Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa
File:                     XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa (raw, json)
Hash identifier:          +zjYxmzbyrDsi/84TmeGw0sJagKFz4jpr++zLrhwtxo=
Subject key identifier:   5D:1F:29:94:CD:E2:40:23:09:E7:C3:09:42:79:50:FF:94:35:F3:EF
Certificate issuer:       /CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Certificate serial:       06C7BA41
Authority key identifier: C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa
Signing time:             Sat 01 Jan 2022 10:55:13 +0000
ROA not before:           Sat 01 Jan 2022 10:55:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205512
IP address blocks:        85.208.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113752641 (0x6c7ba41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
        Validity
            Not Before: Jan  1 10:55:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d1f2994cde2402309e7c309427950ff9435f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:b3:83:fe:3c:03:d4:5c:2a:c1:d4:f7:05:
                    3a:22:94:25:87:ea:4b:d4:be:a0:e1:f4:c5:f7:8a:
                    11:fd:ef:19:5d:36:0d:e0:b9:26:d1:3d:ce:34:22:
                    84:36:84:9a:d6:39:58:7a:d0:09:da:7e:4a:6a:20:
                    6e:1c:56:4a:69:c5:51:39:87:81:13:25:2b:c1:6f:
                    36:5c:85:e4:f4:af:19:7a:f9:1a:df:3d:e3:b5:e1:
                    ad:88:39:83:1e:bc:f5:51:b5:ae:1a:8a:ab:aa:48:
                    6a:3e:52:3b:ea:fc:d9:7c:2e:84:39:a2:b0:ff:ae:
                    a6:11:15:29:87:0e:b7:c3:de:d5:26:ac:96:39:21:
                    ff:b7:69:4e:17:44:65:74:62:90:9f:06:42:1c:05:
                    f1:62:8d:76:4d:d5:71:9d:9a:80:04:2c:ec:6d:f0:
                    c2:ca:19:69:53:a3:53:9e:51:9e:2f:95:67:52:60:
                    08:09:87:9d:60:33:b5:57:21:ce:41:ba:b4:dc:1f:
                    9c:a9:ec:c8:87:9a:39:95:87:09:74:a1:de:2b:8a:
                    42:26:6f:29:b1:d9:a4:d4:7b:93:33:5c:8d:10:23:
                    73:7a:b4:5e:5a:12:e4:11:59:43:a1:98:64:38:3d:
                    3b:a5:af:77:3b:3f:30:85:2e:77:c6:04:d4:18:7b:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:29:94:CD:E2:40:23:09:E7:C3:09:42:79:50:FF:94:35:F3:EF
            X509v3 Authority Key Identifier:
                keyid:C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:3a:41:ae:90:73:be:20:f2:66:4f:9f:97:ac:a3:e4:2f:
         fa:02:0e:f8:f9:05:03:c0:01:20:da:60:cb:d3:67:07:7e:24:
         5c:36:67:b9:e0:dd:50:fd:90:4b:c5:65:a8:bf:1a:5f:25:48:
         be:3f:8b:f2:1d:0e:39:5c:dd:de:51:b9:73:85:8f:e1:bc:bc:
         a6:24:84:cd:32:e8:f5:6b:41:fd:c3:b8:2e:f5:6d:c6:bb:2e:
         ce:a9:d8:be:d4:2a:6b:63:73:69:2b:af:e0:30:43:bd:e1:f8:
         59:c3:04:c7:f4:92:76:da:4e:39:85:fe:de:1f:6a:73:f5:0c:
         31:bd:36:f7:a6:be:b6:d4:f5:a6:f1:4a:92:23:a7:d9:e4:68:
         9d:c3:49:19:39:b1:75:6a:82:c9:37:82:b9:72:48:7b:c9:de:
         df:cb:7b:91:bc:e5:01:4c:37:f3:be:67:ad:0a:32:5e:91:d6:
         1e:82:3c:7f:ce:81:02:0e:99:21:9c:01:87:93:d1:6d:03:b9:
         e3:6b:c3:ff:a2:5c:57:a0:03:95:74:26:42:d8:f9:69:80:11:
         3a:f9:2d:da:cd:86:0c:36:9a:99:5a:91:cf:dc:86:1b:01:8e:
         18:4d:e3:3d:3c:33:e6:90:af:67:59:00:5c:1c:8b:00:60:c6:
         03:a9:a2:01
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBse6QTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWU4OTZhMzdhODM5OWZhZWJmNDAwMzViZjBmNGE5NTljZmE1YmYyMB4XDTIyMDEw
MTEwNTUxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWQxZjI5OTRjZGUy
NDAyMzA5ZTdjMzA5NDI3OTUwZmY5NDM1ZjNlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJows4P+PAPUXCrB1PcFOiKUJYfqS9S+oOH0xfeKEf3vGV02
DeC5JtE9zjQihDaEmtY5WHrQCdp+SmogbhxWSmnFUTmHgRMlK8FvNlyF5PSvGXr5
Gt8947XhrYg5gx689VG1rhqKq6pIaj5SO+r82XwuhDmisP+uphEVKYcOt8Pe1Sas
ljkh/7dpThdEZXRikJ8GQhwF8WKNdk3VcZ2agAQs7G3wwsoZaVOjU55Rni+VZ1Jg
CAmHnWAztVchzkG6tNwfnKnsyIeaOZWHCXSh3iuKQiZvKbHZpNR7kzNcjRAjc3q0
XloS5BFZQ6GYZDg9O6Wvdzs/MIUud8YE1Bh7fCcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRdHymUzeJAIwnnwwlCeVD/lDXz7zAfBgNVHSMEGDAWgBTB6JajeoOZ+uv0
ADW/D0qVnPpb8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dlaVdvM3FEbWZycjlBQTF2dzlLbFp6NldfSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvMmIxOWE0LWYwYTAtNDdjNi04ZjBiLWQyYjY5OGI5NzQ5Mi8x
L1hSOHBsTTNpUUNNSjU4TUpRbmxRXzVRMTgtOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
MmIxOWE0LWYwYTAtNDdjNi04ZjBiLWQyYjY5OGI5NzQ5Mi8xL3dlaVdvM3FEbWZy
cjlBQTF2dzlLbFp6NldfSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlXQEDANBgkqhkiG9w0BAQsFAAOC
AQEAM9E6Qa6Qc74g8mZPn5eso+Qv+gIO+PkFA8ABINpgy9NnB34kXDZnueDdUP2Q
S8VlqL8aXyVIvj+L8h0OOVzd3lG5c4WP4by8piSEzTLo9WtB/cO4LvVtxrsuzqnY
vtQqa2NzaSuv4DBDveH4WcMEx/SSdtpOOYX+3h9qc/UMMb0296a+ttT1pvFKkiOn
2eRoncNJGTmxdWqCyTeCuXJIe8ne38t7kbzlAUw3875nrQoyXpHWHoI8f86BAg6Z
IZwBh5PRbQO542vD/6JcV6ADlXQmQtj5aYAROvkt2s2GDDaamVqRz9yGGwGOGE3j
PTwz5pCvZ1kAXByLAGDGA6miAQ==
-----END CERTIFICATE-----