Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/kptReCinLb-cC83u1rbrH25jOU8.roa
File:                     kptReCinLb-cC83u1rbrH25jOU8.roa (raw, json)
Hash identifier:          l360sDqhELZ4vZyibEfxFlzQISNi/XE8K6icX0BNgNY=
Subject key identifier:   92:9B:51:78:28:A7:2D:BF:9C:0B:CD:EE:D6:B6:EB:1F:6E:63:39:4F
Certificate issuer:       /CN=ec58119da3e2f6334ffe74ed57e7fcef27e595cd
Certificate serial:       057316D8
Authority key identifier: EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FgRnaPi9jNP_nTtV-f87yfllc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/kptReCinLb-cC83u1rbrH25jOU8.roa
Signing time:             Sat 01 Jan 2022 16:07:24 +0000
ROA not before:           Sat 01 Jan 2022 16:07:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197444
IP address blocks:        91.217.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91428568 (0x57316d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec58119da3e2f6334ffe74ed57e7fcef27e595cd
        Validity
            Not Before: Jan  1 16:07:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=929b517828a72dbf9c0bcdeed6b6eb1f6e63394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:2f:d9:b1:2a:9f:48:4e:f6:4e:12:49:ae:
                    9a:71:26:eb:30:fd:49:69:32:27:1a:52:8f:db:47:
                    52:29:82:3a:29:63:8f:17:d0:16:af:48:ce:46:10:
                    eb:45:c1:e4:a2:f5:0c:e8:e3:eb:bf:e8:8f:c4:a2:
                    7e:99:33:45:96:71:4a:95:3e:16:e0:55:84:7c:92:
                    c0:07:39:cc:d5:50:67:b0:a9:dc:ea:d5:30:58:40:
                    45:80:53:65:f2:3c:1e:87:39:c8:4c:18:0d:bd:0e:
                    dd:07:2b:18:cb:0d:f3:9d:30:68:8c:e8:37:ba:71:
                    e6:fc:48:e0:2c:13:dc:51:e3:c2:4e:fb:03:f5:e0:
                    5f:a4:8b:09:52:92:fe:d3:e3:0c:5e:4f:85:b0:62:
                    0d:f5:41:9c:55:28:fe:4f:cf:e8:c9:aa:98:eb:c7:
                    b2:c8:ef:73:23:d9:bf:e2:2c:6b:7f:a0:9d:ca:cc:
                    06:ad:53:17:d1:da:c3:0b:6f:4f:85:88:04:93:03:
                    34:ba:70:86:35:8f:03:4f:67:59:bb:b3:e7:a6:03:
                    08:13:b5:f1:26:01:f8:23:8e:76:0c:cf:16:a3:9d:
                    ca:b6:8d:0f:03:db:fd:9d:bb:ea:90:c3:a0:9f:8c:
                    4a:81:43:d0:5e:42:8b:03:d4:f2:31:21:78:00:e5:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9B:51:78:28:A7:2D:BF:9C:0B:CD:EE:D6:B6:EB:1F:6E:63:39:4F
            X509v3 Authority Key Identifier:
                keyid:EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FgRnaPi9jNP_nTtV-f87yfllc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/kptReCinLb-cC83u1rbrH25jOU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/7FgRnaPi9jNP_nTtV-f87yfllc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:89:90:6a:7a:d9:77:61:ee:c8:8e:2e:76:ce:d6:d8:09:69:
