Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa
File:                     0oDsH_BuzfMnC3roNY-fUAe775E.roa (raw, json)
Hash identifier:          vla7RGqHt30Absb3aEb6V+4Gx2xVSVTP8K7KQO5F7qo=
Subject key identifier:   D2:80:EC:1F:F0:6E:CD:F3:27:0B:7A:E8:35:8F:9F:50:07:BB:EF:91
Certificate issuer:       /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial:       04CF4813
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa
Signing time:             Sat 01 Jan 2022 16:02:28 +0000
ROA not before:           Sat 01 Jan 2022 16:02:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209272
IP address blocks:        88.214.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80693267 (0x4cf4813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
        Validity
            Not Before: Jan  1 16:02:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d280ec1ff06ecdf3270b7ae8358f9f5007bbef91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:e7:db:c1:b8:e6:77:99:dd:54:0e:f8:44:
                    63:c2:bd:a5:cc:37:64:12:8c:16:55:b0:0c:88:aa:
                    a8:58:7f:53:59:8a:a9:8b:70:5f:ae:4c:a8:b3:49:
                    1a:e9:01:c4:6e:77:9e:10:93:af:38:f0:05:f2:e6:
                    72:7d:ad:0d:11:30:f7:5e:e4:76:46:61:3f:0f:55:
                    7d:28:9a:4f:5d:b8:c6:5c:af:a6:1b:5e:ff:ab:92:
                    a3:aa:d2:81:ea:3c:16:1f:ac:9d:a9:4f:58:8d:7b:
                    1c:3f:2a:fd:32:3b:3a:59:ad:06:89:47:1a:ef:f3:
                    91:3b:87:10:79:2d:59:fd:c9:9e:f1:69:22:32:0a:
                    02:e8:d7:f0:79:d7:69:54:e7:46:e8:c0:c6:ad:f6:
                    fd:d9:74:47:d0:df:80:0e:52:0f:2f:0f:b1:e0:42:
                    28:57:aa:b5:e5:b2:57:42:83:eb:c3:62:0e:6b:01:
                    9e:af:c3:8a:af:b5:86:93:bd:da:5d:83:61:7c:5e:
                    dd:11:c7:82:fe:8d:ae:3a:64:63:ca:68:35:ce:56:
                    8a:33:f2:ed:60:e2:7e:49:ae:05:a6:4f:22:3e:09:
                    59:04:a7:d8:84:95:91:bd:de:ad:f3:b8:e4:b4:aa:
                    3f:90:3f:43:ae:4a:d1:08:c6:6d:aa:e4:3a:57:22:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:EC:1F:F0:6E:CD:F3:27:0B:7A:E8:35:8F:9F:50:07:BB:EF:91
            X509v3 Authority Key Identifier:
                keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:09:6a:06:04:c7:63:95:cb:17:40:66:81:da:29:b8:95:
         70:3e:dc:27:9e:0a:34:6e:57:5c:67:7f:a8:bc:a1:a1:de:66:
         bb:73:75:99:4a:ca:d7:60:38:07:e9:4b:81:87:62:99:77:b0:
         34:d1:d4:9b:21:f8:fc:77:e1:23:50:23:1b:96:d6:4f:74:09:
         3d:93:09:53:f1:77:18:3a:a5:54:d2:04:d3:33:0a:1c:e7:72:
         04:88:ac:14:72:e0:38:2c:8c:68:8c:0e:1f:06:f5:6b:b2:24:
         1f:19:97:f6:3f:c7:bd:82:17:56:dd:55:c2:f7:39:55:6e:52:
         c5:6e:03:66:d5:85:59:44:4c:7c:16:dc:d0:af:e5:15:fa:11:
         60:07:bb:da:55:6d:69:09:1a:0c:73:e8:d0:38:ba:e0:70:24:
         53:de:5a:33:84:fe:68:7f:49:71:5c:e8:7f:c1:af:22:6d:02:
         1b:c7:24:f5:1d:3c:aa:aa:e3:09:15:0b:1d:48:ca:1c:3f:52:
         12:bd:5a:c4:1c:c5:ac:ce:27:f0:bc:7e:e7:2d:0b:ca:2a:ce:
         73:be:88:b7:9b:71:5c:75:35:15:4c:fc:37:2a:79:20:5b:53:
         22:7f:bc:2e:f4:8a:2e:68:34:c6:4c:19:95:6e:d2:3e:57:86:
         07:aa:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----