Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/FI9ULJ-Pk0JKrml8YRJi0Xl0t7g.roa
File:                     FI9ULJ-Pk0JKrml8YRJi0Xl0t7g.roa (raw, json)
Hash identifier:          uH58lo240yg9Zwkv4r1pG9v1o/oxkPl6qhf3woBy+EQ=
Subject key identifier:   14:8F:54:2C:9F:8F:93:42:4A:AE:69:7C:61:12:62:D1:79:74:B7:B8
Certificate issuer:       /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial:       01857321CAB677BFADD245888D2B4D3CD214
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/FI9ULJ-Pk0JKrml8YRJi0Xl0t7g.roa
Signing time:             Mon 02 Jan 2023 15:37:52 +0000
ROA not before:           Mon 02 Jan 2023 15:37:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211883
IP address blocks:        185.153.92.0/24 maxlen: 24
                          2a0c:f280:1::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:21:ca:b6:77:bf:ad:d2:45:88:8d:2b:4d:3c:d2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
        Validity
            Not Before: Jan  2 15:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=148f542c9f8f93424aae697c611262d17974b7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:c2:40:7b:a8:5b:13:8d:b9:f1:a2:75:6c:
                    c3:90:1d:3e:f9:84:4f:3d:b0:57:6e:da:1d:1b:99:
                    a6:95:9d:19:7b:82:83:fe:47:44:9b:c4:d9:69:ff:
                    43:e0:06:5e:0f:20:87:8f:59:0b:bf:0c:f1:f2:1f:
                    21:38:a6:b6:b9:3e:28:5c:76:40:66:dd:b7:04:df:
                    6a:75:a5:fc:60:b3:5c:e6:ff:84:b2:66:e5:5e:61:
                    a8:e2:64:13:31:c5:bf:15:96:43:8b:80:d9:71:ec:
                    87:f6:4f:c9:48:3b:06:76:d8:0c:69:d7:1e:bc:9c:
                    74:3c:ce:12:66:88:25:1d:4b:94:41:7a:9e:c5:dd:
                    59:23:da:2a:95:9b:90:e6:dd:63:af:38:9c:16:3b:
                    05:9c:34:ba:41:a1:99:95:6c:bf:7d:51:c5:ac:90:
                    de:f6:3f:2b:e4:1f:f8:ab:5e:73:a9:83:fd:39:7d:
                    e7:1d:a2:f0:66:b7:cf:df:30:47:6e:cb:e2:60:c5:
                    7b:9d:5b:8a:83:03:fa:20:b2:1c:15:c0:49:8d:d8:
                    a0:02:43:65:5a:3e:1f:00:d5:dd:be:2c:c7:ae:b9:
                    3b:c0:eb:d9:a9:a0:3e:41:b7:89:f9:9e:47:76:b6:
                    65:9b:75:37:09:d3:e9:65:da:07:c8:3b:2e:68:7e:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:54:2C:9F:8F:93:42:4A:AE:69:7C:61:12:62:D1:79:74:B7:B8
            X509v3 Authority Key Identifier:
                keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/FI9ULJ-Pk0JKrml8YRJi0Xl0t7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.92.0/24
                IPv6:
                  2a0c:f280:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:49:af:07:17:3b:f1:8c:9c:de:11:3b:c8:9b:d3:c1:a8:
         aa:7a:d7:2a:c6:70:d3:d5:85:47:6c:93:c9:29:d1:ec:17:0b:
         85:cf:3b:e2:7a:2a:47:01:0b:77:ee:75:54:f7:24:cd:b3:9c:
         05:76:5f:36:68:c0:c2:2f:8d:e2:04:65:49:43:40:03:eb:80:
         8c:34:e9:3c:b9:29:11:0f:6f:f3:9c:c1:83:21:ee:da:13:e8:
         f3:dd:8e:cb:36:2b:e1:92:8d:f4:3a:c2:32:02:34:12:cf:d4:
         5a:b8:18:9d:6f:c6:3c:39:3d:48:ab:68:0e:30:e9:a4:7b:31:
         50:f3:37:ac:59:d5:4a:8a:19:22:3f:00:4d:af:78:c2:32:bf:
         ca:ea:a0:c2:2e:28:be:80:ae:40:9c:ed:82:e3:4b:f5:65:4d:
         eb:0c:fa:70:9b:4b:d9:98:55:b7:6a:f5:a0:16:f3:fc:cd:7a:
         b0:8e:a4:2a:77:07:42:8c:06:7b:01:6e:30:75:62:47:a4:9e:
         18:e6:1b:eb:bc:67:6a:d8:62:de:ce:12:c0:b1:21:61:31:95:
         7d:93:ab:e3:c1:66:22:f6:4b:e0:c7:cc:24:7e:76:0c:84:67:
         20:95:ed:89:97:ae:1c:1c:ec:6e:75:4f:df:b3:68:0d:0c:f6:
         22:2a:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----