Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/1-CVyat7tvHTbRjQFnGxI8777IK8.roa
File:                     1-CVyat7tvHTbRjQFnGxI8777IK8.roa (raw, json)
Hash identifier:          f81l941qkVBbiQrYIbwBole6LRL7j7kdLJTrHrNkPgs=
Subject key identifier:   F8:25:72:6A:DE:ED:BC:74:DB:46:34:05:9C:6C:48:F3:BE:FB:20:AF
Certificate issuer:       /CN=c8de1c10e369641c4b318d8987bc5aade788b91e
Certificate serial:       0AC36267
Authority key identifier: C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yN4cEONpZBxLMY2Jh7xareeIuR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/1-CVyat7tvHTbRjQFnGxI8777IK8.roa
Signing time:             Sat 01 Jan 2022 13:06:30 +0000
ROA not before:           Sat 01 Jan 2022 13:06:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49818
IP address blocks:        81.22.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180576871 (0xac36267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8de1c10e369641c4b318d8987bc5aade788b91e
        Validity
            Not Before: Jan  1 13:06:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f825726adeedbc74db4634059c6c48f3befb20af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:56:f9:ec:0a:a9:cb:92:bc:43:83:92:75:
                    d6:49:ee:76:e2:10:c6:a9:be:c7:b6:34:db:1f:0d:
                    a5:08:9c:58:0e:0c:ce:e7:f9:77:31:78:29:ee:f2:
                    98:4f:22:32:20:81:9e:a3:c6:35:a0:53:4a:51:93:
                    38:52:05:e8:e6:01:6e:a4:8f:98:85:8c:c1:8d:f1:
                    a4:7d:81:ca:89:d5:a3:4b:d3:9b:af:a6:65:5b:49:
                    3f:26:a9:f7:6a:8b:66:7b:b4:87:ca:bd:45:0e:73:
                    de:2e:b1:a0:59:91:e5:86:9e:c2:9d:6a:e8:e6:f1:
                    da:94:85:18:cd:ed:e8:11:76:5a:99:4e:12:6c:86:
                    c9:f1:69:7b:c4:4b:7b:57:2d:fd:61:75:88:5f:f6:
                    24:c6:d4:61:39:89:c6:63:c3:fa:0c:21:52:9e:a7:
                    5b:1e:a4:53:44:7c:2b:a6:80:00:de:2d:59:6a:45:
                    57:b0:74:2b:a6:f0:86:13:67:03:d1:97:04:11:db:
                    ae:5e:4b:52:f1:d5:40:0a:02:3f:a2:af:11:25:25:
                    37:d3:a6:c7:1e:e5:8a:b8:0a:4d:1d:83:88:69:fa:
                    fb:c1:9f:88:1f:52:bc:a0:b1:1d:6f:40:7d:9a:46:
                    68:ea:30:17:0f:5c:40:bc:e0:ab:82:73:03:e3:41:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:25:72:6A:DE:ED:BC:74:DB:46:34:05:9C:6C:48:F3:BE:FB:20:AF
            X509v3 Authority Key Identifier:
                keyid:C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN4cEONpZBxLMY2Jh7xareeIuR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/1-CVyat7tvHTbRjQFnGxI8777IK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:70:5a:7a:d0:a5:a7:c9:b6:a1:f3:c2:6d:ed:ee:79:c3:47:
         c6:16:21:40:63:f1:2f:7b:b2:b3:11:2b:8d:b0:c7:e8:7b:fc:
         0f:6c:1c:0f:8f:bf:f4:84:4f:18:e8:8b:5b:46:a5:7b:f8:74:
         b6:b9:ee:dc:d2:70:5a:f4:9a:d8:28:6e:2b:1b:6c:29:b7:dc:
         26:b2:dc:5a:9b:24:2d:46:b7:fb:25:fc:48:80:87:0e:51:f9:
         94:22:25:c1:1e:f3:e1:98:dd:51:20:ad:0b:bc:f8:a4:9b:b9:
         81:73:a4:c1:31:aa:ed:51:d5:8a:e9:e8:fa:7b:a2:98:6e:e2:
         76:c8:5f:28:08:0a:d9:bc:bb:11:a1:7c:54:67:35:c1:9b:61:
         48:09:8f:6a:73:89:08:67:f2:60:a6:d1:07:08:32:ae:8b:26:
         d3:44:07:18:f0:29:4c:26:31:64:00:f5:ae:78:9c:d6:95:0c:
         34:d1:85:ed:73:13:ae:b4:39:f9:d2:22:1b:37:d0:28:6d:39:
         55:a7:bb:2d:57:ab:37:15:0b:ba:36:82:2e:84:e7:ec:28:55:
         64:99:89:48:ce:3f:d1:0a:cc:45:e0:3c:b9:38:60:7d:eb:bb:
         d8:c2:9c:45:b6:ad:ab:09:89:1b:f9:14:b3:ff:ba:3f:1d:14:
         41:c1:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----