Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J8nuE5nkRTIJXP78lw46zXVVFu0.roa
File:                     J8nuE5nkRTIJXP78lw46zXVVFu0.roa (raw, json)
Hash identifier:          zN7HB8s1S5r8DR6zQJWoM0TB998Iq8WdXfWJ5YfYHSQ=
Subject key identifier:   27:C9:EE:13:99:E4:45:32:09:5C:FE:FC:97:0E:3A:CD:75:55:16:ED
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0306E59D
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J8nuE5nkRTIJXP78lw46zXVVFu0.roa
Signing time:             Sat 01 Jan 2022 01:50:25 +0000
ROA not before:           Sat 01 Jan 2022 01:50:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        141.98.74.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50783645 (0x306e59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jan  1 01:50:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27c9ee1399e44532095cfefc970e3acd755516ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:58:e0:74:15:94:cf:c5:34:86:86:73:77:
                    d2:9d:43:fa:36:06:19:98:c8:be:64:2b:77:4b:75:
                    57:5b:e3:14:d5:3b:82:1b:90:06:36:d0:c0:ce:c3:
                    5b:e1:59:3f:e4:4b:a2:a7:96:f5:59:58:71:13:d1:
                    3a:58:7b:b7:31:47:8c:b6:90:a1:d8:33:63:25:a7:
                    03:5f:f2:ed:c0:a5:c7:50:41:ec:ed:4f:a4:ab:7a:
                    a8:16:51:33:2f:26:32:33:d1:63:a4:9a:02:13:5e:
                    60:c3:37:95:43:6b:cb:d2:05:d3:9d:38:02:4b:e3:
                    96:ab:35:ce:5b:f8:43:65:be:ef:70:35:12:5b:0e:
                    50:35:65:a3:e0:1c:59:b8:78:98:11:3b:93:54:62:
                    81:0a:96:61:43:52:f7:5a:81:07:9d:88:30:f6:4b:
                    63:65:d7:36:ae:3b:0d:ab:3c:57:ff:94:27:49:57:
                    c5:ad:eb:8d:44:99:bd:d1:6a:c4:87:57:31:b5:69:
                    f3:4d:d6:af:d7:5d:88:93:c5:8b:dd:d7:e5:d0:b1:
                    c4:7b:15:b0:46:9d:38:b5:da:c6:00:3e:f4:60:c4:
                    eb:bf:8b:40:f2:95:1a:10:f6:8c:ef:d7:47:5e:ee:
                    12:46:45:bd:8f:5b:ed:ea:f3:cc:86:d4:b1:50:c1:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C9:EE:13:99:E4:45:32:09:5C:FE:FC:97:0E:3A:CD:75:55:16:ED
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J8nuE5nkRTIJXP78lw46zXVVFu0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:57:25:cb:aa:64:97:2e:a2:18:1c:a7:2f:b0:1c:1b:d0:44:
         20:40:29:42:40:f8:d7:47:37:0d:07:81:d9:8a:9d:23:ed:68:
         e4:66:76:81:f1:82:7d:a3:c0:b4:ad:e6:39:bb:f0:a2:13:94:
         c9:bf:0e:e4:ab:ca:7e:d9:cf:c9:cb:1b:c0:68:b2:76:65:61:
         15:e3:c8:b5:8c:7c:c4:77:34:8f:e9:2e:b7:62:67:fe:30:d0:
         73:1a:96:1a:60:04:6c:67:4b:40:4e:a1:c4:2a:c9:a0:75:b4:
         26:71:09:c4:19:8a:e9:c6:52:ed:b1:a0:e9:38:b8:74:1f:56:
         37:aa:c8:38:00:72:ba:42:cd:53:0b:13:fb:c2:7a:55:0e:fd:
         c7:ac:f9:77:05:17:ed:40:8b:fb:da:a7:a2:10:25:26:64:5c:
         dc:72:99:5f:29:c9:66:df:74:7d:1f:31:25:37:f1:de:53:78:
         74:e0:d5:31:d9:14:4f:af:99:47:95:56:7e:ac:13:ee:0a:27:
         be:05:fa:37:23:1f:41:8b:75:00:27:e1:df:88:9e:5c:88:27:
         f1:9c:5c:fe:d9:e8:dd:0d:05:c9:da:66:8f:74:44:28:9b:46:
         1b:21:37:30:48:7f:45:14:6a:ec:bf:d6:aa:26:09:26:bc:34:
         ea:75:cc:9d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwblnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDEw
MTAxNTAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdjOWVlMTM5OWU0
NDUzMjA5NWNmZWZjOTcwZTNhY2Q3NTU1MTZlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyuWOB0FZTPxTSGhnN30p1D+jYGGZjIvmQrd0t1V1vjFNU7
ghuQBjbQwM7DW+FZP+RLoqeW9VlYcRPROlh7tzFHjLaQodgzYyWnA1/y7cClx1BB
7O1PpKt6qBZRMy8mMjPRY6SaAhNeYMM3lUNry9IF0504Akvjlqs1zlv4Q2W+73A1
ElsOUDVlo+AcWbh4mBE7k1RigQqWYUNS91qBB52IMPZLY2XXNq47Das8V/+UJ0lX
xa3rjUSZvdFqxIdXMbVp803Wr9ddiJPFi93X5dCxxHsVsEadOLXaxgA+9GDE67+L
QPKVGhD2jO/XR17uEkZFvY9b7erzzIbUsVDBXlECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnye4TmeRFMglc/vyXDjrNdVUW7TAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L0o4bnVFNW5rUlRJSlhQNzhsdzQ2elhWVkZ1MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY1iSjANBgkqhkiG9w0BAQsFAAOC
AQEAC1cly6pkly6iGBynL7AcG9BEIEApQkD410c3DQeB2YqdI+1o5GZ2gfGCfaPA
tK3mObvwohOUyb8O5KvKftnPycsbwGiydmVhFePItYx8xHc0j+kut2Jn/jDQcxqW
GmAEbGdLQE6hxCrJoHW0JnEJxBmK6cZS7bGg6Ti4dB9WN6rIOAByukLNUwsT+8J6
VQ79x6z5dwUX7UCL+9qnohAlJmRc3HKZXynJZt90fR8xJTfx3lN4dODVMdkUT6+Z
R5VWfqwT7gonvgX6NyMfQYt1ACfh34ieXIgn8Zxc/tno3Q0Fydpmj3REKJtGGyE3
MEh/RRRq7L/WqiYJJrw06nXMnQ==
-----END CERTIFICATE-----