         04:9a:19:d0:d6:63:90:90:0c:15:e4:94:55:99:e0:9c:2a:76:
         44:a5:02:6e:b5:7a:19:d3:1e:fd:b4:c3:06:55:db:9c:e3:c2:
         cd:e7:bb:b8:04:ab:df:3b:49:65:2a:c9:d9:78:5c:f2:84:5f:
         1f:b8:e9:fd:63:dc:ef:94:40:c5:12:40:e5:c9:7f:b2:e1:cd:
         55:5b:0d:cb:5b:f4:0c:d5:ec:fe:6a:a5:6d:af:c0:c5:d7:d0:
         7d:5a:7c:ed:ad:80:03:e4:d2:dd:4f:ed:4b:6c:25:05:86:88:
         49:b8:89:6a:87:dd:45:14:90:52:ca:7d:36:4f:bb:c1:4b:3b:
         84:8b:04:15:6e:73:4c:a1:ee:18:15:dc:8e:4f:48:d4:f4:49:
         56:e6:27:c8:5f:57:21:4f:1a:10:c9:ff:2c:a6:9b:7e:3a:53:
         46:a4:ba:af:75:57:6f:e4:b8:38:91:17:d9:24:f1:52:e0:bb:
         0c:bc:b7:24:da:90:c0:a7:96:44:a5:b3:89:8f:47:11:e8:94:
         09:71:6a:b5:4f:42:9b:03:7a:a8:c4:9e:e5:6d:5e:76:39:59:
         e6:f6:49:7d:96:46:b5:6a:82:c8:9b:94:20:b4:4c:78:ba:4b:
         09:23:02:13
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXMW2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzU4MTE5ZGEzZTJmNjMzNGZmZTc0ZWQ1N2U3ZmNlZjI3ZTU5NWNkMB4XDTIyMDEw
MTE2MDcyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTI5YjUxNzgyOGE3
MmRiZjljMGJjZGVlZDZiNmViMWY2ZTYzMzk0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPIML9mxKp9ITvZOEkmumnEm6zD9SWkyJxpSj9tHUimCOilj
jxfQFq9IzkYQ60XB5KL1DOjj67/oj8SifpkzRZZxSpU+FuBVhHySwAc5zNVQZ7Cp
3OrVMFhARYBTZfI8Hoc5yEwYDb0O3QcrGMsN850waIzoN7px5vxI4CwT3FHjwk77
A/XgX6SLCVKS/tPjDF5PhbBiDfVBnFUo/k/P6MmqmOvHssjvcyPZv+Isa3+gncrM
Bq1TF9HawwtvT4WIBJMDNLpwhjWPA09nWbuz56YDCBO18SYB+COOdgzPFqOdyraN
DwPb/Z276pDDoJ+MSoFD0F5CiwPU8jEheADlfGECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSm1F4KKctv5wLze7WtusfbmM5TzAfBgNVHSMEGDAWgBTsWBGdo+L2M0/+
dO1X5/zvJ+WVzTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdGZ1JuYVBpOWpOUF9uVHRWLWY4N3lmbGxjMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvMDI5MTZmLTc3MzEtNGJiNi1iZjQ0LTljZDRjNjIzMWJkZi8x
L2twdFJlQ2luTGItY0M4M3UxcmJySDI1ak9VOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
MDI5MTZmLTc3MzEtNGJiNi1iZjQ0LTljZDRjNjIzMWJkZi8xLzdGZ1JuYVBpOWpO
UF9uVHRWLWY4N3lmbGxjMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvZNDANBgkqhkiG9w0BAQsFAAOC
AQEAOYmQanrZd2HuyI4uds7W2AlpBJoZ0NZjkJAMFeSUVZngnCp2RKUCbrV6GdMe
/bTDBlXbnOPCzee7uASr3ztJZSrJ2Xhc8oRfH7jp/WPc75RAxRJA5cl/suHNVVsN
y1v0DNXs/mqlba/AxdfQfVp87a2AA+TS3U/tS2wlBYaISbiJaofdRRSQUsp9Nk+7
wUs7hIsEFW5zTKHuGBXcjk9I1PRJVuYnyF9XIU8aEMn/LKabfjpTRqS6r3VXb+S4
OJEX2STxUuC7DLy3JNqQwKeWRKWziY9HEeiUCXFqtU9CmwN6qMSe5W1edjlZ5vZJ
fZZGtWqCyJuUILRMeLpLCSMCEw==
-----END CERTIFICATE-----