Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/oemAIxDgq_IJeHDDtZzDWJFD52Q.roa
File:                     oemAIxDgq_IJeHDDtZzDWJFD52Q.roa (raw, json)
Hash identifier:          jJAHeloYQ2z4MbHiPNpsUjaw1pWa0eJltFnTo9NYL0U=
Subject key identifier:   A1:E9:80:23:10:E0:AB:F2:09:78:70:C3:B5:9C:C3:58:91:43:E7:64
Certificate issuer:       /CN=fc9003cbb188b6c79716ee38dcee468ac19d8cab
Certificate serial:       01856F0B61CABB1C9F66CD5010668DEAE7F4
Authority key identifier: FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JADy7GItseXFu443O5GisGdjKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/oemAIxDgq_IJeHDDtZzDWJFD52Q.roa
Signing time:             Sun 01 Jan 2023 20:34:54 +0000
ROA not before:           Sun 01 Jan 2023 20:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203712
IP address blocks:        185.126.104.0/22 maxlen: 24
                          2a0a:7040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:61:ca:bb:1c:9f:66:cd:50:10:66:8d:ea:e7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9003cbb188b6c79716ee38dcee468ac19d8cab
        Validity
            Not Before: Jan  1 20:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1e9802310e0abf2097870c3b59cc3589143e764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:b0:4f:38:3d:e2:f1:8c:cc:a8:2c:6c:02:
                    5f:ec:f6:29:20:7a:bf:b4:45:88:b3:69:0a:02:5d:
                    d0:ed:07:f5:76:65:fe:df:9c:c8:80:66:21:7b:40:
                    2e:93:c1:c5:93:65:34:0b:cc:d9:8b:f1:d8:cf:14:
                    e4:38:31:b0:91:b6:b6:0d:64:37:01:ef:de:c7:05:
                    4e:45:bd:e1:4e:bb:e7:23:18:3a:7f:ad:96:b2:5e:
                    ef:71:f5:e9:80:c9:c6:87:b6:1a:d8:a0:f7:5b:1e:
                    fb:ef:c0:e5:ae:a8:c6:1d:1b:a1:8b:8d:f9:24:da:
                    e5:77:01:09:c2:85:50:00:62:fc:48:86:8c:4d:b3:
                    db:ec:3b:8d:b7:df:92:68:3c:76:5b:8e:91:1d:8a:
                    2c:b8:de:09:ab:f9:e7:ac:56:55:18:51:d1:21:a6:
                    ea:97:e7:40:8d:29:04:6d:0a:75:cc:b6:a2:77:10:
                    5e:08:87:98:f7:8e:27:10:ff:b5:c1:ac:f7:8d:60:
                    7d:1c:20:7c:30:b3:f9:67:f0:3c:e1:54:dc:68:cb:
                    52:08:73:2c:6e:a5:70:de:2c:6e:b8:35:06:ed:e9:
                    19:83:c1:a7:4d:0a:d2:5f:d3:8e:f0:2a:29:09:44:
                    a1:4c:ae:8a:74:2d:84:7d:8d:2d:64:ec:c7:98:e2:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:80:23:10:E0:AB:F2:09:78:70:C3:B5:9C:C3:58:91:43:E7:64
            X509v3 Authority Key Identifier:
                keyid:FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JADy7GItseXFu443O5GisGdjKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/oemAIxDgq_IJeHDDtZzDWJFD52Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/_JADy7GItseXFu443O5GisGdjKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.104.0/22
                IPv6:
                  2a0a:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:ef:47:d5:73:2b:ba:02:90:e5:1c:9c:2b:aa:c5:3a:cf:
         98:0c:78:73:a0:04:e7:e5:6d:77:89:26:75:c0:a6:c4:29:0f:
         d0:ba:4f:b0:9d:c4:5e:34:ea:e8:e4:5c:42:f9:04:7b:16:30:
         e4:23:5a:26:73:02:b5:fe:76:ca:07:f1:21:0b:12:66:1c:96:
         75:37:a3:fe:34:f7:47:b0:80:5c:67:d4:2a:0d:64:e0:bc:2b:
         72:f0:cb:16:78:59:b7:68:5b:86:17:d3:bc:88:27:35:ba:be:
         2b:86:8a:4c:1b:3a:e0:82:c0:fe:21:7c:31:df:c8:00:9b:3b:
         4f:4e:af:2c:80:75:be:e0:2e:a5:8e:c4:d0:70:8c:ec:40:dc:
         11:aa:7d:e5:00:e7:5b:ba:50:86:fd:60:33:40:b5:6e:6c:6f:
         b3:8f:68:90:dc:ee:42:66:a5:8d:c8:82:bb:85:70:0b:f6:56:
         5a:24:37:c8:84:ab:99:00:d4:1f:18:14:5f:56:18:f9:54:26:
         2e:c9:c0:39:c9:27:aa:3a:c3:9a:da:6e:f3:5c:f1:7d:5c:33:
         a3:09:6d:26:6a:c6:19:f6:7f:fe:fe:f9:1c:0d:95:e6:de:0e:
         7f:4d:09:ba:21:3f:b9:69:d8:5a:6d:78:30:23:4b:2c:fc:db:
         96:ec:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----