Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa
File:                     UR9TEef280M5PP2VVAqZn0aAkCs.roa (raw, json)
Hash identifier:          2jlYhla8e+PHfkiG5OT7Gw6kga80uaHg/XomO7yvf9o=
Subject key identifier:   51:1F:53:11:E7:F6:F3:43:39:3C:FD:95:54:0A:99:9F:46:80:90:2B
Certificate issuer:       /CN=e0ca7d33285adb742950087f2e765922ff3edfce
Certificate serial:       05452D81
Authority key identifier: E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa
Signing time:             Sat 01 Jan 2022 15:02:44 +0000
ROA not before:           Sat 01 Jan 2022 15:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203726
IP address blocks:        185.231.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88419713 (0x5452d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ca7d33285adb742950087f2e765922ff3edfce
        Validity
            Not Before: Jan  1 15:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=511f5311e7f6f343393cfd95540a999f4680902b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:94:1f:ed:19:e8:9c:69:0d:87:a9:77:71:
                    74:c9:18:ae:34:ac:1f:d6:c3:d8:de:77:e7:9c:96:
                    fd:71:2e:d0:c5:68:10:3b:dc:cb:91:73:a8:eb:6c:
                    e9:d3:df:73:54:06:0c:ea:2d:b3:c3:e6:25:12:2c:
                    5c:31:1a:12:ae:78:ff:8c:df:0a:ac:b3:4f:72:14:
                    f0:33:5e:a6:6b:37:0f:1c:f8:b3:fe:85:6e:70:11:
                    5c:ee:e0:19:8b:b4:19:12:7c:e7:4b:f7:a3:00:24:
                    83:5a:68:aa:93:f4:8f:9c:79:38:09:c7:c8:4e:57:
                    ae:10:04:47:94:15:bf:96:c3:c5:7b:4b:23:d0:a2:
                    35:21:a9:3f:ea:14:44:0b:f1:a0:00:0b:7c:dd:6d:
                    2e:45:8e:e6:52:92:72:8b:02:1d:6b:8e:a9:9a:61:
                    ff:6a:6e:20:53:30:81:50:25:17:e6:99:6e:65:a9:
                    90:bb:b3:af:cf:58:5a:8d:5d:83:53:93:37:b7:b8:
                    57:2c:da:2c:f7:67:65:54:55:b3:e8:8b:8b:f3:98:
                    f7:cf:eb:42:f6:dd:75:d9:69:f4:0d:1a:f0:77:68:
                    2f:c2:ec:27:d7:f9:d9:51:ba:2a:fa:25:fb:e3:84:
                    1e:f6:d4:7d:7e:bb:c9:a8:2d:5d:9b:c5:b7:5c:c3:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:53:11:E7:F6:F3:43:39:3C:FD:95:54:0A:99:9F:46:80:90:2B
            X509v3 Authority Key Identifier:
                keyid:E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:0d:ee:d3:91:60:f9:38:39:98:09:21:de:54:54:90:6e:ea:
         51:a5:72:9a:ec:0b:52:89:33:76:bf:c2:91:aa:2f:52:00:65:
         75:b6:20:ab:af:4e:b9:3b:20:fc:cc:76:eb:76:ce:3e:0d:cd:
         77:25:e0:53:e4:ef:c4:d8:de:ac:63:8d:8b:a0:db:17:f6:aa:
         47:03:91:ce:0b:75:06:37:8d:0f:36:c2:dc:04:2d:1e:4d:ab:
         ae:1b:85:c2:51:fe:c1:77:6c:34:e7:6b:cc:fe:4e:d5:d0:ad:
         d1:b6:66:21:ad:e8:fc:2a:ad:96:ff:7f:a3:ae:e4:ef:3f:14:
         a7:9b:02:7a:b9:b6:a6:b3:07:ed:40:8e:db:83:eb:67:2d:bd:
         14:c1:f6:d8:f8:1d:1a:7e:e6:e5:5d:03:86:54:32:14:c8:f8:
         f9:4a:21:8e:47:9f:c8:d9:85:9d:bb:27:c5:35:ab:f0:a1:e3:
         26:47:78:44:1c:f0:e2:b0:68:5a:21:68:07:f0:7b:5d:d8:1f:
         82:cd:7f:b5:7c:9b:bb:ef:c3:0c:3c:4f:52:6b:21:c3:86:6e:
         3e:24:c3:79:f3:f6:6d:db:b8:7b:87:28:33:1f:ec:c8:20:c6:
         51:bd:4b:3b:ab:aa:35:bb:b4:ea:d4:98:aa:b1:dc:73:e8:9c:
         b5:78:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----