Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/KFMEYApHVGvCIe-fGFHYntirZvw.roa
File:                     KFMEYApHVGvCIe-fGFHYntirZvw.roa (raw, json)
Hash identifier:          vMhwrZzzTqLQ+RchifDPRqwxYGUz5iCGx3Qks7C3na0=
Subject key identifier:   28:53:04:60:0A:47:54:6B:C2:21:EF:9F:18:51:D8:9E:D8:AB:66:FC
Certificate issuer:       /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial:       0184BE6EFB9386F8F7496E1EBCAEF901CC72
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/KFMEYApHVGvCIe-fGFHYntirZvw.roa
Signing time:             Mon 28 Nov 2022 13:30:55 +0000
ROA not before:           Mon 28 Nov 2022 13:30:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25393
IP address blocks:        193.178.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:6e:fb:93:86:f8:f7:49:6e:1e:bc:ae:f9:01:cc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
        Validity
            Not Before: Nov 28 13:30:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=285304600a47546bc221ef9f1851d89ed8ab66fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:05:e5:43:b9:ac:6d:1d:83:58:58:d4:5a:
                    25:2b:35:48:68:84:1a:7d:8a:51:50:fd:09:24:b6:
                    e3:0b:b7:36:ed:63:a7:1d:86:6f:b9:81:06:df:9a:
                    e4:14:82:31:d2:ea:4a:ec:02:70:74:69:9a:7b:3a:
                    b4:59:7a:0b:59:29:93:bc:86:f4:55:55:82:e9:67:
                    ce:d2:11:b2:1a:19:6f:e1:f9:ad:14:68:5e:7c:bb:
                    56:7c:d6:94:ce:53:99:31:7f:da:f5:ff:56:29:76:
                    4a:ac:9a:54:3b:47:c7:2a:dd:b2:66:b2:cd:a4:fb:
                    78:2a:69:13:da:22:4a:12:3a:a7:a7:98:09:30:3a:
                    1b:9b:51:ad:c0:d3:5c:cb:3f:27:ee:d6:d2:e1:a3:
                    27:c8:90:56:42:f0:88:0a:af:b3:6c:b8:5f:d6:63:
                    af:35:16:a5:7a:f2:32:38:a1:a0:dd:a1:b0:71:fe:
                    f4:8f:58:a9:7a:cf:74:44:25:e3:a4:92:e3:59:18:
                    d1:47:96:de:e0:a2:76:65:97:34:85:10:ff:fe:88:
                    bb:86:42:74:d2:37:dd:9b:0a:d2:31:20:66:54:5e:
                    3c:31:d2:a9:84:ac:a0:cc:a9:73:da:7a:cd:43:f6:
                    e9:51:c4:19:27:97:ab:69:c6:e9:16:a9:e2:22:37:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:04:60:0A:47:54:6B:C2:21:EF:9F:18:51:D8:9E:D8:AB:66:FC
            X509v3 Authority Key Identifier:
                keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/KFMEYApHVGvCIe-fGFHYntirZvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:5a:17:e0:6b:97:59:cc:f4:ed:c3:d0:d1:8e:74:df:03:
         23:5b:00:06:b3:7c:ea:eb:42:1e:76:de:bc:c4:e6:c5:4f:aa:
         2b:ea:06:1a:46:f8:f5:1f:f1:1b:10:00:79:c3:f3:de:63:c6:
         f3:8b:02:60:05:0b:73:0c:97:e4:d0:61:cf:2d:8e:ba:fb:96:
         58:5f:2a:f2:76:e8:3c:1b:b1:d8:10:78:26:ba:10:3d:5c:0b:
         51:5f:0f:bc:9e:bb:25:17:dc:0a:82:cb:e8:6a:97:d2:36:48:
         f3:41:bb:05:f1:4e:8d:93:86:9f:e6:6c:0c:49:4b:32:9a:13:
         be:27:93:47:cc:1a:2d:19:24:40:32:e5:cc:a4:a2:9a:8a:d0:
         c2:e3:22:7c:14:ae:13:9e:49:ee:de:57:56:57:42:ad:b4:fd:
         ce:0e:a0:b5:aa:94:51:18:a1:41:5b:15:00:18:aa:23:81:f4:
         b6:63:9d:7f:a6:5c:11:de:d3:d4:2d:41:f2:79:7e:6e:72:c8:
         8a:a4:e5:37:40:1b:8d:a4:76:1f:5f:07:30:73:58:6c:c5:da:
         a9:14:f0:c0:6e:19:6c:01:7e:72:97:d4:0c:68:70:64:fb:11:
         a7:4a:5b:e3:f5:b5:62:72:2c:bb:c4:74:15:28:12:9b:9a:10:
         6c:2a:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----