Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa
File:                     MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa (raw, json)
Hash identifier:          oLIGV9sjSXwYGn9rYUKThmsabE+RLLrnOQsR+fW28kA=
Subject key identifier:   31:FA:CF:ED:FE:41:F9:15:F6:99:72:A0:FC:8C:67:60:B4:E5:29:4F
Certificate issuer:       /CN=3ef9ea90bbcde7c2cffcfbb6312b1b637a2e490a
Certificate serial:       07154425
Authority key identifier: 3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa
Signing time:             Sat 01 Jan 2022 06:03:27 +0000
ROA not before:           Sat 01 Jan 2022 06:03:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204326
IP address blocks:        171.22.92.0/22 maxlen: 22
                          171.22.92.0/24 maxlen: 24
                          2a09:3cc0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118834213 (0x7154425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef9ea90bbcde7c2cffcfbb6312b1b637a2e490a
        Validity
            Not Before: Jan  1 06:03:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31facfedfe41f915f69972a0fc8c6760b4e5294f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:6c:71:1e:57:0c:d4:1d:77:83:37:fe:c7:
                    95:52:1f:5f:78:15:3f:04:6a:3a:ad:de:dd:2b:9f:
                    e9:3d:96:30:e0:e6:e8:1e:05:7a:52:a1:07:22:61:
                    e2:93:b1:70:2c:e6:1c:83:bf:d2:63:e9:2c:6d:65:
                    26:e0:8e:2d:5e:df:9a:49:9c:cd:5a:13:27:04:ed:
                    18:9c:63:85:7e:4b:3c:7e:a1:c8:ae:15:01:00:6a:
                    e5:c4:54:8a:3a:bc:90:90:3d:7b:af:f7:8f:6f:c2:
                    71:5d:51:a6:c1:04:b5:bc:2c:2d:67:3c:f4:a3:43:
                    e1:cf:45:6a:1c:33:2b:3b:f6:7e:07:3d:27:91:55:
                    bb:8e:64:25:50:19:57:d1:82:ee:dd:91:a5:25:46:
                    6d:a9:00:ba:d9:00:f9:1a:8f:b6:14:b8:7d:e4:08:
                    0f:70:56:5d:1c:16:8f:c7:03:e5:34:90:08:c0:b0:
                    87:e3:e1:fa:0b:81:6b:ed:45:57:df:bf:60:80:30:
                    07:d9:7d:d9:c4:ea:92:8b:59:0c:37:c5:0a:ea:4d:
                    ca:00:c4:0e:7a:8d:92:fa:0e:75:45:d4:53:85:6d:
                    07:b0:84:56:9f:90:be:c9:68:c1:3f:02:b2:79:85:
                    68:8d:24:71:25:ea:fb:25:1c:c0:92:31:fd:c4:f1:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:CF:ED:FE:41:F9:15:F6:99:72:A0:FC:8C:67:60:B4:E5:29:4F
            X509v3 Authority Key Identifier:
                keyid:3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/PvnqkLvN58LP_Pu2MSsbY3ouSQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.22.92.0/22
                IPv6:
                  2a09:3cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:fe:3c:1b:d5:46:57:e8:2a:b1:95:1a:cf:6f:18:03:a5:
         ac:9d:90:29:06:98:ad:a3:01:77:87:22:6a:82:58:f7:fb:f9:
         fd:00:a6:f1:8a:8a:9f:30:f5:57:06:22:c2:cd:79:8b:e8:35:
         02:14:18:fe:a8:dd:cd:9c:6e:9d:67:09:a0:f7:1f:bc:4c:e7:
         34:03:6f:3f:99:52:f7:2c:cf:30:cc:fa:5c:c1:8b:48:f4:14:
         89:48:40:a7:62:6d:83:ab:d5:b5:d3:1f:eb:f7:ca:c6:3e:53:
         1e:7b:d4:d9:21:3a:d5:37:76:29:2d:66:c5:be:d9:e4:e1:a3:
         c1:54:79:31:8c:5e:81:a2:db:26:1a:d1:71:0a:69:55:fb:8b:
         5e:81:8c:b0:16:7c:58:3a:98:05:03:1a:7c:8f:85:56:89:5c:
         b4:ef:00:bf:f1:73:ad:eb:36:97:f7:c2:cf:7c:03:56:4e:86:
         36:80:31:dc:e5:ba:a4:1d:46:4f:b8:20:ec:4e:4a:24:3f:5b:
         1b:73:32:78:44:9a:a4:6b:c9:2e:e9:96:25:8b:89:e7:3a:b8:
         6d:4e:d5:ea:12:8c:de:47:e6:fd:a7:54:27:2c:1f:80:8d:1c:
         1d:17:90:fd:74:95:9a:73:f9:b8:a4:ae:fd:81:51:f1:14:af:
         8b:13:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----