Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/1VgHLeNXo6A8HF3MVNiwosKsG3M.roa
File:                     1VgHLeNXo6A8HF3MVNiwosKsG3M.roa (raw, json)
Hash identifier:          dMibVRQNJ9oUwgFndlP8cV9P0mfAEBSJ3kq/jERnx+I=
Subject key identifier:   D5:58:07:2D:E3:57:A3:A0:3C:1C:5D:CC:54:D8:B0:A2:C2:AC:1B:73
Certificate issuer:       /CN=26799a759eeb239dae8267f74701792c618ccc90
Certificate serial:       0E9196FB
Authority key identifier: 26:79:9A:75:9E:EB:23:9D:AE:82:67:F7:47:01:79:2C:61:8C:CC:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnmadZ7rI52ugmf3RwF5LGGMzJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/1VgHLeNXo6A8HF3MVNiwosKsG3M.roa
Signing time:             Sat 01 Jan 2022 14:08:40 +0000
ROA not before:           Sat 01 Jan 2022 14:08:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34373
IP address blocks:        185.210.128.0/22 maxlen: 24
                          2a0b:57c0::/29 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244422395 (0xe9196fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26799a759eeb239dae8267f74701792c618ccc90
        Validity
            Not Before: Jan  1 14:08:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d558072de357a3a03c1c5dcc54d8b0a2c2ac1b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:7e:ca:84:95:ff:47:53:41:ba:2f:23:34:
                    9c:c3:54:24:43:0a:1b:e7:48:6d:57:8c:be:97:21:
                    2d:a2:a8:5b:74:fe:9a:ee:cf:61:36:08:c3:f7:97:
                    60:a2:6d:02:4b:b1:c8:72:e3:a7:5d:76:e4:9c:93:
                    bc:b3:a3:1f:a1:ea:7d:cc:d4:73:d5:4a:50:a2:20:
                    6d:95:2d:aa:9c:5a:71:63:94:03:62:a1:5e:80:09:
                    db:0b:34:e6:0c:6b:5b:3e:25:b2:80:67:0e:ca:68:
                    24:5b:2b:3e:8e:7a:30:02:db:8d:0a:07:14:ea:76:
                    e2:f3:0d:e3:08:7e:1e:32:40:08:93:17:1d:a6:da:
                    6e:00:da:41:67:c7:6c:02:fb:13:75:55:66:41:d6:
                    fd:b4:2b:3a:3d:0e:a3:84:78:b3:b0:bc:8d:af:f2:
                    29:83:93:a2:e1:43:69:1a:35:fe:c2:5d:00:a7:71:
                    7e:41:2e:8e:29:71:ca:0d:53:35:c2:0e:ec:dd:5e:
                    73:16:00:c4:b2:6c:97:a7:4c:f2:ac:b6:0d:21:c6:
                    73:6b:52:08:5f:67:3d:34:15:10:cf:42:36:e5:d2:
                    69:b6:bd:8d:22:c8:d3:06:67:d1:3b:1d:2f:43:c9:
                    45:f4:4a:fc:b8:dc:50:44:e9:b9:3b:e0:a3:df:fd:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:07:2D:E3:57:A3:A0:3C:1C:5D:CC:54:D8:B0:A2:C2:AC:1B:73
            X509v3 Authority Key Identifier:
                keyid:26:79:9A:75:9E:EB:23:9D:AE:82:67:F7:47:01:79:2C:61:8C:CC:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnmadZ7rI52ugmf3RwF5LGGMzJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/1VgHLeNXo6A8HF3MVNiwosKsG3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/JnmadZ7rI52ugmf3RwF5LGGMzJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.128.0/22
                IPv6:
                  2a0b:57c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:79:7b:93:97:e2:0d:4c:43:ab:b2:a1:cd:71:92:3d:66:
         82:33:c1:6d:91:83:c1:dd:d1:4e:f9:ae:fd:16:58:2a:39:0d:
         4f:ef:9d:52:40:b7:3f:04:16:fd:93:7f:d3:c1:b7:d0:0f:4d:
         67:17:82:be:98:59:8b:5f:a0:91:6f:58:fa:86:4b:f4:95:bb:
         e5:c3:bf:cd:57:2f:64:86:62:03:2f:f7:0e:3f:0c:f7:25:f2:
         4b:77:22:fb:fd:f0:28:e5:94:ff:0f:81:b5:3a:9c:66:89:d7:
         e5:ec:25:bd:b7:70:3d:9d:0c:68:6f:11:5a:41:95:69:66:3e:
         0d:d2:8f:d5:ee:76:fb:b7:4e:1b:08:1b:ac:c2:7d:cf:c6:c4:
         30:a5:5a:dc:5d:04:ee:b7:c6:7e:82:97:35:63:2c:2c:94:56:
         98:bc:e7:51:14:ff:f5:15:01:18:7c:34:27:66:d4:6e:29:33:
         a4:84:e6:b7:cb:8b:3d:65:ee:63:d1:93:2e:fd:13:33:dc:56:
         42:35:1d:f7:32:e8:13:7e:8a:10:38:21:12:82:60:5e:82:56:
         a4:4a:81:91:0d:42:13:28:c9:4c:31:66:fb:43:65:2c:0e:41:
         59:79:d6:55:14:b9:4f:bc:66:53:dd:df:90:8f:27:4d:51:8d:
         3c:b8:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----