Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/ILlYcbU7jScfua-FSrUMHeK45mQ.roa
File:                     ILlYcbU7jScfua-FSrUMHeK45mQ.roa (raw, json)
Hash identifier:          7LXrfAxDz7wowlkiwJXdQwumA/tgtBiYIJ1cqb6kqIk=
Subject key identifier:   20:B9:58:71:B5:3B:8D:27:1F:B9:AF:85:4A:B5:0C:1D:E2:B8:E6:64
Certificate issuer:       /CN=d891befbb3bb33c52762ea044d0227443549f7a8
Certificate serial:       041E451B
Authority key identifier: D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/ILlYcbU7jScfua-FSrUMHeK45mQ.roa
Signing time:             Sat 01 Jan 2022 09:59:58 +0000
ROA not before:           Sat 01 Jan 2022 09:59:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        185.180.144.0/24 maxlen: 24
                          2a10:6340::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69092635 (0x41e451b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d891befbb3bb33c52762ea044d0227443549f7a8
        Validity
            Not Before: Jan  1 09:59:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20b95871b53b8d271fb9af854ab50c1de2b8e664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:7a:fd:cd:ca:96:39:e5:c0:28:12:84:d0:
                    57:48:62:f2:11:38:43:2f:64:d1:2f:a3:dc:67:a4:
                    7d:99:e6:c9:e9:ba:ee:29:b2:7b:1e:ba:e7:ff:fa:
                    1d:aa:eb:21:7a:19:b6:32:ef:17:05:e5:f8:f7:38:
                    73:9e:d1:28:fc:4a:cc:39:dd:bf:56:64:42:53:c8:
                    19:dd:71:0c:7c:78:f1:4c:c7:3b:d7:73:2d:aa:70:
                    64:8e:2a:dd:57:88:aa:33:43:ef:31:c4:81:6f:e7:
                    96:9e:c9:35:71:37:5e:6b:71:d2:fc:65:12:8b:98:
                    67:98:a6:65:6c:ea:64:b9:82:b6:c4:bb:7a:05:3f:
                    5d:90:11:c8:4b:78:f0:9c:f7:0c:83:ab:24:b2:8a:
                    c3:15:23:4f:d7:4d:9e:57:b5:0f:24:17:5a:cb:6d:
                    b1:f1:40:69:50:56:98:ea:7b:a1:89:8c:66:fe:1c:
                    7d:44:5f:ab:7f:a3:32:0b:24:fa:38:19:95:cc:b2:
                    05:a3:55:44:08:c2:b8:98:cf:7e:07:09:c0:ff:c6:
                    10:d6:42:21:c8:67:3d:f1:bf:ca:b8:f1:04:cd:f7:
                    f0:c5:dd:82:a4:a6:b1:cd:3a:e7:fd:82:9a:d1:f2:
                    f5:00:28:ba:60:58:4d:ea:09:58:15:67:66:ca:bb:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:58:71:B5:3B:8D:27:1F:B9:AF:85:4A:B5:0C:1D:E2:B8:E6:64
            X509v3 Authority Key Identifier:
                keyid:D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/ILlYcbU7jScfua-FSrUMHeK45mQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.144.0/24
                IPv6:
                  2a10:6340::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:bf:6c:3b:ed:79:06:f8:2c:42:34:c2:63:3c:35:54:d0:
         f8:c6:f6:26:15:94:4a:8b:16:72:53:3a:87:5c:70:6b:ab:ea:
         2b:b6:36:aa:6c:f4:db:46:58:5a:2d:52:0b:73:e4:cb:5d:5c:
         cd:82:31:3a:35:ba:08:f7:5f:f4:e7:23:2e:a7:e2:64:66:4a:
         b8:ad:40:ed:ae:c6:04:b1:86:17:1d:84:a4:f8:d1:ad:99:56:
         63:76:11:b7:df:73:9a:46:50:15:bf:22:66:ac:81:b3:25:b8:
         79:f5:2f:c4:ec:de:35:71:10:30:12:9e:bc:bf:6b:99:a4:8e:
         76:9b:0a:1f:49:bd:8f:81:79:3c:a5:9d:3a:7e:98:39:9f:35:
         17:71:b2:93:a9:c0:90:42:53:49:b5:14:9e:d7:80:00:8c:d9:
         69:27:2e:39:2a:12:01:df:0c:98:04:e6:55:de:21:96:2f:91:
         35:03:b0:cb:3d:cb:ce:c6:92:8b:2e:13:c1:ad:f3:12:88:ba:
         97:a1:89:9a:46:76:77:83:7d:3a:a3:e3:32:b2:90:4f:c1:ef:
         f6:96:1a:38:9c:67:9c:6c:07:8d:0c:00:91:67:37:6c:e0:23:
         b5:1b:81:41:8f:80:e6:29:42:af:8f:c9:d0:24:27:6a:a6:0e:
         8b:24:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----