Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa
File:                     GbEj5e8mtvZzHzpZTHOIkjICRpg.roa (raw, json)
Hash identifier:          EO90oHJxt1Y9mHluTv0fvtFvcJhHEUye+k/QxSZkwyI=
Subject key identifier:   19:B1:23:E5:EF:26:B6:F6:73:1F:3A:59:4C:73:88:92:32:02:46:98
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1918A030
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa
Signing time:             Tue 03 May 2022 17:00:41 +0000
ROA not before:           Tue 03 May 2022 17:00:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        185.147.35.0/24 maxlen: 24
                          2a06:a000:1b0::/44 maxlen: 48
                          2a06:a005:770::/44 maxlen: 48
                          2a06:a001:a060::/44 maxlen: 48
                          2a06:a001:a000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421044272 (0x1918a030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  3 17:00:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19b123e5ef26b6f6731f3a594c73889232024698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1d:14:4a:bf:b8:82:d1:db:67:1f:71:f0:1c:
                    3c:3d:1e:fc:22:ac:76:39:07:91:11:eb:e2:97:81:
                    cb:31:b0:bf:a8:70:ec:69:85:a4:30:09:0e:06:5f:
                    cc:ba:b4:31:8c:7d:66:7e:57:cb:b5:aa:23:44:70:
                    d2:8d:bf:99:d3:96:5c:75:ae:35:5a:d6:3a:c3:68:
                    0a:17:9d:7b:bc:ba:f3:ff:0d:44:95:da:04:57:8c:
                    d8:26:46:27:3c:8e:ff:a7:0f:81:68:a1:4a:46:49:
                    f6:e8:ca:0b:73:40:16:bd:4d:a7:18:da:8d:ba:ee:
                    4b:89:cb:f8:e3:4f:41:af:c2:22:e5:75:05:70:14:
                    19:12:b7:1d:07:95:d3:0c:c9:94:0f:82:bf:a3:a8:
                    74:56:cc:12:a9:a1:aa:b3:c9:c7:ad:e2:20:f4:6b:
                    98:d5:2d:ad:44:34:48:38:43:4d:86:25:c8:7a:e1:
                    79:81:52:13:6b:10:ac:a1:b0:73:0a:f5:2d:ab:5f:
                    57:1e:89:d5:ff:86:18:bc:4d:e5:97:44:68:ed:08:
                    4e:fb:0a:fb:c7:7d:d3:ea:42:6e:7a:0f:67:5b:2f:
                    38:57:da:26:b2:18:c1:de:0a:af:16:f7:7a:d9:b6:
                    54:9e:53:58:84:8d:86:f0:03:85:96:22:d7:9a:e0:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:23:E5:EF:26:B6:F6:73:1F:3A:59:4C:73:88:92:32:02:46:98
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.35.0/24
                IPv6:
                  2a06:a000:1b0::/44
                  2a06:a001:a000::/44
                  2a06:a001:a060::/44
                  2a06:a005:770::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:0b:43:9c:9b:d0:53:55:1e:ff:7e:75:93:39:51:17:ea:
         f2:2d:c8:34:8f:d7:cc:43:18:44:17:8b:2f:ac:b8:7a:66:e7:
         c1:f4:b8:07:e3:81:45:8e:27:b2:8b:6b:0b:0b:d6:02:1a:3d:
         9a:44:76:e4:ec:ca:64:78:2b:3c:2d:e5:8c:92:8f:e8:79:00:
         2e:05:3b:89:35:55:bd:06:20:2d:6e:fd:ce:b0:9c:38:51:6f:
         fa:18:e5:4d:68:b1:4c:1e:72:8f:b2:93:34:34:63:d4:be:89:
         78:ff:5c:37:5a:28:6d:c2:d9:52:c1:8e:31:8d:d7:77:77:8d:
         41:36:39:6f:13:da:a5:64:df:f8:78:b6:42:e3:54:2f:fd:c9:
         7a:40:fb:6d:0c:6f:7e:33:29:2b:16:de:64:70:03:c9:6b:d1:
         3f:8a:bb:ac:af:54:46:29:f9:d0:0c:ec:7c:5a:c1:7f:ff:30:
         36:79:36:ae:bf:86:e4:a3:77:bf:4f:1b:1a:70:43:42:73:26:
         08:bd:60:0d:65:46:34:f0:23:11:d2:85:8d:6c:65:90:64:59:
         07:dd:07:ae:80:47:58:98:8f:6b:87:74:c0:81:68:45:b4:0f:
         2c:40:d7:7d:17:20:e1:a5:81:50:c1:f7:06:ff:84:11:b6:1c:
         10:4e:ca:6c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEGRigMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
MzE3MDA0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTliMTIzZTVlZjI2
YjZmNjczMWYzYTU5NGM3Mzg4OTIzMjAyNDY5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO4dFEq/uILR22cfcfAcPD0e/CKsdjkHkRHr4peByzGwv6hw
7GmFpDAJDgZfzLq0MYx9Zn5Xy7WqI0Rw0o2/mdOWXHWuNVrWOsNoChede7y68/8N
RJXaBFeM2CZGJzyO/6cPgWihSkZJ9ujKC3NAFr1NpxjajbruS4nL+ONPQa/CIuV1
BXAUGRK3HQeV0wzJlA+Cv6OodFbMEqmhqrPJx63iIPRrmNUtrUQ0SDhDTYYlyHrh
eYFSE2sQrKGwcwr1LatfVx6J1f+GGLxN5ZdEaO0ITvsK+8d90+pCbnoPZ1svOFfa
JrIYwd4Krxb3etm2VJ5TWISNhvADhZYi15rgecECAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBQZsSPl7ya29nMfOllMc4iSMgJGmDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0diRWo1ZThtdHZaekh6cFpUSE9Ja2pJQ1JwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowDAQCAAEwBgMEALmTIzAqBAIAAjAkAwcEKgagAAGw
AwcEKgagAaAAAwcEKgagAaBgAwcEKgagBQdwMA0GCSqGSIb3DQEBCwUAA4IBAQAT
qwtDnJvQU1Ue/351kzlRF+ryLcg0j9fMQxhEF4svrLh6ZufB9LgH44FFjieyi2sL
C9YCGj2aRHbk7MpkeCs8LeWMko/oeQAuBTuJNVW9BiAtbv3OsJw4UW/6GOVNaLFM
HnKPspM0NGPUvol4/1w3WihtwtlSwY4xjdd3d41BNjlvE9qlZN/4eLZC41Qv/cl6
QPttDG9+MykrFt5kcAPJa9E/irusr1RGKfnQDOx8WsF//zA2eTauv4bko3e/Txsa
cENCcyYIvWANZUY08CMR0oWNbGWQZFkH3QeugEdYmI9rh3TAgWhFtA8sQNd9FyDh
pYFQwfcG/4QRthwQTsps
-----END CERTIFICATE-----