Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa
File:                     XIFCxt9Teli_YvIM9pP0Qo98RSo.roa (raw, json)
Hash identifier:          39r978Oh911CYuI9tt4W6zriGjC0gx5rUiNrRX7MRbo=
Subject key identifier:   5C:81:42:C6:DF:53:7A:58:BF:62:F2:0C:F6:93:F4:42:8F:7C:45:2A
Certificate issuer:       /CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
Certificate serial:       018570671CE4549B33459E9B927546870F2C
Authority key identifier: D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa
Signing time:             Mon 02 Jan 2023 02:54:43 +0000
ROA not before:           Mon 02 Jan 2023 02:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201435
IP address blocks:        193.39.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:1c:e4:54:9b:33:45:9e:9b:92:75:46:87:0f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
        Validity
            Not Before: Jan  2 02:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c8142c6df537a58bf62f20cf693f4428f7c452a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:78:ba:a7:57:63:c2:e7:62:ea:97:2b:8a:
                    5a:6d:3d:0f:af:4d:17:be:17:50:4f:98:5e:e5:e2:
                    da:f4:a8:df:92:33:db:77:82:b0:3f:1c:2b:16:aa:
                    2a:1e:82:1e:ba:ec:e4:76:9b:84:14:8d:4e:40:91:
                    74:e9:39:43:7f:3d:cf:8d:1d:f9:52:26:f9:2d:50:
                    61:80:c3:51:2b:f9:2f:f5:0b:46:b7:01:4f:19:96:
                    bd:b1:21:0d:bd:f2:65:f1:5e:b7:a2:72:65:be:4b:
                    44:68:e0:5d:d5:28:29:e8:7a:a9:cb:aa:0a:35:6e:
                    46:3b:85:e1:29:b9:7b:b5:35:23:e7:72:3e:60:06:
                    13:fb:3e:85:e3:eb:b6:16:3f:9c:13:75:cd:9f:21:
                    96:48:cd:dc:45:71:30:91:c7:df:69:2a:b2:d8:ee:
                    a9:65:47:03:84:6d:ff:1c:76:f0:2f:71:35:5d:5f:
                    33:58:fb:c7:f3:1b:b1:90:ee:d8:cf:10:f4:3e:59:
                    6d:98:d3:96:79:1e:fb:ce:ac:28:e6:85:07:47:1f:
                    04:13:88:11:fc:7d:98:62:80:01:c2:4a:34:46:c1:
                    5a:43:93:54:ac:1c:67:70:39:ef:49:56:65:e3:a6:
                    3a:5c:a9:f7:9f:04:10:fc:f2:28:68:f0:95:c9:df:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:81:42:C6:DF:53:7A:58:BF:62:F2:0C:F6:93:F4:42:8F:7C:45:2A
            X509v3 Authority Key Identifier:
                keyid:D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:24:8d:c7:0c:77:52:20:56:70:91:57:77:99:e1:af:85:e6:
         19:a4:df:6b:31:bb:12:24:6c:cd:1d:d5:ed:42:3f:ea:51:5a:
         03:b7:89:27:a1:3b:34:37:c7:02:87:97:80:20:3c:24:b5:46:
         c3:d2:b2:28:88:58:14:3c:c5:ae:fc:32:68:ec:21:97:a4:b3:
         86:61:21:ed:83:4b:cf:c8:fa:14:0d:cf:3d:02:54:a0:88:e7:
         10:8c:fd:ab:b3:b7:04:68:7f:6b:e2:da:2f:47:7e:d2:9c:5e:
         22:82:61:c6:86:13:76:9c:ab:af:56:a5:37:40:7a:5f:51:89:
         a0:c9:39:b4:60:70:ef:1a:b9:75:95:1e:09:b1:ea:10:1b:bc:
         d0:f5:30:f9:15:d2:96:21:38:94:82:f7:e4:69:36:d4:91:a6:
         a0:dd:ab:3b:ae:7c:03:3c:47:95:dd:31:cb:e4:b4:14:d2:19:
         5c:3e:e7:3c:c1:e5:ea:2c:8e:4a:95:df:f1:4a:14:19:c5:f3:
         2c:c9:a6:ed:06:40:80:3b:74:5d:7b:7c:42:40:ce:e7:24:9a:
         31:eb:35:ad:3a:88:57:27:4c:40:f7:b6:a2:ed:60:d5:46:d6:
         74:0e:3a:93:2d:05:ea:07:f9:a9:9c:d9:01:30:c4:ad:55:3c:
         e8:fe:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----