Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-3v8bnkizlBVX8O4l28FC-ebYXg.roa
File:                     1-3v8bnkizlBVX8O4l28FC-ebYXg.roa (raw, json)
Hash identifier:          bszEk0Q8/rQlohC19Mjnj4Vq4DwKQiWDsmJUKAaqp5g=
Subject key identifier:   FB:7B:FC:6E:79:22:CE:50:55:5F:C3:B8:97:6F:05:0B:E7:9B:61:78
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       018623611268DF8156E87F7BFFD29B099F2B
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-3v8bnkizlBVX8O4l28FC-ebYXg.roa
Signing time:             Sun 05 Feb 2023 21:00:09 +0000
ROA not before:           Sun 05 Feb 2023 21:00:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57238
IP address blocks:        82.118.24.0/24 maxlen: 24
                          2a03:2780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:23:61:12:68:df:81:56:e8:7f:7b:ff:d2:9b:09:9f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Feb  5 21:00:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb7bfc6e7922ce50555fc3b8976f050be79b6178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:4a:2c:94:8e:36:12:da:51:7f:94:77:25:
                    cc:a7:d8:52:17:78:4a:14:3a:e5:c9:21:55:22:64:
                    33:b3:d8:72:1c:98:93:4e:1b:ab:df:89:da:2c:85:
                    19:96:11:22:b1:4d:88:13:41:bf:d0:1a:8c:a5:81:
                    a6:64:e9:10:bd:56:d1:03:f8:6d:66:89:72:31:a1:
                    4b:2b:3b:97:4b:5d:1b:db:5e:de:ac:da:17:53:f2:
                    0f:04:40:7d:0f:ba:0e:a5:cf:c2:5b:5f:bd:c0:bf:
                    d2:9a:c9:8c:4b:17:a6:d0:06:ca:4f:1e:9a:1e:93:
                    a5:a1:8e:26:5a:28:90:53:2a:6f:4f:54:0e:f4:77:
                    58:83:c9:86:64:b2:84:f4:09:10:57:85:86:b3:f4:
                    74:f7:0a:77:d2:de:e6:4d:93:8e:c2:8f:f8:62:22:
                    57:ee:5f:2a:f8:e2:be:a1:1d:eb:24:c3:bf:68:07:
                    c8:36:76:d3:ff:17:e5:5f:2e:db:c5:3a:ad:11:d0:
                    84:ec:5f:84:f8:02:b6:ed:5a:06:18:b4:80:71:8d:
                    50:5d:d6:b5:d9:90:5c:8f:94:af:cb:a9:94:a5:7c:
                    03:c3:0c:07:55:de:e8:fd:13:6b:74:33:e6:36:3b:
                    31:f6:e7:38:12:48:4c:fb:82:03:dd:ad:b1:60:40:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:FC:6E:79:22:CE:50:55:5F:C3:B8:97:6F:05:0B:E7:9B:61:78
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-3v8bnkizlBVX8O4l28FC-ebYXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.24.0/24
                IPv6:
                  2a03:2780::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:54:4f:a0:a3:a6:ee:04:6f:e5:e7:46:58:a5:61:b5:5d:17:
         60:ce:af:19:f0:fe:3b:76:a0:43:0a:b1:2a:84:21:cb:e4:a1:
         99:83:83:83:97:47:2e:ea:4c:92:23:5b:60:0e:b0:d8:94:d0:
         30:bd:64:4a:b3:6a:7c:eb:1d:82:c8:8c:60:ef:f4:ef:fd:d0:
         08:66:ca:78:02:41:57:74:1b:4d:db:fb:62:f8:a5:57:27:1a:
         30:57:12:75:43:77:67:cc:95:ea:dd:42:99:55:8e:d2:ea:ed:
         9f:35:e7:44:09:f7:5e:0b:89:8a:8f:c0:75:15:d4:04:1a:5f:
         e1:fc:93:93:3c:2e:ca:fc:fb:c5:fb:43:88:1e:81:20:da:cc:
         8a:2a:5e:94:5b:b1:e6:f8:e5:7c:14:70:41:59:fd:75:19:67:
         bc:4f:d9:71:9c:85:b4:7d:6e:31:89:ec:92:5f:80:fa:3c:16:
         93:46:b9:b8:c1:88:cd:44:c2:c7:1d:2c:b6:52:88:ad:91:eb:
         a0:46:6b:e9:54:89:4f:bf:4f:7e:92:31:57:ad:8e:e2:ec:60:
         d3:23:63:7a:8c:8e:37:92:37:fc:62:09:cf:09:51:aa:b6:c1:
         55:26:21:01:09:f2:9e:87:3e:a5:92:05:7b:e1:a3:8d:47:7a:
         d5:17:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----