Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa
File:                     0Rx6BK99815NpNUTqUKgkMBDnW8.roa (raw, json)
Hash identifier:          QuR0R+2By7XdndJ17MUq1CytPl7B+zfVKt80/g0Fuq4=
Subject key identifier:   D1:1C:7A:04:AF:7D:F3:5E:4D:A4:D5:13:A9:42:A0:90:C0:43:9D:6F
Certificate issuer:       /CN=8ec628f588e2c4de648369ab8db27cf7cd16a367
Certificate serial:       039F9F98
Authority key identifier: 8E:C6:28:F5:88:E2:C4:DE:64:83:69:AB:8D:B2:7C:F7:CD:16:A3:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsYo9YjixN5kg2mrjbJ8980Wo2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa
Signing time:             Sat 01 Jan 2022 10:56:13 +0000
ROA not before:           Sat 01 Jan 2022 10:56:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212722
IP address blocks:        185.169.7.0/24 maxlen: 24
                          2a10:42c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60792728 (0x39f9f98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec628f588e2c4de648369ab8db27cf7cd16a367
        Validity
            Not Before: Jan  1 10:56:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d11c7a04af7df35e4da4d513a942a090c0439d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:8c:28:bf:53:64:e3:1a:46:99:aa:6f:e9:
                    48:eb:93:7d:50:92:9d:01:81:ec:14:c2:26:fb:ad:
                    2d:26:7a:97:c5:0f:fe:bb:41:55:d3:7c:6c:86:6f:
                    52:0b:08:e0:b1:b1:be:89:f5:94:8f:01:43:dc:ab:
                    e2:2b:b7:c9:f1:24:d4:11:93:d3:d8:bb:3a:21:82:
                    f9:61:cb:7b:20:56:0a:55:53:29:5a:f9:0f:00:94:
                    e5:20:b4:60:b4:8d:e8:97:57:54:a8:b5:a3:5c:27:
                    98:f7:22:70:ec:4e:8a:e0:ad:e7:78:72:cc:cd:55:
                    23:e4:e4:4a:8a:0a:7c:2c:d3:71:cd:3a:8d:a3:95:
                    16:35:83:17:ea:2a:a8:0e:0e:c9:4d:6f:04:79:46:
                    4d:11:93:19:27:01:ba:45:a8:d3:78:bb:20:ab:08:
                    b7:56:8e:4b:41:29:b1:8c:33:c7:f6:fb:64:73:1f:
                    d2:d1:98:5e:a0:5d:7a:78:e7:1d:cc:53:d6:58:8f:
                    95:cb:ed:04:f4:9b:b7:bb:e4:18:68:3b:eb:b0:07:
                    93:4d:51:d0:3d:fc:bf:cf:15:33:b2:c4:7b:c3:90:
                    f9:06:b9:7e:54:61:b2:da:20:b8:d1:b3:50:02:58:
                    bb:8e:0c:16:a8:f4:fd:a8:5b:22:25:18:41:a6:b5:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:7A:04:AF:7D:F3:5E:4D:A4:D5:13:A9:42:A0:90:C0:43:9D:6F
            X509v3 Authority Key Identifier:
                keyid:8E:C6:28:F5:88:E2:C4:DE:64:83:69:AB:8D:B2:7C:F7:CD:16:A3:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsYo9YjixN5kg2mrjbJ8980Wo2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/jsYo9YjixN5kg2mrjbJ8980Wo2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.7.0/24
                IPv6:
                  2a10:42c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:fc:64:5d:df:15:15:6e:b3:f9:f0:a7:18:f5:e3:e5:5b:
         66:e3:34:89:69:9d:73:3d:72:2f:1f:3b:05:a4:ad:00:d2:6b:
         24:ba:91:60:16:45:1d:5a:5b:13:5f:fe:5c:67:5b:eb:e2:1b:
         89:26:23:10:c4:95:1d:62:19:b7:f5:1b:36:23:81:ce:26:40:
         04:f5:aa:84:3b:9d:89:ba:34:ca:d3:af:b6:d3:c5:e7:a8:64:
         0d:55:bb:c5:1a:93:93:a5:60:b7:d4:50:56:81:a0:18:5c:74:
         3b:bf:1a:c0:37:b8:f1:ba:77:a1:b0:2d:c1:4b:97:78:7e:40:
         a8:3d:34:89:84:c9:48:9c:31:a8:74:39:03:64:55:da:f3:83:
         6d:81:ec:92:66:fd:eb:b5:4a:9e:f2:e2:f3:06:cf:7f:f7:ef:
         78:c1:72:75:b9:ea:ea:c1:ad:03:aa:d6:3c:b5:6e:e7:e4:40:
         e4:f3:69:0f:18:5a:53:12:07:69:d3:c3:db:47:5a:75:34:dc:
         a5:00:0f:5e:8a:0c:ca:05:21:19:94:0b:93:34:ba:41:a6:2f:
         af:b6:bc:49:9b:cd:a8:a8:2f:80:7c:50:cd:57:36:1f:9e:78:
         bf:e0:43:ae:15:63:da:08:4a:30:3e:4f:e3:b9:e6:a5:83:ca:
         c6:cc:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----