Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/i2vorU-vSyLJecKqur5tICgcJCo.roa
File:                     i2vorU-vSyLJecKqur5tICgcJCo.roa (raw, json)
Hash identifier:          848dz3dy+1uQIWtd4elymHUFRIK4qTLqmpENOSfA4oU=
Subject key identifier:   8B:6B:E8:AD:4F:AF:4B:22:C9:79:C2:AA:BA:BE:6D:20:28:1C:24:2A
Certificate issuer:       /CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
Certificate serial:       0C49BC41
Authority key identifier: F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/i2vorU-vSyLJecKqur5tICgcJCo.roa
Signing time:             Sat 01 Jan 2022 15:01:35 +0000
ROA not before:           Sat 01 Jan 2022 15:01:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44323
IP address blocks:        185.103.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206158913 (0xc49bc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
        Validity
            Not Before: Jan  1 15:01:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b6be8ad4faf4b22c979c2aababe6d20281c242a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:e4:2e:cd:03:f3:37:db:2b:28:09:23:88:
                    dd:6b:7c:d9:e9:b0:c2:be:ca:2f:85:a7:03:43:9d:
                    4f:4d:c9:3f:c7:fd:83:4b:f8:95:98:df:88:f2:48:
                    e6:36:75:74:10:f2:82:a7:d2:4c:fc:6f:91:92:f5:
                    b0:c0:8f:7e:92:b9:a0:6a:41:20:6a:0d:bc:b3:33:
                    de:ee:7a:31:24:a4:6f:79:6c:da:e5:42:d6:b0:7f:
                    35:cd:af:dc:57:a4:f0:0e:ca:89:7a:ab:f5:9b:1a:
                    4e:8d:03:b5:1b:2d:45:0f:18:bd:7c:23:22:53:10:
                    bd:f1:a4:06:bc:8f:54:f5:8a:42:37:71:b0:0c:25:
                    f1:3a:84:d2:48:a8:59:f5:64:2b:1d:5a:3f:b7:18:
                    68:26:90:8d:d4:8c:f0:af:6c:5a:ee:5a:aa:61:55:
                    67:cb:53:4a:ae:1b:19:6e:39:67:43:c1:9f:07:00:
                    4c:32:4b:37:e0:3c:0b:d1:e5:7e:13:21:b3:3e:e5:
                    e0:c8:e9:d8:18:ce:84:4b:42:95:88:78:8e:1f:09:
                    56:04:b1:4c:9e:95:6f:0e:69:48:03:a5:ac:98:96:
                    bb:ae:e5:ff:9e:d1:b4:a3:6e:38:3c:08:17:e8:1a:
                    f5:33:b5:48:f7:b7:8d:35:04:f3:a6:15:08:2e:9d:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:E8:AD:4F:AF:4B:22:C9:79:C2:AA:BA:BE:6D:20:28:1C:24:2A
            X509v3 Authority Key Identifier:
                keyid:F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/i2vorU-vSyLJecKqur5tICgcJCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:ce:72:e3:23:8a:38:2b:02:99:06:da:e1:97:17:fd:2f:
         7c:b9:c2:5d:6a:a8:fc:26:e5:e0:bd:2f:ee:f9:e8:49:9c:4c:
         f0:54:74:b8:74:50:ae:62:a8:f2:30:5f:6a:e7:d3:8a:e9:06:
         63:15:97:8b:74:83:a7:40:00:3a:cf:6a:12:87:bb:8d:84:43:
         26:1d:ad:1a:cd:97:62:2e:b5:f7:e2:97:dc:08:b5:e6:77:56:
         2e:ce:1c:3c:f2:72:e7:1f:54:51:1b:04:31:86:37:c0:87:ee:
         de:ac:d9:58:12:d7:ac:c2:46:51:0b:4d:c4:c9:67:26:f4:21:
         2d:be:93:4d:b9:3c:b6:2d:ef:52:70:2c:09:d8:62:7c:31:95:
         42:37:a4:a1:b5:c8:70:fc:f3:e5:8f:bd:b0:12:3e:9c:df:86:
         81:30:6f:87:2a:ae:80:ec:27:f6:d8:8a:2e:08:f8:95:9e:9f:
         9c:68:f4:71:e4:23:60:0c:75:2c:95:80:ec:9e:20:61:44:10:
         c0:db:57:1a:85:47:32:81:da:ab:58:4f:ab:1c:c9:23:e3:e6:
         38:fa:aa:0d:3c:e5:d7:2e:1d:64:07:4d:b8:9a:fc:da:1f:f2:
         55:47:3f:06:5e:db:be:80:c6:cf:65:3e:3a:70:c3:d9:74:d1:
         89:c8:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----