Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa
File:                     dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa (raw, json)
Hash identifier:          8K/JXy/mzGmk0O3Ln1F0C1+6121a1o5bHdtKrbsy2Gs=
Subject key identifier:   74:28:C6:3E:A2:E2:C3:85:F9:07:FB:DC:F0:0E:8C:8F:44:88:42:A1
Certificate issuer:       /CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
Certificate serial:       1B4CFAD6
Authority key identifier: E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa
Signing time:             Tue 29 Mar 2022 07:53:05 +0000
ROA not before:           Tue 29 Mar 2022 07:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35765
IP address blocks:        185.35.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458029782 (0x1b4cfad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
        Validity
            Not Before: Mar 29 07:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7428c63ea2e2c385f907fbdcf00e8c8f448842a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:a1:1c:d3:6e:9e:e0:0f:5e:33:36:d6:96:
                    7a:54:bf:52:2d:80:86:49:b6:6b:2a:ed:81:40:e2:
                    1b:02:f3:83:0c:79:a6:3e:51:47:3b:7e:ff:c9:b2:
                    5f:8d:34:d5:37:c5:dd:df:df:23:0b:2b:9c:b7:60:
                    bd:3a:49:0d:d6:3e:c0:7c:e7:b5:c2:e2:9c:fe:bd:
                    a4:24:fd:0d:1f:d3:2f:4e:a1:74:b2:f0:0f:9a:8e:
                    3c:fc:d9:ad:ea:d1:6f:ce:be:b7:85:76:d7:a6:72:
                    bf:a6:3d:b4:35:20:52:9a:42:34:10:14:d3:b3:f2:
                    da:50:bc:fd:55:65:1f:fe:d6:34:f5:bf:6f:64:da:
                    53:ea:91:49:6a:49:93:12:49:07:8f:cd:81:62:b1:
                    0f:74:f3:ca:eb:fb:08:a0:7f:1f:08:52:7c:8f:9d:
                    9c:f9:09:42:6f:8a:b9:c8:ce:6a:20:80:c6:7d:37:
                    49:e4:09:6b:f1:0a:e9:e4:31:df:aa:17:cc:67:c7:
                    05:10:86:1a:7b:cb:a7:08:b5:2a:03:ce:c6:4e:c0:
                    97:17:86:50:7b:44:88:28:3d:e2:86:3d:e6:dd:57:
                    49:24:a2:ef:48:1b:34:86:79:84:c1:74:bc:61:1a:
                    bd:a5:91:90:e5:cb:7c:8d:98:e6:b8:50:56:39:07:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:C6:3E:A2:E2:C3:85:F9:07:FB:DC:F0:0E:8C:8F:44:88:42:A1
            X509v3 Authority Key Identifier:
                keyid:E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.35.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:ef:6d:00:b1:da:ec:30:57:cf:5c:13:c2:a2:1a:36:74:46:
         eb:ee:12:0e:91:0a:cf:70:63:6a:bc:01:1b:96:3f:eb:b5:df:
         c5:69:7f:a2:04:f4:8f:03:c3:74:46:c3:15:cf:9e:ef:27:d0:
         38:f6:6d:b7:56:b7:c2:66:be:44:49:25:0a:da:2d:e3:44:28:
         90:f8:8d:de:2f:3f:f6:df:12:6b:8c:d8:e4:76:87:af:94:f9:
         e6:e2:d7:db:70:54:e4:69:7e:5b:74:d1:46:93:8e:c1:6f:ce:
         f7:18:fa:1b:54:d1:1b:d1:11:7b:e5:74:9b:32:53:7e:0b:7c:
         fa:c7:a4:42:31:44:37:27:c6:e9:31:1c:5a:58:27:3d:fd:8e:
         1d:55:93:cd:70:2f:d8:f5:e0:2d:45:7d:83:29:8d:59:5d:4d:
         9e:af:72:25:0c:39:3e:17:a7:f3:df:0b:bd:ab:6f:c2:11:d7:
         a5:57:b9:3f:87:1c:52:f4:15:77:85:b0:dc:5f:59:b8:83:bf:
         5a:cf:12:99:77:7a:5b:38:cd:49:35:4b:dd:3a:2b:42:71:f8:
         f3:a9:73:9a:0b:3a:4e:6e:fc:9f:b7:24:d2:f4:7d:58:a4:9c:
         d2:ac:b0:a7:24:26:65:53:13:5a:91:8e:8b:c3:7e:7c:80:1d:
         da:ec:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----