Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa
File:                     db-HI5k0_RnERLM4Sf9NASUrNG8.roa (raw, json)
Hash identifier:          ZEiUcwS3RRXTeRq4oYs/9R91hjuayyccqz3zwFIc7O4=
Subject key identifier:   75:BF:87:23:99:34:FD:19:C4:44:B3:38:49:FF:4D:01:25:2B:34:6F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A03B83E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa
Signing time:             Mon 23 May 2022 16:11:30 +0000
ROA not before:           Mon 23 May 2022 16:11:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        185.147.35.0/24 maxlen: 24
                          2a06:a000:1b0::/44 maxlen: 48
                          2a06:a001:a060::/44 maxlen: 48
                          2a06:a001:a000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436451390 (0x1a03b83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 23 16:11:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75bf87239934fd19c444b33849ff4d01252b346f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:26:32:bd:74:07:d8:4b:30:8e:c5:b9:47:
                    fb:eb:cd:6f:1c:f9:b1:b3:b3:6d:50:0f:c0:fd:02:
                    22:4c:b2:af:bf:8d:10:a9:41:dc:ea:35:86:22:b8:
                    76:b7:fd:af:c5:67:b8:46:62:03:ab:a5:f9:7e:aa:
                    61:d7:ea:77:b2:5d:90:4b:8f:c4:e7:c2:49:e1:44:
                    1f:3b:d6:c2:da:4d:4a:e0:85:b6:24:7a:e9:30:68:
                    4b:4d:45:c5:a5:29:2d:e4:ea:31:fd:8c:59:79:a4:
                    eb:c9:11:b4:f5:a2:90:d5:01:67:ab:55:6f:1e:e9:
                    18:e4:62:6c:ef:08:80:25:dd:f6:7f:47:71:34:13:
                    9b:94:c4:4d:0a:de:04:6d:8d:3e:7b:07:18:db:be:
                    47:bb:55:cc:10:3d:39:89:75:1c:a7:2d:93:63:21:
                    a4:4b:82:7f:8d:aa:3c:0f:6f:61:6a:1e:63:ff:6e:
                    bf:09:2e:99:56:ce:63:31:fd:f3:f1:75:4f:1d:3d:
                    91:46:e9:8c:74:ea:11:c8:ed:c3:6a:af:8a:33:42:
                    24:ee:e2:d7:be:ed:18:8d:7c:b2:e4:d3:c5:9f:03:
                    7d:a8:46:19:11:3b:4f:f9:7c:ad:bd:31:37:73:4a:
                    1a:2b:8f:b9:1d:0f:a4:68:b0:98:28:15:0a:4b:a1:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:87:23:99:34:FD:19:C4:44:B3:38:49:FF:4D:01:25:2B:34:6F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.35.0/24
                IPv6:
                  2a06:a000:1b0::/44
                  2a06:a001:a000::/44
                  2a06:a001:a060::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:ae:c7:1f:3e:0c:d0:f6:ef:30:fa:48:7b:ac:06:a9:bf:
         86:52:a8:ec:f3:7b:c2:d3:28:2e:db:7e:42:81:75:f9:81:66:
         5b:6c:b3:d4:c9:1b:5c:41:64:0d:90:c1:cb:3c:8d:83:a6:54:
         16:18:bb:9a:70:8d:10:52:c8:35:3a:9b:ce:d1:c4:ec:8e:7e:
         4a:16:10:1a:bd:31:20:11:06:d5:1a:f9:2a:d5:85:41:f0:64:
         07:89:75:f5:ae:ce:76:98:cb:58:8a:b8:0f:b3:49:dc:80:48:
         7b:c0:47:d0:32:be:a6:35:c4:1a:f8:0e:18:b6:93:37:09:27:
         a1:65:36:3b:ae:2e:a1:fa:bd:08:69:39:5c:24:73:35:87:b7:
         3e:67:66:0c:d0:12:e8:c9:88:1f:46:34:52:94:35:4d:1d:9a:
         2b:c8:87:e4:7b:6c:39:ab:cb:9d:f9:63:34:f6:bd:0d:28:c0:
         22:c2:aa:a8:62:12:da:c3:0b:9f:10:4d:be:be:77:ed:bc:86:
         98:6b:15:0e:29:6a:fe:a1:43:a8:b1:c7:54:d5:c9:15:b9:34:
         f2:03:74:68:5d:14:e4:ed:79:4c:2d:47:5d:84:f6:96:a2:6f:
         5f:56:55:dd:f1:7c:31:aa:d7:b1:13:c5:f2:22:65:67:8d:39:
         13:90:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----