Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/TjHJAFaW7dAESxL1AvX3TSfUIsw.roa
File:                     TjHJAFaW7dAESxL1AvX3TSfUIsw.roa (raw, json)
Hash identifier:          Tp3Kg7afLf27c63zMxk5lMN6jqvT5yPbNuYYxPHKLwg=
Subject key identifier:   4E:31:C9:00:56:96:ED:D0:04:4B:12:F5:02:F5:F7:4D:27:D4:22:CC
Certificate issuer:       /CN=b5685e8761667b6e04e242981ea787f79c101c39
Certificate serial:       0E8FDA47
Authority key identifier: B5:68:5E:87:61:66:7B:6E:04:E2:42:98:1E:A7:87:F7:9C:10:1C:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWheh2Fme24E4kKYHqeH95wQHDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/TjHJAFaW7dAESxL1AvX3TSfUIsw.roa
Signing time:             Sat 01 Jan 2022 02:53:54 +0000
ROA not before:           Sat 01 Jan 2022 02:53:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205818
IP address blocks:        185.201.196.0/22 maxlen: 23
                          2a0a:c9c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244308551 (0xe8fda47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5685e8761667b6e04e242981ea787f79c101c39
        Validity
            Not Before: Jan  1 02:53:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e31c9005696edd0044b12f502f5f74d27d422cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:61:d8:7a:87:81:28:1c:31:af:e4:93:01:
                    31:60:da:e8:7f:74:69:62:bb:3e:01:1f:a5:b3:6d:
                    4f:73:30:88:3b:6b:d7:42:66:c4:65:f4:2d:dd:88:
                    ce:e9:c5:60:63:b3:6c:0e:29:36:6c:66:66:ef:0c:
                    b3:cd:f4:57:03:80:9d:d3:3d:9e:37:05:fe:8f:fe:
                    96:cc:c9:76:29:50:46:8e:c9:3d:3a:3f:82:8b:e5:
                    a9:8e:3e:b3:fa:f7:1e:4f:79:ec:52:f3:19:b2:2f:
                    dc:c6:bb:bf:0c:8c:e3:0d:49:1c:18:a2:31:a4:8f:
                    03:41:bf:1d:d5:e0:b9:98:05:c6:20:7c:19:45:86:
                    04:c8:ff:09:be:a4:69:bc:45:75:56:de:5e:1f:36:
                    9e:1b:80:1c:0a:79:06:44:de:97:0e:66:21:9e:01:
                    21:3f:0a:e1:88:a7:e5:5c:6f:ff:7d:54:e9:82:89:
                    9a:e5:5e:bd:f0:e6:22:7c:ac:69:2b:f4:a6:75:fe:
                    e8:53:65:71:eb:3b:cd:ee:5c:35:c9:98:71:62:b5:
                    6f:dc:a4:3c:d6:68:a0:a9:aa:e8:70:3b:06:cb:58:
                    6c:39:55:80:32:92:1f:3f:27:bf:75:50:7e:40:ef:
                    5f:31:5f:57:b9:b4:46:71:8e:46:3c:41:d9:69:f6:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:C9:00:56:96:ED:D0:04:4B:12:F5:02:F5:F7:4D:27:D4:22:CC
            X509v3 Authority Key Identifier:
                keyid:B5:68:5E:87:61:66:7B:6E:04:E2:42:98:1E:A7:87:F7:9C:10:1C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWheh2Fme24E4kKYHqeH95wQHDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/TjHJAFaW7dAESxL1AvX3TSfUIsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/tWheh2Fme24E4kKYHqeH95wQHDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.196.0/22
                IPv6:
                  2a0a:c9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:a0:71:77:d1:f4:08:58:40:56:07:92:55:b3:94:77:65:5e:
         cf:6e:9e:2d:2b:6f:7a:4d:a5:e7:be:db:5b:c0:2c:48:d6:a4:
         bd:d5:c6:ac:7c:a9:50:25:73:b3:02:52:bd:ba:f9:d7:52:ae:
         70:d9:9d:29:e9:f8:9f:6f:64:4c:c7:ef:eb:e8:3d:4a:b6:99:
         3d:02:de:57:d9:e1:a5:0d:ef:2a:9b:23:1d:06:48:4f:61:cc:
         45:20:e5:e6:12:74:8b:9b:19:88:ad:aa:5d:15:50:ef:98:ec:
         42:10:46:61:0b:7e:a5:74:94:91:98:78:0c:77:e1:72:fd:67:
         f4:0f:8a:70:60:2a:0c:88:72:db:72:fe:7c:fb:cf:40:6b:2a:
         53:fa:e4:14:93:27:a7:d2:9a:82:82:15:19:db:a2:6b:62:da:
         55:db:db:25:25:59:be:a1:ed:7f:6b:f1:8b:da:d5:70:64:5a:
         a8:8b:34:2e:43:31:ab:82:09:e4:00:8c:aa:cb:14:9d:81:0f:
         03:fb:31:fe:e8:9b:1c:f5:7c:3d:a2:43:34:ae:4c:34:7a:2b:
         ce:1a:e6:d2:4b:2b:27:27:56:00:0c:6a:d3:90:56:8c:9f:48:
         ba:ac:38:b2:ca:95:02:9a:0f:29:56:88:8f:15:81:7b:45:a8:
         0c:fc:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----