Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wpxIC7dwbsyDgmhf2qd4EpBLuUI.roa
File:                     wpxIC7dwbsyDgmhf2qd4EpBLuUI.roa (raw, json)
Hash identifier:          jRnGh0iF3jLZuBvQdWLERIuu+lTCZmWONwwZWebLaaY=
Subject key identifier:   C2:9C:48:0B:B7:70:6E:CC:83:82:68:5F:DA:A7:78:12:90:4B:B9:42
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0304B726
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wpxIC7dwbsyDgmhf2qd4EpBLuUI.roa
Signing time:             Fri 11 Feb 2022 12:32:18 +0000
ROA not before:           Fri 11 Feb 2022 12:32:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60602
IP address blocks:        141.11.84.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50640678 (0x304b726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Feb 11 12:32:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c29c480bb7706ecc8382685fdaa77812904bb942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:89:aa:4a:21:51:12:dd:a0:42:04:d5:76:
                    e6:00:dd:ea:bb:d0:60:ff:2a:75:8e:eb:67:bc:df:
                    5e:52:11:21:db:24:15:ec:8f:4a:c7:92:fa:f8:4f:
                    2b:b0:aa:cd:84:36:3e:1b:8d:34:56:4d:f5:bb:99:
                    45:bc:cc:7d:72:bd:60:27:e6:46:f1:25:0f:c8:a8:
                    09:a9:0f:df:f4:51:56:f1:5e:06:ae:92:d7:96:e0:
                    1d:0c:e0:ee:3d:70:c5:34:d7:be:a8:d0:df:38:c4:
                    50:a0:bd:e6:a9:3f:2a:29:20:65:50:8a:be:5b:78:
                    a7:52:3d:ce:08:c7:c0:d8:23:e0:c2:ad:c9:f0:f5:
                    07:7c:0d:21:c6:5f:11:57:bf:ca:e0:85:42:e0:5d:
                    97:11:40:e9:1f:5c:ef:9d:bd:cb:e9:2b:39:86:f6:
                    60:a2:0f:4a:f5:5e:40:39:2f:ca:4d:a6:fc:97:58:
                    65:64:a6:e0:69:a5:62:13:fe:f8:06:d0:e1:75:80:
                    72:e6:c7:31:0b:df:fc:ff:e1:9d:c1:c2:51:4d:63:
                    9d:ea:72:73:91:f6:ea:8f:2b:49:ce:b1:e4:d3:d6:
                    2f:7a:f5:5a:83:0d:b6:7c:7d:fd:13:e8:5b:f6:48:
                    7b:06:e4:7b:08:e1:67:51:cb:b5:b1:5f:01:69:5d:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:48:0B:B7:70:6E:CC:83:82:68:5F:DA:A7:78:12:90:4B:B9:42
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wpxIC7dwbsyDgmhf2qd4EpBLuUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:ac:22:0d:71:9b:da:38:4f:3e:59:25:5f:0a:99:14:7c:
         2d:be:d7:a4:ac:7c:f7:3a:ea:23:62:7d:93:8a:55:02:f3:ea:
         f3:aa:67:7b:83:d4:f7:68:b8:f5:ea:04:79:df:fe:4b:28:f4:
         40:3e:b5:14:71:8a:55:fc:b1:fa:11:ae:d7:0f:29:9d:77:39:
         d8:64:97:8d:93:9e:9f:27:f1:8b:91:94:ab:69:e9:2d:96:52:
         28:5a:45:f1:7d:fc:7f:f0:0d:0e:cf:5b:65:bd:fd:c0:ab:ed:
         e5:bb:02:18:7d:12:be:79:60:97:26:81:10:33:e6:27:bb:51:
         05:44:ca:c0:a3:d9:db:98:40:d9:af:08:74:14:21:86:44:ba:
         4c:42:b7:65:cf:46:b1:1f:43:b6:0c:51:02:ae:05:a6:cd:b6:
         8f:3a:8c:f8:0d:52:27:a2:d1:45:7d:9b:86:f5:cb:e0:1d:33:
         0d:f5:df:07:f8:de:f6:2d:db:bf:c9:37:92:b1:3d:fe:c6:42:
         af:55:13:fb:f0:a7:f9:b4:ca:9d:e7:55:b6:d0:3e:0d:4f:06:
         38:14:0e:c3:6d:c0:ad:1a:6c:07:3f:99:c9:5e:62:c7:10:68:
         24:f2:40:52:af:64:7a:98:ae:a0:a8:f3:16:3c:f6:02:ce:90:
         d3:8b:68:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwS3JjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIx
MTEyMzIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI5YzQ4MGJiNzcw
NmVjYzgzODI2ODVmZGFhNzc4MTI5MDRiYjk0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2iiapKIVES3aBCBNV25gDd6rvQYP8qdY7rZ7zfXlIRIdsk
FeyPSseS+vhPK7CqzYQ2PhuNNFZN9buZRbzMfXK9YCfmRvElD8ioCakP3/RRVvFe
Bq6S15bgHQzg7j1wxTTXvqjQ3zjEUKC95qk/KikgZVCKvlt4p1I9zgjHwNgj4MKt
yfD1B3wNIcZfEVe/yuCFQuBdlxFA6R9c7529y+krOYb2YKIPSvVeQDkvyk2m/JdY
ZWSm4GmlYhP++AbQ4XWAcubHMQvf/P/hncHCUU1jnepyc5H26o8rSc6x5NPWL3r1
WoMNtnx9/RPoW/ZIewbkewjhZ1HLtbFfAWld+X8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCnEgLt3BuzIOCaF/ap3gSkEu5QjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3dweElDN2R3YnN5RGdtaGYycWQ0RXBCTHVVSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY0LVDANBgkqhkiG9w0BAQsFAAOC
AQEAXf2sIg1xm9o4Tz5ZJV8KmRR8Lb7XpKx89zrqI2J9k4pVAvPq86pne4PU92i4
9eoEed/+Syj0QD61FHGKVfyx+hGu1w8pnXc52GSXjZOenyfxi5GUq2npLZZSKFpF
8X38f/ANDs9bZb39wKvt5bsCGH0SvnlglyaBEDPmJ7tRBUTKwKPZ25hA2a8IdBQh
hkS6TEK3Zc9GsR9DtgxRAq4Fps22jzqM+A1SJ6LRRX2bhvXL4B0zDfXfB/je9i3b
v8k3krE9/sZCr1UT+/Cn+bTKnedVttA+DU8GOBQOw23ArRpsBz+ZyV5ixxBoJPJA
Uq9kepiuoKjzFjz2As6Q04toHw==
-----END CERTIFICATE-----