
                    76:c3:9e:af:1b:e4:99:d1:24:d3:3e:da:07:d0:d6:
                    ef:d0:6d:7b:fe:f3:19:be:53:29:52:5b:97:f1:e3:
                    fb:79:73:a6:1a:e2:34:39:18:ba:ea:38:01:2d:5a:
                    2c:da:6b:2c:e2:47:cd:63:99:6b:a1:56:88:d5:da:
                    ce:7f:74:8d:a1:ad:5f:a2:18:51:4a:48:38:a7:b9:
                    68:7f:96:0d:31:d7:ea:e3:1d:85:64:40:4f:d3:86:
                    24:82:94:d2:d2:0c:65:ac:3a:e3:fa:c9:97:3d:bf:
                    cf:1d:05:b7:e3:21:b7:2b:ad:66:95:ac:18:7c:0e:
                    7b:ff:f8:f5:a7:5e:04:5e:55:d1:44:b7:b1:0b:da:
                    1c:f8:b5:02:c4:c7:84:aa:d9:46:26:07:36:25:ea:
                    0a:72:ba:3d:4c:ee:ef:a7:61:ea:bf:da:4c:92:26:
                    6c:37:d2:90:f7:5c:2e:64:65:07:09:4d:36:fd:d2:
                    be:a4:8e:78:9b:c8:8a:a7:b7:a2:6d:43:d7:ea:13:
                    ca:9a:d1:c4:ec:b2:01:44:21:81:4f:95:b8:b5:05:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:61:9B:CE:CF:B7:E0:FB:8C:2D:16:EE:3B:22:32:92:46:59:5D:89
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:b9:de:f9:d5:79:2c:f1:44:ef:af:f4:c7:6c:16:4a:b5:
         ef:74:ae:c1:57:f0:3d:4e:6b:70:be:cc:d1:13:8b:78:8b:10:
         fa:d0:09:db:8b:f4:15:a8:80:06:c5:7e:ae:59:92:97:4c:ec:
         70:45:e8:cb:37:ac:c0:d6:26:af:6b:b0:ad:51:4a:93:ea:59:
         89:ce:58:67:f1:93:cc:25:61:c2:a8:12:0e:91:22:0a:4c:aa:
         45:d3:f4:3a:66:e0:78:3c:04:f4:90:97:81:87:7f:a6:1a:82:
         7e:97:9d:98:3d:10:6f:ed:f4:27:bf:c9:6c:bb:7c:3a:84:8e:
         aa:c9:03:b5:36:cc:0b:f8:9d:7e:01:c2:a4:8f:6f:ee:33:fe:
         35:33:67:db:68:50:ed:33:09:46:99:e5:44:ad:41:07:67:46:
         44:a2:df:eb:90:db:bb:d7:dc:1d:e9:b3:f1:ab:63:22:e0:b6:
         45:d3:cd:2b:47:d4:fb:4a:e0:0d:98:95:d6:a5:b4:67:74:f8:
         15:2b:77:da:a8:59:c6:1f:91:c5:0b:35:e0:2a:28:02:87:e6:
         0f:e0:78:53:50:5e:ad:55:4b:76:04:aa:7d:94:7b:ad:c7:7b:
         50:ff:e2:38:e9:d2:ba:df:74:24:15:bf:ec:8b:f3:ae:a3:9f:
         41:bc:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----