Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa
File:                     pVYTLNWqfZvNavHqpazLJ4ouK_U.roa (raw, json)
Hash identifier:          uL+jE48tuaRVe1mwI0hOxK6q7FMKLn6rDouMO1/Im/s=
Subject key identifier:   A5:56:13:2C:D5:AA:7D:9B:CD:6A:F1:EA:A5:AC:CB:27:8A:2E:2B:F5
Certificate issuer:       /CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Certificate serial:       01856BDC7D11F78FAC0B3E4BF0023CA2F148
Authority key identifier: FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa
Signing time:             Sun 01 Jan 2023 05:44:49 +0000
ROA not before:           Sun 01 Jan 2023 05:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47693
IP address blocks:        185.41.228.0/22 maxlen: 22
                          2a01:56a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:7d:11:f7:8f:ac:0b:3e:4b:f0:02:3c:a2:f1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
        Validity
            Not Before: Jan  1 05:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a556132cd5aa7d9bcd6af1eaa5accb278a2e2bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:47:be:42:fb:7b:1d:8a:9b:7a:5e:cd:2c:
                    c2:cc:bb:39:9f:8d:c2:dc:5a:30:a7:7e:42:0e:26:
                    5a:80:05:36:19:bb:2e:bf:0b:e0:69:dd:98:2e:fe:
                    2a:94:1c:d1:38:c9:d9:48:9c:82:d2:d7:7a:72:a3:
                    b7:86:91:d0:49:1d:3b:eb:37:ea:63:45:bf:6a:99:
                    14:ca:f4:37:92:84:90:f4:17:d8:35:14:2b:b7:31:
                    cc:53:d7:f9:60:7a:87:15:df:0e:f9:a0:d2:95:9d:
                    a9:5e:74:75:18:a4:9c:00:bd:25:c5:20:98:ea:fc:
                    dd:f3:dc:71:93:b9:c8:16:25:f5:c8:1a:ef:04:80:
                    c7:19:4c:82:f7:b4:30:3c:30:6a:b3:58:fb:72:7a:
                    39:39:95:9d:81:d8:d6:80:76:31:ca:c5:7e:4e:a1:
                    33:6b:3a:55:04:f7:b2:a2:06:48:56:56:57:8d:75:
                    23:ee:7c:6a:38:72:7a:db:f4:e0:ee:47:f4:5a:e6:
                    dd:03:d5:8d:cb:58:7e:39:6a:c9:d0:6b:48:58:f9:
                    31:a6:2b:6d:71:3d:9a:03:b9:b8:57:d5:f0:91:1a:
                    58:ba:54:cd:2f:55:91:57:0b:44:c5:24:68:28:50:
                    33:10:e4:da:58:18:c6:99:f8:1b:e9:14:8b:28:ad:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:13:2C:D5:AA:7D:9B:CD:6A:F1:EA:A5:AC:CB:27:8A:2E:2B:F5
            X509v3 Authority Key Identifier:
                keyid:FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.228.0/22
                IPv6:
                  2a01:56a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:da:12:72:05:23:d8:53:71:93:28:7a:78:41:05:44:77:
         64:8e:42:42:06:69:97:e7:68:c5:aa:eb:65:6b:17:11:ba:78:
         fd:78:9a:41:cd:72:3a:32:b6:d2:56:88:bd:11:f6:75:b9:56:
         07:c3:29:4f:7d:3e:15:dd:b5:b5:d6:53:d5:d9:8a:0a:5b:31:
         77:79:5b:92:1d:c7:14:c6:17:76:71:4b:b0:f5:44:0d:ff:64:
         9d:a9:f5:5c:eb:16:85:d6:e6:9f:b7:5c:74:51:b0:21:90:09:
         5f:e7:1e:bc:1e:78:8b:e4:88:cc:7a:df:44:1b:c5:78:9a:85:
         48:7a:bd:03:38:44:e6:e2:82:8f:48:51:22:47:da:75:20:1b:
         a5:02:10:11:31:34:1c:3a:1c:f6:c6:4d:92:ec:f5:26:ba:61:
         42:d9:53:10:4c:6e:3d:70:78:68:04:2f:a5:ef:b4:21:be:5e:
         f2:0a:64:f0:71:36:d6:de:7b:94:64:b6:8c:3e:82:34:62:fd:
         ba:86:fc:d0:25:86:36:b9:2e:b6:88:62:c5:59:7b:fd:b3:46:
         86:8a:d2:55:ec:d9:aa:88:f0:c3:b2:16:d2:e3:22:60:29:88:
         af:da:66:8d:fa:c6:3e:ba:3a:05:6c:55:01:fb:b9:61:d7:70:
         2f:aa:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----