Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/824e8e-5aef-435e-a028-661abf82f130/1/Z1o-az5f2CO3yT8C2dA1EW5IpEY.roa
File:                     Z1o-az5f2CO3yT8C2dA1EW5IpEY.roa (raw, json)
Hash identifier:          qXRyzM1vTLjrJnTCVMrtKqzOX0Vmp8pWkb96WBiMMYs=
Subject key identifier:   67:5A:3E:6B:3E:5F:D8:23:B7:C9:3F:02:D9:D0:35:11:6E:48:A4:46
Certificate issuer:       /CN=578c7e62d36832b713d72791ae5fa64db81db042
Certificate serial:       0552FB5D
Authority key identifier: 57:8C:7E:62:D3:68:32:B7:13:D7:27:91:AE:5F:A6:4D:B8:1D:B0:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4x-YtNoMrcT1yeRrl-mTbgdsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/824e8e-5aef-435e-a028-661abf82f130/1/Z1o-az5f2CO3yT8C2dA1EW5IpEY.roa
Signing time:             Sat 01 Jan 2022 04:53:26 +0000
ROA not before:           Sat 01 Jan 2022 04:53:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30781
IP address blocks:        91.224.162.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89324381 (0x552fb5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578c7e62d36832b713d72791ae5fa64db81db042
        Validity
            Not Before: Jan  1 04:53:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=675a3e6b3e5fd823b7c93f02d9d035116e48a446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:9f:52:22:fd:91:de:ac:c2:12:92:98:2a:
                    35:9c:48:1d:0a:bd:78:89:8b:b9:ff:54:87:c9:72:
                    f9:42:10:ee:34:e0:8b:75:2d:9b:ff:40:28:3d:68:
                    af:48:e2:46:79:52:06:c0:9d:36:0e:17:13:15:ac:
                    a9:c2:0a:61:1e:26:d2:78:50:a6:b5:5e:0a:57:8e:
                    d2:4e:a6:68:11:9c:ae:74:d9:14:3a:69:e7:7d:e6:
                    34:03:c8:69:fc:d1:3a:eb:a3:59:a4:d3:a4:eb:ed:
                    38:27:2e:46:93:54:55:b7:7d:09:8b:d8:2b:b1:da:
                    2b:00:61:2c:25:f8:b8:61:4e:d2:79:62:e2:61:3b:
                    1a:bb:b7:51:67:78:57:fc:7e:e8:e9:61:5d:87:51:
                    e5:f8:ff:72:3d:58:c0:1c:0b:53:a4:9b:c6:2d:16:
                    f1:2b:23:78:a1:42:91:d9:ab:60:7e:b5:f8:68:f1:
                    17:74:a3:4a:58:33:82:ec:b4:17:18:1e:c5:50:7e:
                    3d:9c:71:09:00:c0:ae:63:cf:6f:6c:9d:76:22:bb:
                    7f:dd:e5:f7:4f:f1:ea:20:29:79:15:c9:2f:d4:a7:
                    80:3d:af:cb:fe:62:9f:47:f0:b2:90:6c:a3:dd:71:
                    94:68:d1:6b:8a:f4:42:fe:26:8e:67:f9:83:5a:51:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:3E:6B:3E:5F:D8:23:B7:C9:3F:02:D9:D0:35:11:6E:48:A4:46
            X509v3 Authority Key Identifier:
                keyid:57:8C:7E:62:D3:68:32:B7:13:D7:27:91:AE:5F:A6:4D:B8:1D:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4x-YtNoMrcT1yeRrl-mTbgdsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/824e8e-5aef-435e-a028-661abf82f130/1/Z1o-az5f2CO3yT8C2dA1EW5IpEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/824e8e-5aef-435e-a028-661abf82f130/1/V4x-YtNoMrcT1yeRrl-mTbgdsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:89:8d:c0:15:db:ee:72:90:8e:35:1a:4e:48:bb:35:a6:40:
         04:58:fb:4d:c0:26:81:eb:18:2c:63:b5:83:9a:fb:0b:d6:f0:
         39:66:1c:37:f0:0a:2b:fa:97:a9:e8:aa:6b:9b:e4:8c:e2:4f:
         e9:7b:ae:bf:6e:32:dd:2d:e2:d6:0a:a3:a4:68:14:6c:89:06:
         62:b6:9f:e8:2f:28:1e:ef:cf:e1:86:a1:14:6b:68:2a:38:7e:
         e3:f1:c6:a2:e3:0d:76:0b:e1:11:27:65:e7:6d:f4:be:37:36:
         52:73:2f:3c:42:2d:06:14:4f:78:26:53:d4:94:15:52:e5:99:
         a6:64:20:c6:d1:95:62:b7:0a:37:5a:2b:da:a7:24:fa:f6:68:
         ea:c3:9d:aa:d0:e4:07:5b:36:4d:9b:d2:98:21:49:dd:bf:52:
         02:9d:ae:91:15:cc:85:3f:46:8a:90:78:f6:20:18:20:dc:b0:
         b5:4a:24:ab:04:94:d6:bb:6b:f8:bb:67:b4:30:c6:2d:c4:45:
         9b:64:f2:89:d9:18:5e:ad:e0:3d:80:9c:3b:ef:cd:74:d7:b7:
         e5:33:75:e7:46:87:c1:e0:86:44:33:1c:b0:f8:7d:50:0e:6f:
         da:55:a0:23:14:8e:65:2b:28:13:70:cb:b8:ec:f1:09:43:8c:
         0f:cd:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----