Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/DbeuL--fIjJBE_NQ69-DhI4e5Zs.roa
File:                     DbeuL--fIjJBE_NQ69-DhI4e5Zs.roa (raw, json)
Hash identifier:          UdFY9xNIeNsOcH3qaWxucUw/teddk7rkafh+6QPi6Wg=
Subject key identifier:   0D:B7:AE:2F:EF:9F:22:32:41:13:F3:50:EB:DF:83:84:8E:1E:E5:9B
Certificate issuer:       /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial:       FACC6A
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/DbeuL--fIjJBE_NQ69-DhI4e5Zs.roa
Signing time:             Tue 05 Apr 2022 08:54:30 +0000
ROA not before:           Tue 05 Apr 2022 08:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7155
IP address blocks:        37.19.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16436330 (0xfacc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
        Validity
            Not Before: Apr  5 08:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0db7ae2fef9f22324113f350ebdf83848e1ee59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:48:b8:2c:6f:ee:df:f5:2f:50:ac:cc:f9:
                    a8:eb:b8:6c:60:57:00:65:f8:8b:33:42:ed:cb:f3:
                    07:82:fe:33:2d:4c:ef:60:3f:96:cb:fc:a8:05:68:
                    7d:fd:36:30:b0:f2:29:fe:54:0c:1a:d5:af:53:6a:
                    c1:fa:12:4c:71:ce:fa:c5:5f:53:84:3d:39:94:84:
                    75:ff:2e:34:08:e5:c3:16:61:c5:d5:43:86:17:b8:
                    be:22:99:1c:f4:9e:85:10:c4:5c:eb:f6:cf:d1:cc:
                    99:1c:f4:0d:77:24:e2:b1:6e:0e:1a:29:22:82:b5:
                    a4:bb:79:2d:55:57:ee:5b:f5:3d:66:9a:7f:64:b4:
                    ee:81:0d:fc:fe:5a:d3:5a:e5:38:56:bc:c7:98:9a:
                    01:9a:01:77:ef:d7:b7:09:cf:e7:5f:42:73:c1:00:
                    70:bc:4d:de:38:ce:43:4f:12:9f:f7:ed:65:fa:ea:
                    70:3f:ac:13:51:a5:24:aa:a7:5f:57:22:2a:84:f2:
                    05:68:6a:78:11:00:3a:03:b4:a4:76:4a:37:5d:8d:
                    04:40:14:d1:42:be:f0:f9:6f:be:3d:09:28:25:4e:
                    ac:18:c3:e8:ed:7a:31:a1:a6:15:f4:ec:f3:df:9f:
                    4a:e1:4a:84:16:fe:64:bf:fa:f9:dc:4c:58:2b:7a:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:AE:2F:EF:9F:22:32:41:13:F3:50:EB:DF:83:84:8E:1E:E5:9B
            X509v3 Authority Key Identifier:
                keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/DbeuL--fIjJBE_NQ69-DhI4e5Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:d5:ab:55:00:c6:7f:77:20:81:cf:da:98:05:1b:45:8f:41:
         d2:54:74:76:0c:8c:d4:93:23:37:7b:10:df:32:c0:a0:5c:bb:
         fa:7b:6e:ac:95:ef:8e:37:61:0b:1b:9a:d5:9b:10:cf:94:56:
         16:13:0e:74:20:c1:93:3d:4f:6d:c3:f3:52:64:3c:df:95:4b:
         f5:b6:e8:17:b5:60:64:64:2b:5c:e5:c6:e5:6d:f6:19:67:a3:
         2b:0c:bd:fc:22:7f:53:8a:fe:dd:54:9e:87:52:4c:c1:f9:72:
         96:66:97:49:16:81:c2:5a:d4:b7:7b:cc:f2:2e:52:53:21:ec:
         8e:a9:8a:cc:81:47:53:72:8c:64:8e:24:48:18:40:15:b4:04:
         ac:35:32:55:91:03:a1:9e:5d:3d:f8:01:6d:9f:fe:71:5a:58:
         8b:1e:b4:64:7b:11:9a:88:95:3a:1f:b9:28:8c:f5:a5:7d:3a:
         8c:1e:20:6a:c5:aa:97:48:91:68:05:d4:ea:46:50:ff:4f:f5:
         0b:13:24:86:7c:5f:ed:2c:69:be:cd:0a:20:c3:40:33:c9:88:
         f0:bd:32:f9:2e:3a:7d:aa:2d:07:3a:a2:68:02:f3:b5:01:ae:
         f0:b6:ef:54:6e:ac:0e:03:66:d0:c6:a5:06:2a:aa:a6:f8:b3:
         da:ba:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----