Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pmp5B_ka4Ur-3-lpId0qn2DVQoU.roa
File:                     pmp5B_ka4Ur-3-lpId0qn2DVQoU.roa (raw, json)
Hash identifier:          ic75O8HkcTTrKxODauaGQHWlPuU5D3I+1RZpyNn1jwI=
Subject key identifier:   A6:6A:79:07:F9:1A:E1:4A:FE:DF:E9:69:21:DD:2A:9F:60:D5:42:85
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       02717855
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pmp5B_ka4Ur-3-lpId0qn2DVQoU.roa
Signing time:             Sat 01 Jan 2022 08:03:25 +0000
ROA not before:           Sat 01 Jan 2022 08:03:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     146996
IP address blocks:        141.11.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40990805 (0x2717855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan  1 08:03:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a66a7907f91ae14afedfe96921dd2a9f60d54285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:02:cd:51:72:2a:96:c0:b1:33:64:2e:bb:
                    1f:5e:7f:d8:cd:32:73:18:87:0d:35:ac:64:7e:16:
                    1f:39:8e:1f:47:cb:b8:c1:61:ed:d0:df:7c:31:b7:
                    3f:f5:cb:cb:27:51:78:c9:46:80:74:6b:b6:4e:4b:
                    15:f9:5d:c2:27:b5:b6:5d:f1:4d:d7:f8:60:16:35:
                    5a:28:43:13:49:de:ac:21:a2:db:bb:56:b7:c0:53:
                    cf:58:94:21:b9:4d:46:01:7d:82:29:ab:c2:9f:7e:
                    ee:30:79:10:42:20:d4:c8:e2:0c:c1:ea:cf:65:ea:
                    6a:d5:f5:cb:3a:01:48:ae:a3:a3:7c:76:51:a7:55:
                    ea:2d:2d:55:5e:41:a8:a5:eb:b3:87:b8:ee:b6:2d:
                    0a:ef:c6:14:eb:60:6e:9d:2a:cf:1e:c4:bc:a2:16:
                    e9:23:34:bb:02:f7:c2:f4:a8:37:c2:7f:44:b6:b1:
                    01:56:48:14:d9:17:12:2f:27:5e:d2:a4:db:2d:15:
                    8e:5c:81:e3:8b:63:8d:31:a3:ed:15:b7:03:8d:62:
                    47:17:91:fd:86:fa:2f:9c:ee:c8:f3:d2:ba:18:b2:
                    2c:c8:b3:cc:97:55:84:95:0f:21:ad:a0:9b:28:e8:
                    7d:90:a6:06:e2:7a:67:e0:ac:45:0a:64:b8:b3:70:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6A:79:07:F9:1A:E1:4A:FE:DF:E9:69:21:DD:2A:9F:60:D5:42:85
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pmp5B_ka4Ur-3-lpId0qn2DVQoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:67:8b:10:4c:41:e3:6a:1f:e5:f9:88:9f:fa:53:79:5b:7c:
         e2:95:28:14:75:1c:e4:d6:a1:c3:40:18:50:00:ae:59:1a:cf:
         55:55:9b:4b:60:82:d2:1a:2f:1c:f4:4e:be:e2:97:93:04:3c:
         73:ec:90:05:8f:67:0d:80:31:a3:81:83:c7:36:36:9a:8d:ab:
         59:6a:cd:82:6d:de:1d:98:35:f7:d8:53:ff:16:61:35:86:02:
         fe:84:da:91:cf:f1:1f:2b:b2:df:22:8a:0b:98:1d:15:93:78:
         04:95:b0:78:68:03:6e:e3:94:7f:5d:be:28:8b:e6:a4:7f:72:
         10:71:35:92:b3:40:db:7f:01:64:31:94:71:a2:fa:28:24:c2:
         67:2a:67:8d:58:b4:1f:c7:71:f5:e5:8b:e4:9b:83:33:e3:22:
         9b:6b:35:7a:38:f3:14:4f:63:31:39:39:f5:d4:64:79:26:66:
         b7:3b:95:04:70:17:01:0e:3c:34:0c:f5:80:5e:09:f1:0c:48:
         99:e5:38:e9:04:8f:a6:66:a0:37:6f:b8:08:c1:ba:14:81:18:
         28:27:88:d9:7c:7d:63:ae:76:ec:81:98:fc:20:62:56:c4:3f:
         00:67:42:d6:6d:c9:21:2c:5a:ae:10:5b:fe:3f:27:66:04:a4:
         a9:db:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----