Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/0nv1400FTvosZ-yKswPZVih1V5Q.roa
File:                     0nv1400FTvosZ-yKswPZVih1V5Q.roa (raw, json)
Hash identifier:          53JkBXd5HWUiTmhQRXsC6X+ql+KlP5KBcO5c4zf66jk=
Subject key identifier:   D2:7B:F5:E3:4D:05:4E:FA:2C:67:EC:8A:B3:03:D9:56:28:75:57:94
Certificate issuer:       /CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
Certificate serial:       0AE9CD82
Authority key identifier: F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/0nv1400FTvosZ-yKswPZVih1V5Q.roa
Signing time:             Sat 01 Jan 2022 01:56:36 +0000
ROA not before:           Sat 01 Jan 2022 01:56:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204344
IP address blocks:        185.252.48.0/22 maxlen: 24
                          2a0c:20c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183094658 (0xae9cd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
        Validity
            Not Before: Jan  1 01:56:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d27bf5e34d054efa2c67ec8ab303d95628755794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:98:f6:4f:33:97:c4:eb:26:66:eb:79:00:
                    60:b2:ba:ea:7d:9a:87:11:97:b6:48:28:1f:20:7a:
                    9d:eb:e7:63:c3:03:54:77:1a:72:05:b2:f8:0e:55:
                    fd:fc:69:97:29:dd:da:d2:77:83:7c:cc:da:7e:45:
                    57:7a:71:a0:70:6e:12:58:d3:25:50:40:08:f2:f2:
                    ae:8a:58:96:f1:dd:1e:4d:40:04:4f:1a:e0:a3:40:
                    97:22:4b:01:5f:6e:a0:f6:38:76:ca:23:4b:fd:29:
                    8e:e4:7c:57:33:6e:5f:5a:29:7d:9b:24:c0:a6:8d:
                    c4:0a:8e:8f:97:e4:21:c8:f7:86:ca:37:2c:78:17:
                    77:21:b5:cb:1c:1e:b1:e6:ba:39:17:0f:b6:77:dc:
                    9e:c9:b5:8d:0b:68:71:7a:96:31:90:e5:5b:4f:1b:
                    75:12:1a:ef:04:5e:a4:00:02:8d:45:47:14:dd:93:
                    a8:e8:50:c2:20:12:86:e5:bc:ac:27:f6:5c:c5:c4:
                    2e:18:7a:85:6c:de:ff:b3:d9:a4:77:eb:ac:1b:4b:
                    9d:63:cb:5c:1d:df:1b:26:6e:c0:f4:2a:73:93:38:
                    6e:03:05:dd:5e:0b:5a:64:85:4b:ee:9d:6a:8b:4c:
                    19:45:b4:dd:bc:7a:d0:29:ab:6b:1e:66:47:1c:9c:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:F5:E3:4D:05:4E:FA:2C:67:EC:8A:B3:03:D9:56:28:75:57:94
            X509v3 Authority Key Identifier:
                keyid:F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/0nv1400FTvosZ-yKswPZVih1V5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.48.0/22
                IPv6:
                  2a0c:20c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:ed:4b:59:cd:13:da:d3:73:c5:06:7b:73:a5:5f:3c:5f:
         75:8f:ba:10:69:2a:c6:78:7c:7d:65:55:1b:ac:89:c4:af:e1:
         a5:79:90:b1:77:5e:55:50:6b:51:20:05:74:7c:a7:91:2a:9e:
         52:43:f9:7d:e7:e1:81:a3:51:da:97:e5:23:64:c2:3f:c7:1e:
         fc:51:5e:d6:37:84:91:30:2a:3d:a5:22:89:2b:bb:40:e4:6f:
         fa:87:80:39:be:b1:56:a7:9e:06:32:54:ae:8a:95:71:3b:65:
         27:83:e3:9d:2e:42:8a:b7:3c:5d:d8:d6:47:ca:e4:fa:5c:3a:
         d3:63:d0:e4:c0:f9:14:23:c3:49:69:e0:0a:a3:33:fb:f4:e5:
         c6:01:1b:38:e8:08:9d:79:09:14:d0:fc:9a:4d:70:ca:54:d1:
         b5:7c:9f:2d:4c:bd:b4:b2:d4:4e:ec:3d:b5:a2:37:b0:89:7d:
         d4:37:09:6c:15:72:d1:3b:c6:bf:e1:a5:b4:c4:5a:33:2e:9a:
         67:94:1a:22:32:a6:fd:51:d7:99:b7:de:e4:de:5a:91:86:bc:
         0c:0d:1a:d3:fb:79:bb:ec:8d:95:47:dc:cf:9a:c5:41:fb:a8:
         ef:01:ae:f2:c1:fa:7c:cc:23:ce:0e:ae:62:6e:79:dd:d3:28:
         f3:02:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----