Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/itldIaJrCWUqa4XGrP1rM3u9Upk.roa
File:                     itldIaJrCWUqa4XGrP1rM3u9Upk.roa (raw, json)
Hash identifier:          TGZ1RzGSJCdsX/FZh5QdxIOTaPzLMwMlj2iIcpqNL/Q=
Subject key identifier:   8A:D9:5D:21:A2:6B:09:65:2A:6B:85:C6:AC:FD:6B:33:7B:BD:52:99
Certificate issuer:       /CN=fb08bfb7f36f091de2744a72461e4d801ee7edb4
Certificate serial:       0537D99F
Authority key identifier: FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/itldIaJrCWUqa4XGrP1rM3u9Upk.roa
Signing time:             Sat 01 Jan 2022 06:58:52 +0000
ROA not before:           Sat 01 Jan 2022 06:58:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134196
IP address blocks:        193.239.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87546271 (0x537d99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb08bfb7f36f091de2744a72461e4d801ee7edb4
        Validity
            Not Before: Jan  1 06:58:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ad95d21a26b09652a6b85c6acfd6b337bbd5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:e8:f7:64:b6:f2:79:b5:3a:b8:1a:26:1c:
                    d3:85:b0:2a:39:78:0d:68:49:23:ad:dd:a4:65:96:
                    63:20:37:3a:05:46:f0:dc:4b:a8:f6:7f:ec:90:eb:
                    33:31:53:4e:3e:08:d5:c5:74:0b:94:9d:32:c8:49:
                    8b:76:36:50:d0:95:4d:f2:fd:2c:13:9c:9a:e8:8b:
                    66:e2:a8:94:11:8d:95:fb:ea:d2:2f:4e:a1:79:88:
                    a2:b8:ec:60:40:66:f0:3a:cb:af:6f:56:db:82:2e:
                    97:1e:c5:d7:90:08:97:1e:9e:2e:d2:8e:32:0f:33:
                    b2:50:c3:5c:77:14:dd:d9:d4:0e:77:73:3e:42:4b:
                    01:d2:e7:6c:7c:b4:84:6a:c4:39:96:e1:17:47:a2:
                    9a:85:b0:38:7d:4e:31:57:63:60:96:b8:e4:67:e9:
                    56:2b:c8:f8:d6:82:4d:f1:c0:7e:c5:b8:75:fc:63:
                    73:6c:84:42:d4:54:c3:36:1d:2f:72:53:92:64:a3:
                    61:5a:aa:9c:62:b5:eb:97:16:5c:ae:1c:07:47:15:
                    f0:de:0a:7f:45:77:ae:29:75:03:33:ba:23:0f:75:
                    37:a1:af:11:b7:46:13:9e:8d:be:23:84:18:70:d0:
                    41:60:fc:1b:25:27:17:0c:d5:3a:1f:f1:b6:ee:b3:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D9:5D:21:A2:6B:09:65:2A:6B:85:C6:AC:FD:6B:33:7B:BD:52:99
            X509v3 Authority Key Identifier:
                keyid:FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/itldIaJrCWUqa4XGrP1rM3u9Upk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:77:87:7c:9f:b6:8c:ff:7c:9f:14:0c:33:c1:e2:36:5b:e9:
         1c:7c:37:77:50:bd:c0:e7:25:ca:81:f2:4a:01:d9:fb:d4:74:
         8f:8d:1b:fb:a7:2a:ac:23:7d:1c:d7:6c:a0:f6:88:ad:65:e3:
         00:3f:4c:cd:4e:7a:40:aa:fa:b5:a9:f7:d4:dd:75:bd:4c:e0:
         bb:97:e5:49:75:4e:b4:b9:f5:f7:13:74:d4:ef:10:52:9c:3a:
         77:f3:36:6d:04:c6:24:ed:fe:58:52:96:06:72:69:28:99:54:
         ca:d1:e2:5d:b3:61:55:12:b9:ca:c5:c7:ba:6b:74:3e:30:22:
         d5:8e:ea:bb:67:df:5a:73:15:2d:5f:2d:f5:56:19:ed:57:be:
         3e:d1:d1:b2:9e:0e:51:09:7b:69:7b:94:79:c2:42:3d:4d:d9:
         4b:be:74:29:47:73:77:5b:00:dc:bc:37:26:71:68:96:c3:72:
         38:ed:9f:19:8c:00:2e:1b:82:be:e3:fc:f3:9d:27:eb:fb:0f:
         39:5c:c5:a6:3f:c5:38:72:0e:32:61:8d:c3:89:d7:d4:bc:96:
         26:29:e9:5a:c2:0b:b8:6d:21:d5:07:21:7a:4f:86:08:cc:e7:
         9f:57:bd:fb:68:e6:f6:d2:1d:2e:f5:d6:3f:7c:70:17:6a:5a:
         98:f2:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----