Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa
File:                     n8W6FsgCq6fbZWttBlY-I8LuRsE.roa (raw, json)
Hash identifier:          DZOKpw46ckTT4y80XIBJ39WxkTkU7PKSa4NeV/Sl64k=
Subject key identifier:   9F:C5:BA:16:C8:02:AB:A7:DB:65:6B:6D:06:56:3E:23:C2:EE:46:C1
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       041575C3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa
Signing time:             Fri 22 Apr 2022 09:51:52 +0000
ROA not before:           Fri 22 Apr 2022 09:51:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210122
IP address blocks:        141.11.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68515267 (0x41575c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 22 09:51:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fc5ba16c802aba7db656b6d06563e23c2ee46c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:24:4a:78:b2:ce:27:f3:73:01:33:df:78:
                    3f:72:4c:4c:2d:6e:07:3c:b7:17:df:6e:19:09:2b:
                    75:8c:78:e7:e7:ff:c2:5a:36:e7:61:72:91:51:8d:
                    43:6b:f4:d9:04:f6:3f:a2:a9:9d:4b:21:85:b9:76:
                    d3:10:c1:19:b0:4d:81:e9:a0:6e:c4:84:dc:70:13:
                    f1:bc:9f:1f:aa:e0:3b:8c:ce:aa:68:51:0a:74:e8:
                    29:67:c3:0b:80:45:f5:7f:ed:ac:51:bf:b8:83:77:
                    cb:0a:08:2e:a1:f7:ce:64:e4:06:29:a8:12:ef:90:
                    4a:01:50:8b:47:9f:2a:cb:80:80:f3:b7:bc:b6:ae:
                    f8:b5:b9:a4:f1:f2:70:51:b6:98:ff:26:b5:44:42:
                    d0:c8:b9:12:af:89:87:01:cd:a6:15:90:ef:8f:93:
                    8d:f6:a9:d4:4e:78:2b:16:fc:87:e2:e0:dc:b0:64:
                    61:b2:43:47:1c:c7:7d:ae:86:31:74:eb:e5:09:b7:
                    f3:dc:46:78:fd:9a:de:20:1b:2b:8f:29:8a:3b:bd:
                    43:10:21:1f:8e:44:07:7c:bd:a1:fd:28:3e:a8:ca:
                    7b:2c:f0:22:e8:04:25:97:02:d4:d4:2b:5f:39:eb:
                    3f:38:71:fa:0c:67:70:05:2d:de:63:50:c1:62:b6:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:BA:16:C8:02:AB:A7:DB:65:6B:6D:06:56:3E:23:C2:EE:46:C1
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:36:81:1d:87:fd:98:bb:72:c3:41:3e:7a:f7:a8:6d:0f:
         be:df:ac:4a:52:c3:af:9d:3a:1f:8c:5a:68:77:18:47:49:32:
         e9:a8:4a:45:12:0e:48:e4:98:e0:88:08:f1:93:38:f8:11:e8:
         a0:29:9b:52:54:fc:7e:14:88:c9:de:f6:9c:2e:f1:fa:f8:d3:
         35:98:a5:98:6d:26:b9:41:f4:5c:bb:87:9b:9b:49:68:2d:1b:
         ce:c4:6e:4b:a0:b0:ac:42:91:f2:24:64:10:36:9d:9d:4f:c6:
         bb:93:9e:0d:e9:21:07:a0:9f:91:96:de:a1:7c:8e:aa:e0:47:
         0e:f9:f2:f6:30:61:5e:91:05:fe:30:c0:04:77:f4:4d:41:b8:
         59:93:e3:c6:f4:29:a4:8c:31:ed:9c:b0:4b:21:73:e1:e2:cf:
         c3:60:ff:02:db:fc:e9:5d:ab:4a:72:53:e5:33:53:1a:e2:98:
         68:ba:5d:08:ac:51:a6:70:0f:0b:10:1b:4d:66:22:4b:e5:7a:
         43:76:5e:c7:8d:13:84:2a:a3:3a:8d:07:20:8f:0c:63:69:30:
         c0:fe:71:fb:91:fe:9d:fd:c7:ec:75:03:08:e4:24:f9:ed:44:
         d8:51:5e:f6:f2:4b:6d:41:67:c9:56:d1:4c:fb:27:33:ed:52:
         bb:4c:5d:e0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBV1wzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQy
MjA5NTE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWZjNWJhMTZjODAy
YWJhN2RiNjU2YjZkMDY1NjNlMjNjMmVlNDZjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLNJEp4ss4n83MBM994P3JMTC1uBzy3F99uGQkrdYx45+f/
wlo252FykVGNQ2v02QT2P6KpnUshhbl20xDBGbBNgemgbsSE3HAT8byfH6rgO4zO
qmhRCnToKWfDC4BF9X/trFG/uIN3ywoILqH3zmTkBimoEu+QSgFQi0efKsuAgPO3
vLau+LW5pPHycFG2mP8mtURC0Mi5Eq+JhwHNphWQ74+Tjfap1E54Kxb8h+Lg3LBk
YbJDRxzHfa6GMXTr5Qm389xGeP2a3iAbK48piju9QxAhH45EB3y9of0oPqjKeyzw
IugEJZcC1NQrXznrPzhx+gxncAUt3mNQwWK2yTsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSfxboWyAKrp9tla20GVj4jwu5GwTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L244VzZGc2dDcTZmYlpXdHRCbFktSThMdVJzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LYzANBgkqhkiG9w0BAQsFAAOC
AQEANI02gR2H/Zi7csNBPnr3qG0Pvt+sSlLDr506H4xaaHcYR0ky6ahKRRIOSOSY
4IgI8ZM4+BHooCmbUlT8fhSIyd72nC7x+vjTNZilmG0muUH0XLuHm5tJaC0bzsRu
S6CwrEKR8iRkEDadnU/Gu5OeDekhB6CfkZbeoXyOquBHDvny9jBhXpEF/jDABHf0
TUG4WZPjxvQppIwx7ZywSyFz4eLPw2D/Atv86V2rSnJT5TNTGuKYaLpdCKxRpnAP
CxAbTWYiS+V6Q3Zex40ThCqjOo0HII8MY2kwwP5x+5H+nf3H7HUDCOQk+e1E2FFe
9vJLbUFnyVbRTPsnM+1Su0xd4A==
-----END CERTIFICATE-----