Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/NQTsNRuHyzk64YL9yniuk53WtRo.roa
File:                     NQTsNRuHyzk64YL9yniuk53WtRo.roa (raw, json)
Hash identifier:          UZOZWlGcESovT5RKpTeiXeJxLmmWMnxn86xSjQ28sGw=
Subject key identifier:   35:04:EC:35:1B:87:CB:39:3A:E1:82:FD:CA:78:AE:93:9D:D6:B5:1A
Certificate issuer:       /CN=593ad8ec425e2e05ca6efa4f402eda973beb42c4
Certificate serial:       0237E9B9
Authority key identifier: 59:3A:D8:EC:42:5E:2E:05:CA:6E:FA:4F:40:2E:DA:97:3B:EB:42:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTrY7EJeLgXKbvpPQC7alzvrQsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/NQTsNRuHyzk64YL9yniuk53WtRo.roa
Signing time:             Sat 01 Jan 2022 04:58:21 +0000
ROA not before:           Sat 01 Jan 2022 04:58:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211528
IP address blocks:        185.251.37.0/24 maxlen: 24
                          2a10:ae40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37218745 (0x237e9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593ad8ec425e2e05ca6efa4f402eda973beb42c4
        Validity
            Not Before: Jan  1 04:58:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3504ec351b87cb393ae182fdca78ae939dd6b51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:3a:89:9d:1b:aa:08:9a:5a:3e:6f:18:64:
                    50:1b:39:0c:51:79:9e:44:8f:c2:33:a8:3e:88:76:
                    86:87:b2:25:97:3a:e1:6c:26:7c:3e:99:02:c0:60:
                    db:0f:23:48:84:cc:5e:6d:25:aa:fe:ac:c9:43:d9:
                    f2:b6:5a:0a:49:78:14:72:c7:66:12:80:33:36:8c:
                    fd:3e:7c:6d:79:95:b3:d0:f6:64:c9:c1:35:99:58:
                    8d:bb:dd:c4:26:55:98:a8:b4:41:29:f0:79:28:01:
                    38:3f:90:41:ea:b7:a8:42:a1:f3:a9:7e:85:eb:37:
                    69:aa:a4:26:be:49:c3:58:27:9c:a5:a3:45:ca:ed:
                    8c:7f:fe:e1:ce:eb:7d:57:6e:32:e9:71:6c:e2:8b:
                    0f:cd:4b:f2:d6:48:4b:63:b4:31:0e:37:c2:3c:6e:
                    9c:d7:bd:3c:d8:4c:02:8c:f4:56:be:5c:05:a2:74:
                    6e:ca:96:55:68:af:b9:d5:d6:e8:a7:2b:a8:51:4f:
                    f2:f6:2c:0d:43:af:1e:28:d0:06:1e:c5:ef:e0:35:
                    30:f9:41:c8:cb:c5:f7:55:71:d7:de:1c:58:42:47:
                    e5:65:36:57:e3:c1:a6:bd:2f:0c:e9:41:3e:d0:32:
                    08:ba:4f:93:5e:a3:d4:97:8b:51:42:e8:fb:1e:a1:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:EC:35:1B:87:CB:39:3A:E1:82:FD:CA:78:AE:93:9D:D6:B5:1A
            X509v3 Authority Key Identifier:
                keyid:59:3A:D8:EC:42:5E:2E:05:CA:6E:FA:4F:40:2E:DA:97:3B:EB:42:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTrY7EJeLgXKbvpPQC7alzvrQsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/NQTsNRuHyzk64YL9yniuk53WtRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/WTrY7EJeLgXKbvpPQC7alzvrQsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.37.0/24
                IPv6:
                  2a10:ae40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:39:9b:ef:64:e1:71:9d:c5:32:2e:fa:e8:c6:a6:59:43:
         37:fa:5e:b6:33:31:cd:54:33:0e:c3:18:3d:70:19:74:b5:9d:
         9b:7f:2c:72:99:56:88:22:8e:66:d8:de:8e:23:72:11:ec:ad:
         80:0c:f4:1d:01:51:f0:3f:de:c1:e4:8f:99:01:9e:cf:94:7a:
         8a:3d:57:01:e8:33:fc:94:0a:43:14:5f:57:8e:a1:89:c3:4e:
         15:92:5b:b0:08:b2:96:29:34:8b:e6:ea:45:4d:23:8e:1f:81:
         b5:f8:89:99:b7:26:1e:77:d1:68:80:a2:10:df:07:f8:74:e3:
         56:b4:be:72:3e:85:f3:1d:ae:a2:41:76:9e:bd:89:13:e9:f0:
         d1:5c:e4:22:6f:0d:e1:33:24:ec:b8:33:f1:31:d7:cf:8d:7a:
         1e:02:03:6a:9a:11:30:7e:1d:7d:fc:2c:d2:6b:1f:66:be:d0:
         78:fd:f4:06:1c:c1:88:da:3a:2b:41:d0:ba:a5:8c:87:2f:ab:
         6d:ff:b6:7e:62:20:e8:06:b4:57:33:e0:0e:7a:81:5c:c6:d0:
         73:e3:9c:2f:5f:fc:ed:2c:a0:c9:59:b5:83:8a:23:1b:8b:17:
         f9:53:2e:57:94:09:bc:b9:c9:73:08:06:5f:fd:65:1b:99:20:
         b1:76:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----