Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFpm5yGfyp2iXomLNky2sIx--qs.roa
File:                     wFpm5yGfyp2iXomLNky2sIx--qs.roa (raw, json)
Hash identifier:          +XJ6j5FnstSS//i6MMP/7i/v6AImBxgqPVfic/D4Dcg=
Subject key identifier:   C0:5A:66:E7:21:9F:CA:9D:A2:5E:89:8B:36:4C:B6:B0:8C:7E:FA:AB
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       03D40E48
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFpm5yGfyp2iXomLNky2sIx--qs.roa
Signing time:             Tue 12 Apr 2022 10:04:39 +0000
ROA not before:           Tue 12 Apr 2022 10:04:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        141.11.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64228936 (0x3d40e48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 12 10:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c05a66e7219fca9da25e898b364cb6b08c7efaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:79:21:4a:2e:b3:91:7c:23:e4:ed:23:7b:
                    c1:8a:82:24:8c:27:52:4d:4d:fa:99:55:a2:0a:ad:
                    fc:ad:ae:84:72:19:d7:f3:da:34:6e:e7:5e:7f:9b:
                    db:09:2c:98:d5:08:ad:da:9f:3e:ec:c3:74:3f:72:
                    5a:d6:b9:28:2e:43:9f:32:d4:96:7a:da:46:51:c9:
                    80:e5:38:80:9b:f4:3a:f2:4a:65:93:80:e3:a6:9f:
                    de:97:c4:81:90:ab:7f:85:3e:4a:d4:14:ec:fc:eb:
                    81:9f:57:40:8a:5a:c6:5c:60:0c:a4:10:c1:7f:7a:
                    64:66:8d:21:b7:7f:61:8d:cf:4a:6d:62:1d:b7:92:
                    ac:5c:52:74:e3:6e:f4:c7:f7:74:80:4a:94:2e:8b:
                    3a:95:2a:23:42:e3:dc:e5:c9:b6:bb:fa:70:d2:cb:
                    72:06:87:cb:3d:16:3f:be:fb:fc:10:fe:91:fa:d9:
                    4d:ee:89:e7:44:98:c2:ba:a5:bf:a1:36:fe:dc:53:
                    62:d1:18:51:8d:2b:7b:0d:c8:4d:61:0f:39:d3:ee:
                    17:74:7f:c8:ed:d3:d7:fe:3e:85:31:d2:8e:0f:2e:
                    b1:6b:1b:46:c5:b1:e3:8a:33:85:df:21:e4:83:d7:
                    a3:c0:fb:00:79:87:d8:69:3d:b6:e2:1b:24:89:2c:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:66:E7:21:9F:CA:9D:A2:5E:89:8B:36:4C:B6:B0:8C:7E:FA:AB
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFpm5yGfyp2iXomLNky2sIx--qs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:94:ac:a8:0f:02:36:e9:77:63:51:b5:25:93:84:a5:35:
         0b:71:93:53:8d:a2:bf:f7:c5:5f:dd:2e:40:e6:12:23:81:f3:
         c8:88:a3:13:c7:30:a0:8f:85:90:ba:1d:8a:77:3c:10:b8:76:
         ed:39:44:e3:87:c0:ae:b9:01:84:d8:ec:2f:a1:da:e1:07:f5:
         53:81:41:46:6b:a4:05:ad:f7:d2:11:29:18:f9:d6:fc:ab:7d:
         71:c8:0e:57:44:48:5f:b2:b9:92:86:5e:42:72:3f:22:fa:bd:
         8e:f4:b5:bf:22:5c:02:3c:90:49:9f:be:8e:ad:a5:42:78:c3:
         78:a3:da:bb:65:93:61:ce:14:0f:6b:89:16:25:f9:2e:5a:b5:
         b4:73:fb:50:70:e9:e1:4c:b3:dd:cf:88:a3:21:7c:2b:79:b4:
         c2:3c:8b:8a:e9:5e:67:0f:91:9e:a6:82:8f:89:3d:93:1b:89:
         fe:79:d5:5d:a8:fa:69:62:0d:bf:ed:f2:1c:05:11:5f:c1:83:
         50:74:51:6e:c0:14:b3:39:19:de:e4:d9:0c:e1:05:4f:ea:87:
         19:e7:ad:15:f8:c2:32:53:13:58:a3:72:28:87:76:56:66:5b:
         f3:6f:47:4b:1b:ea:6b:1a:78:0c:1b:c8:08:e7:a6:65:4e:07:
         d6:2d:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----