Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/fEw1pamDmp1kG_EvJIHFRPzKzms.roa
File:                     fEw1pamDmp1kG_EvJIHFRPzKzms.roa (raw, json)
Hash identifier:          55/prq3G4jQuG+u2ztHN3FALvt5GkpucBlQ/nzr2q14=
Subject key identifier:   7C:4C:35:A5:A9:83:9A:9D:64:1B:F1:2F:24:81:C5:44:FC:CA:CE:6B
Certificate issuer:       /CN=72fb8abc33d141c49137081af4286e82a4cacc96
Certificate serial:       018572DEF9B34CD01869F623A9E058F7DDC3
Authority key identifier: 72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/fEw1pamDmp1kG_EvJIHFRPzKzms.roa
Signing time:             Mon 02 Jan 2023 14:24:53 +0000
ROA not before:           Mon 02 Jan 2023 14:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203020
IP address blocks:        93.157.108.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:de:f9:b3:4c:d0:18:69:f6:23:a9:e0:58:f7:dd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72fb8abc33d141c49137081af4286e82a4cacc96
        Validity
            Not Before: Jan  2 14:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c4c35a5a9839a9d641bf12f2481c544fccace6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:7c:a3:5f:c9:16:76:86:41:72:a2:b4:ae:
                    b0:a0:cb:1c:75:84:b2:8a:8f:33:71:cf:06:45:22:
                    2e:31:3b:1b:90:36:0d:96:5a:c1:4a:13:87:1b:4b:
                    8e:85:96:ed:42:e4:dc:1a:25:0c:dc:25:5b:1c:6f:
                    b1:3f:91:3e:0c:ca:df:f3:67:a4:48:15:13:9b:c3:
                    9b:71:15:ee:26:23:51:d7:f7:58:d9:c8:7e:18:16:
                    5d:89:01:1b:a3:38:3f:d9:e2:a1:37:3c:50:ca:e8:
                    c4:fa:ba:35:b5:37:c5:e8:c3:10:39:b5:77:f5:0d:
                    0a:98:c2:43:15:77:5a:9f:07:40:45:72:51:22:d6:
                    00:9d:f3:a2:5c:0c:32:37:b9:2a:65:5d:53:00:bc:
                    b1:2f:5d:49:6f:d7:50:a9:4a:66:59:a3:36:8e:7d:
                    77:1f:8b:ce:5f:34:1a:b3:57:cb:27:38:b7:3d:5a:
                    73:a3:31:7f:04:ca:02:4f:26:5e:52:98:32:50:62:
                    bb:6a:4c:02:cf:7a:83:ba:62:15:f7:3c:3e:88:82:
                    af:3e:c6:32:40:6b:30:ce:22:47:83:fd:27:43:0d:
                    bb:cc:b7:93:72:5d:a3:cd:79:0a:b9:67:fa:a4:3c:
                    ce:72:ff:c5:3e:5a:9c:ab:15:89:21:8e:d4:2a:4d:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:35:A5:A9:83:9A:9D:64:1B:F1:2F:24:81:C5:44:FC:CA:CE:6B
            X509v3 Authority Key Identifier:
                keyid:72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/fEw1pamDmp1kG_EvJIHFRPzKzms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:7d:15:54:67:19:98:c7:47:5f:27:3c:a8:6f:e9:00:10:
         33:47:7a:20:21:cb:11:ce:ec:b0:e3:91:3e:15:e2:1a:7d:30:
         ac:bd:42:da:54:1c:eb:ac:81:15:ed:4e:66:22:9e:cb:0e:6b:
         80:5b:d5:33:bf:bd:75:f5:52:ee:02:e9:4a:e7:4d:38:b1:95:
         2c:3b:ec:15:50:ba:92:49:5b:12:d5:d9:44:22:41:00:9d:cf:
         64:0c:a0:51:8a:7f:28:b1:75:be:71:94:a0:e2:d3:f6:50:61:
         0c:72:67:98:07:11:89:c2:f5:7c:ec:6d:92:83:60:00:b5:37:
         09:66:a6:09:6d:8f:1d:95:65:69:b4:8d:5a:54:bc:eb:04:6a:
         a1:5d:4c:91:c5:d0:31:90:11:07:b1:3c:1d:87:a3:05:76:12:
         24:32:54:18:d0:ff:81:98:62:2d:c3:47:14:54:9f:2a:ad:e6:
         c7:e5:41:af:c0:65:53:6e:01:06:eb:79:d9:57:18:83:37:b0:
         20:7a:81:9a:bd:3e:76:c6:bb:c6:92:46:4f:36:48:0d:43:84:
         c3:35:d1:1e:ed:06:f3:39:7a:84:0a:90:19:84:ba:42:c7:94:
         b4:f7:2c:b8:54:94:17:88:ee:15:9c:6c:6c:0e:c4:46:bb:25:
         66:ca:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----