Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa
File:                     laK-dqjYhi7oZr-zjoTFlYqRpKE.roa (raw, json)
Hash identifier:          RvG7IQqMj0MAXuJ7dpW5ByE9dLGUjWSJmuBUP5/6jzM=
Subject key identifier:   95:A2:BE:76:A8:D8:86:2E:E8:66:BF:B3:8E:84:C5:95:8A:91:A4:A1
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04C3E949
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa
Signing time:             Fri 20 May 2022 14:03:30 +0000
ROA not before:           Fri 20 May 2022 14:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207152
IP address blocks:        141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79948105 (0x4c3e949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 20 14:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95a2be76a8d8862ee866bfb38e84c5958a91a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:c8:73:0e:db:4e:92:3e:06:fd:ef:23:da:
                    cd:84:42:6d:0c:b0:08:93:41:6c:7a:cb:37:8c:58:
                    2e:e1:7c:41:de:f4:41:8e:f8:02:07:74:27:93:58:
                    97:cf:6b:b6:de:2e:d8:79:17:33:5a:81:f4:e1:14:
                    59:c8:4e:7e:c7:be:39:a7:75:39:25:e3:16:4a:46:
                    14:b1:27:7c:b0:87:ef:32:b6:de:25:ed:42:61:ad:
                    2b:c7:d0:e5:55:04:4b:6c:8e:13:05:54:48:dd:3a:
                    c3:c0:9b:06:e8:7f:52:56:aa:80:0b:cb:43:17:bf:
                    7c:75:bf:b4:af:a9:46:11:4a:ff:9b:d3:8d:d6:9a:
                    eb:4e:61:4b:42:de:2a:fa:9c:e5:84:e0:49:88:d8:
                    1a:99:54:53:d8:80:74:c4:f7:8f:68:73:d0:a8:de:
                    7b:95:3b:57:72:af:66:36:b9:b2:8b:95:10:c6:c0:
                    0e:14:39:e6:6d:d4:b4:b4:98:b3:e5:64:07:c9:af:
                    31:0c:bd:53:bc:54:64:80:c9:ef:3f:e5:1f:49:03:
                    3f:0f:59:bc:36:9a:25:e7:86:70:69:62:ee:0d:b3:
                    54:b4:a3:84:3a:d6:c2:bb:83:36:9b:b7:3c:b3:be:
                    aa:52:98:26:0f:de:cc:75:13:7a:ff:c8:a0:a7:51:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:BE:76:A8:D8:86:2E:E8:66:BF:B3:8E:84:C5:95:8A:91:A4:A1
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:42:bf:5b:e3:bd:77:bf:7c:b0:f3:fe:83:3c:31:c2:c7:4f:
         38:54:cb:f4:bb:e6:e5:68:37:4e:be:5f:9e:ec:bd:3d:f0:3c:
         29:ea:12:64:43:c0:bf:13:f9:7f:a5:a5:eb:cb:49:81:63:32:
         7c:6e:ec:11:31:33:d1:c6:c4:62:59:c8:04:65:f4:92:33:13:
         e8:8d:00:5a:db:1f:b9:f5:12:10:03:36:bf:35:dd:76:4b:ef:
         0a:ca:43:9b:1f:4b:7c:2e:57:9e:6a:80:2b:ea:95:31:36:88:
         53:6b:03:9a:a5:c6:bc:df:56:7d:c7:09:1f:e4:cd:ae:29:44:
         1c:31:15:dc:b1:f5:20:42:4e:ee:11:3c:40:c6:03:3f:91:27:
         d7:24:5f:d3:59:0f:79:9f:d9:ad:f7:c5:2c:d8:4b:f3:74:9d:
         96:a6:ab:5c:51:44:52:49:87:d9:5e:eb:15:c4:31:7e:b4:e0:
         1e:d1:73:66:f6:2f:3c:4c:4a:00:07:3c:d5:d3:04:c8:da:9d:
         f1:6d:bf:a6:46:b8:09:e0:b9:e1:ff:96:8b:32:74:17:e1:9d:
         fc:ee:fb:f9:8b:e7:26:64:47:22:c3:cd:3c:ad:59:a4:bd:2e:
         eb:ef:a3:f5:32:6a:e4:72:06:08:3e:bd:b8:48:bf:40:67:df:
         6d:fc:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----