Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/n7-bDJEU_X4Ik826RkNK1AMnUTs.roa
File:                     n7-bDJEU_X4Ik826RkNK1AMnUTs.roa (raw, json)
Hash identifier:          TIU8FKr0V1P4rOaJhrWfS2l3AkDzUw1/5irLDRuHGVs=
Subject key identifier:   9F:BF:9B:0C:91:14:FD:7E:08:93:CD:BA:46:43:4A:D4:03:27:51:3B
Certificate issuer:       /CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
Certificate serial:       01856D0AC6EA2C9A7BD6570AF92E9EE5D9E3
Authority key identifier: F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/n7-bDJEU_X4Ik826RkNK1AMnUTs.roa
Signing time:             Sun 01 Jan 2023 11:15:00 +0000
ROA not before:           Sun 01 Jan 2023 11:15:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204344
IP address blocks:        185.252.48.0/22 maxlen: 24
                          2a0c:20c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:c6:ea:2c:9a:7b:d6:57:0a:f9:2e:9e:e5:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
        Validity
            Not Before: Jan  1 11:15:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fbf9b0c9114fd7e0893cdba46434ad40327513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:d7:e8:ba:e4:09:d3:b4:ac:04:e3:98:93:
                    70:a1:95:35:5d:21:06:99:97:e0:65:f1:c2:06:d9:
                    d4:ed:47:a4:b1:c7:ef:f1:9f:f2:ee:c0:63:b1:6f:
                    57:2a:9f:71:c0:79:3c:22:af:f2:25:ef:65:bc:e7:
                    f3:1e:db:27:d2:0e:e7:7d:25:06:77:04:fa:bc:6d:
                    34:16:a6:62:73:f8:6a:35:08:73:ee:82:e1:5e:bc:
                    5c:ad:d4:cf:69:91:ff:2c:45:08:a2:9e:40:6d:f5:
                    d9:da:fb:5e:d2:cd:7e:f6:ce:e4:84:6b:a3:01:a5:
                    34:ba:94:a1:08:1e:2e:5d:83:39:81:e1:d9:68:cb:
                    83:99:93:d5:b9:dd:7f:87:de:b0:d9:32:46:35:78:
                    01:5c:1c:b3:c5:40:6f:fb:a4:1e:d1:6e:27:82:f8:
                    59:a6:2e:9d:72:d0:2f:3a:d7:41:9b:fb:d5:b1:51:
                    b1:30:71:6c:e0:91:e8:00:e3:c9:c6:fb:54:bb:40:
                    cd:e9:01:0e:e9:0a:56:cc:3a:f0:3b:62:50:ff:8c:
                    66:d6:cb:c9:86:0e:4d:70:a9:e0:ae:74:ab:e6:3c:
                    9e:f4:98:83:6e:89:99:2f:9d:cc:28:c8:aa:0f:b8:
                    eb:63:c9:de:0c:ef:68:82:31:07:3e:45:a2:91:32:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:9B:0C:91:14:FD:7E:08:93:CD:BA:46:43:4A:D4:03:27:51:3B
            X509v3 Authority Key Identifier:
                keyid:F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/n7-bDJEU_X4Ik826RkNK1AMnUTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.48.0/22
                IPv6:
                  2a0c:20c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:20:21:a3:75:29:c6:c2:ae:6c:c1:ae:b9:5a:78:8b:8c:89:
         13:46:e8:a9:d7:67:28:4b:40:2d:e2:64:5c:30:b3:f2:0e:21:
         be:28:3f:51:d3:e7:c8:f3:d4:e6:76:a4:57:1a:33:bf:ef:54:
         6c:ce:a5:6f:7a:4e:9a:ab:98:62:f1:b7:5e:50:d1:64:0f:48:
         b7:78:89:0e:a8:20:ae:64:93:a3:b0:e9:4d:09:f3:ee:d3:1b:
         cf:f4:aa:bc:86:31:5b:c8:bc:c6:5c:98:f4:fa:a5:23:52:b8:
         44:83:e0:c4:15:be:50:9a:00:80:93:9c:91:34:7e:4c:92:cc:
         d5:4a:4d:40:27:8c:98:7e:43:98:9e:4c:e4:1a:40:39:c2:49:
         64:06:fb:9e:65:ed:f0:a8:bf:2e:1b:b1:23:f0:ff:2d:bb:f2:
         72:d3:3b:bc:f8:95:c6:a0:47:b2:93:7c:7f:13:15:23:b9:be:
         17:f6:91:c3:f6:ca:e8:40:66:61:dc:1d:ee:8a:b0:41:78:97:
         58:4f:92:11:54:84:13:a5:f1:f3:bc:eb:59:ee:d9:e3:9b:8b:
         20:9b:5e:5e:19:8d:a8:32:01:b4:52:43:0f:81:cd:fe:62:20:
         6d:f6:97:05:46:b4:78:85:63:0f:f3:e0:b7:5c:3c:b2:a1:bb:
         c1:8d:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----