Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/gSe_8xoJBDHymXVh6HpyZv0EPrM.roa
File:                     gSe_8xoJBDHymXVh6HpyZv0EPrM.roa (raw, json)
Hash identifier:          59BprZzji6KPN9+E38VwyUrSpnl4gAVLo6t+fEknRgY=
Subject key identifier:   81:27:BF:F3:1A:09:04:31:F2:99:75:61:E8:7A:72:66:FD:04:3E:B3
Certificate issuer:       /CN=8d8790b07556cc24a443817eb3a7d50c08fb44bb
Certificate serial:       056C7EB9
Authority key identifier: 8D:87:90:B0:75:56:CC:24:A4:43:81:7E:B3:A7:D5:0C:08:FB:44:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/gSe_8xoJBDHymXVh6HpyZv0EPrM.roa
Signing time:             Sat 01 Jan 2022 10:53:50 +0000
ROA not before:           Sat 01 Jan 2022 10:53:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207142
IP address blocks:        91.197.55.0/24 maxlen: 24
                          2001:678:46c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90996409 (0x56c7eb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8790b07556cc24a443817eb3a7d50c08fb44bb
        Validity
            Not Before: Jan  1 10:53:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8127bff31a090431f2997561e87a7266fd043eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:d1:be:da:1f:af:6a:65:15:a8:2f:76:39:
                    e3:b1:60:ed:c8:c2:9f:24:1d:ec:d5:05:d4:63:51:
                    d9:44:92:26:90:da:95:bf:4c:42:34:aa:fa:74:8a:
                    95:b4:f2:ea:d3:8e:f0:80:ec:8b:ac:52:dc:a9:c5:
                    0e:a2:41:da:01:1a:5e:49:92:4e:85:47:70:1f:93:
                    89:31:f4:9c:84:8d:81:38:8f:cb:46:90:65:a9:23:
                    df:83:2b:64:76:04:d8:52:48:63:42:7f:02:15:86:
                    2d:e9:a9:be:7c:fb:b3:c4:6c:41:e7:7d:d4:cb:69:
                    31:74:17:6b:5f:1c:03:b1:80:c4:62:7a:2e:0f:22:
                    61:d2:57:39:15:f3:54:48:d6:59:e8:2c:ef:ae:8d:
                    c6:21:27:9e:41:e3:93:9e:08:33:9a:69:8a:8b:1b:
                    ba:18:7d:2f:96:da:b0:35:04:87:ea:bb:a9:3c:e3:
                    08:39:d9:20:d3:9d:05:97:59:0a:2f:2b:af:fb:76:
                    f3:d1:ab:fd:73:82:5b:75:94:24:0b:19:7f:1f:dc:
                    1f:b6:e0:c7:93:a0:20:67:70:18:b2:49:9e:d0:f2:
                    56:a2:aa:b0:c5:53:86:da:65:21:c2:20:b2:e6:54:
                    b5:ef:2f:92:03:46:bd:a1:d1:5f:fd:ab:2f:90:91:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:BF:F3:1A:09:04:31:F2:99:75:61:E8:7A:72:66:FD:04:3E:B3
            X509v3 Authority Key Identifier:
                keyid:8D:87:90:B0:75:56:CC:24:A4:43:81:7E:B3:A7:D5:0C:08:FB:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/gSe_8xoJBDHymXVh6HpyZv0EPrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.55.0/24
                IPv6:
                  2001:678:46c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:b2:0d:04:8c:a2:c7:bc:c3:dd:7b:61:d2:a1:bc:88:8a:
         13:51:26:84:66:4d:dd:d6:b8:bd:04:86:38:ea:3d:89:24:c4:
         2e:d2:3d:4f:f9:69:63:33:33:3a:1a:3e:ce:55:c7:a6:3d:e8:
         13:37:95:8b:64:b1:60:12:db:08:d5:df:d0:a1:3f:ef:ba:c0:
         d5:9e:90:54:a0:ed:25:0b:71:c0:8e:c3:ea:83:6c:bd:e1:3c:
         87:16:bd:3e:d1:0a:d3:37:2e:3e:1e:68:89:2e:a7:be:16:85:
         df:42:42:da:e2:25:32:57:c2:e0:32:c2:d1:6d:00:31:0c:72:
         ab:bf:a1:2c:90:66:26:7f:11:fd:e3:53:66:ca:25:a6:05:24:
         72:e2:2f:9e:cd:fc:db:c4:64:96:fd:55:a1:38:8f:a3:82:5a:
         c1:bb:ae:d3:ff:11:53:aa:4d:0d:2e:de:70:67:fb:dc:d5:a9:
         f2:44:d3:83:c8:8d:2e:56:3b:b4:f1:8a:70:d6:b7:b5:3a:45:
         05:e3:26:35:69:ca:6b:52:c0:33:11:94:ab:69:51:30:33:93:
         7b:96:26:22:04:b9:5a:03:ae:41:ed:91:81:dc:32:c3:6c:f8:
         84:32:40:25:52:9c:38:ac:47:56:1e:94:ca:e0:28:a3:c3:6a:
         0a:d4:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----