Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/gAQVxSEb47mmtTgajSawOiZwv78.roa
File:                     gAQVxSEb47mmtTgajSawOiZwv78.roa (raw, json)
Hash identifier:          A8Er/2K5xYpsCFxD2vfOyHxzxjnrie9M7Hf5vQRnGdY=
Subject key identifier:   80:04:15:C5:21:1B:E3:B9:A6:B5:38:1A:8D:26:B0:3A:26:70:BF:BF
Certificate issuer:       /CN=fab1ba78391e8f3895a3cb6bfa9b00df6bf75fc1
Certificate serial:       05CEBF2E
Authority key identifier: FA:B1:BA:78:39:1E:8F:38:95:A3:CB:6B:FA:9B:00:DF:6B:F7:5F:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rG6eDkejziVo8tr-psA32v3X8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/gAQVxSEb47mmtTgajSawOiZwv78.roa
Signing time:             Mon 31 Jan 2022 14:27:47 +0000
ROA not before:           Mon 31 Jan 2022 14:27:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197444
IP address blocks:        91.221.148.0/23 maxlen: 23
                          2001:67c:2038::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97435438 (0x5cebf2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab1ba78391e8f3895a3cb6bfa9b00df6bf75fc1
        Validity
            Not Before: Jan 31 14:27:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=800415c5211be3b9a6b5381a8d26b03a2670bfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:b7:f6:53:25:3b:eb:cc:08:c8:e6:c4:49:
                    c5:4b:ee:41:52:b5:f0:5a:08:49:3a:ff:16:2e:d6:
                    89:91:71:d1:ba:f4:29:f0:5f:16:c8:5c:82:42:5b:
                    fb:71:b5:88:52:40:9d:8d:13:f3:6b:f0:6b:9b:ba:
                    ed:dd:a1:9c:7c:32:9c:21:59:13:00:85:69:91:b6:
                    c8:da:e6:a3:12:82:6e:40:a6:23:b9:86:63:75:fc:
                    14:e9:bd:ae:d0:2e:db:e6:ec:1b:5b:b1:d0:0c:5b:
                    ff:f6:77:4e:0e:4e:ba:68:b4:c3:92:a2:36:d6:61:
                    e8:3b:8a:08:4b:b0:3e:21:c6:12:18:c1:13:b8:07:
                    0c:65:e3:d9:5e:85:88:b1:6d:98:7d:b3:c2:aa:77:
                    e0:1e:16:c6:37:66:5e:9a:3e:d5:89:49:87:77:d3:
                    52:6b:50:35:8a:45:e4:1b:5b:59:e9:47:ce:c6:be:
                    61:3f:5f:f6:3e:35:be:8c:ba:cb:bf:00:53:e6:f3:
                    05:a9:89:4a:88:d2:55:53:be:ae:5e:f9:c4:b9:81:
                    5a:76:7f:f6:c2:7b:6b:af:08:ec:1e:da:bf:ea:4a:
                    80:a6:8f:12:f8:68:5e:cd:78:e4:68:a8:77:c7:b3:
                    a8:72:72:5e:92:fa:74:56:8b:c4:65:37:e6:d5:60:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:04:15:C5:21:1B:E3:B9:A6:B5:38:1A:8D:26:B0:3A:26:70:BF:BF
            X509v3 Authority Key Identifier:
                keyid:FA:B1:BA:78:39:1E:8F:38:95:A3:CB:6B:FA:9B:00:DF:6B:F7:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rG6eDkejziVo8tr-psA32v3X8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/gAQVxSEb47mmtTgajSawOiZwv78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/1-rG6eDkejziVo8tr-psA32v3X8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.148.0/23
                IPv6:
                  2001:67c:2038::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:94:17:df:53:bb:87:eb:1b:43:98:74:18:2f:b0:12:5a:
         31:84:1e:8f:ee:5a:dd:32:76:b2:cc:89:dd:44:ea:5d:a6:b7:
         99:6f:21:d5:7a:29:18:a3:f3:aa:de:b8:00:f1:cb:8d:20:63:
         e0:9b:83:05:9f:a3:9a:da:48:12:46:1d:80:83:66:07:f5:64:
         75:1a:86:fa:92:bc:21:16:2e:1f:68:37:ec:c1:3c:1a:8d:5a:
         76:73:5a:3b:a9:1f:21:e9:64:95:a8:8f:54:0b:fd:51:97:a5:
         29:54:fc:cd:30:4d:a5:39:fa:60:93:9b:5e:6f:3c:0d:26:a7:
         d1:c4:24:6d:60:51:cc:d9:54:44:d3:5b:00:40:26:9d:18:0b:
         95:4a:57:31:ab:41:71:5c:ab:9d:b9:56:d0:21:d8:fd:2a:ef:
         81:8d:f3:00:02:08:91:60:63:9a:25:41:e1:fe:aa:03:ab:d2:
         15:77:1c:19:39:ef:30:28:63:59:1e:f5:4b:48:2c:ee:da:db:
         fa:c1:7c:ff:17:e2:ed:7c:88:72:73:74:98:b3:f2:fe:dc:4e:
         87:ba:64:9d:da:3e:58:71:eb:c3:9b:d8:dc:1c:05:f7:a4:30:
         6c:d1:15:ef:ea:8f:d7:d9:2f:6b:0c:0c:e7:f9:55:c6:3d:f1:
         23:fe:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----