Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa
File:                     37d0XDszHvlulIUapVZFzqC1uW4.roa (raw, json)
Hash identifier:          Jju4DgaEqE+Clorv022w5GZryO+nMMBT+8U/mP8oaTY=
Subject key identifier:   DF:B7:74:5C:3B:33:1E:F9:6E:94:85:1A:A5:56:45:CE:A0:B5:B9:6E
Certificate issuer:       /CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
Certificate serial:       12613061
Authority key identifier: F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa
Signing time:             Sat 01 Jan 2022 13:05:18 +0000
ROA not before:           Sat 01 Jan 2022 13:05:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3304
IP address blocks:        193.28.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308359265 (0x12613061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
        Validity
            Not Before: Jan  1 13:05:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfb7745c3b331ef96e94851aa55645cea0b5b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:5c:8a:a3:c4:3a:70:73:92:c9:27:40:3c:
                    e4:48:8f:2d:cd:b6:ea:b9:d5:f2:0e:74:3b:b9:ee:
                    f4:e8:26:5b:66:22:4d:5c:74:85:d5:58:12:fe:a8:
                    58:31:d7:9c:93:7d:85:f6:16:36:f3:0f:11:39:90:
                    17:ac:97:9a:a0:d2:12:2b:ce:bd:25:61:d6:ca:40:
                    5f:14:5a:d6:4f:d8:18:17:2b:df:20:a8:d6:0c:4c:
                    af:4a:90:54:7c:1c:03:12:51:48:81:f6:f2:16:91:
                    08:9b:70:4f:73:4e:c5:7f:83:2f:57:af:4f:65:61:
                    4a:0e:db:a1:02:d3:24:27:0f:92:f6:33:7f:02:8b:
                    d5:56:ad:c4:7d:ab:59:ff:ec:d7:4d:38:1c:29:fc:
                    9f:28:19:00:a4:46:66:f0:d1:a3:bd:d7:79:54:19:
                    0f:b5:bf:0d:6c:00:85:6e:7c:96:be:6c:dc:70:09:
                    5c:f4:70:86:95:c5:68:26:e4:63:f7:67:51:1c:89:
                    88:da:ea:2d:8f:81:49:e6:6e:47:f8:4b:6f:0a:ce:
                    29:6c:26:9e:ae:a6:ca:57:75:8b:ef:7a:5d:e0:2f:
                    c8:63:ed:22:fc:9c:c4:39:a5:0a:71:84:91:d6:5c:
                    31:69:18:ca:11:36:51:d3:75:45:e9:72:5e:99:5a:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B7:74:5C:3B:33:1E:F9:6E:94:85:1A:A5:56:45:CE:A0:B5:B9:6E
            X509v3 Authority Key Identifier:
                keyid:F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/8WV-kMpyvz6dm9mP0HGZhMsHirg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:9e:ad:e6:d5:2e:a4:39:27:e8:96:e3:0e:07:d9:18:67:
         1f:fe:73:53:a1:b8:6e:d1:60:86:5e:e6:7e:8c:5c:16:df:b4:
         a5:22:ba:7c:15:44:59:4c:3d:bd:f4:c7:5f:61:b0:85:e9:09:
         9a:e2:c8:d9:68:4a:82:bd:b6:c7:88:9e:4a:f5:ea:7b:7e:36:
         f6:74:5f:cd:a1:1d:b2:39:d1:d6:c0:e5:48:4d:46:3e:a0:ae:
         04:48:93:10:42:fb:32:6a:74:2e:73:bf:ac:9c:b5:ff:0d:7e:
         1b:95:00:b6:05:76:f5:e5:5c:61:ad:70:08:b8:8d:12:e0:13:
         7d:d4:a9:f6:0a:c4:bb:a7:07:de:34:a4:55:46:db:9d:90:4e:
         88:01:54:7d:bb:68:c2:70:60:28:2a:95:10:32:da:1c:4a:c8:
         d0:c7:d5:60:fe:59:d2:5e:46:bc:71:69:d0:81:5a:39:15:25:
         cd:b7:aa:56:20:d4:58:ee:c0:f0:3c:c5:8c:7d:96:30:35:27:
         33:2b:c7:fc:48:cc:3f:e4:72:b0:f8:d9:3d:5f:36:b6:39:8b:
         18:c0:b6:53:f8:19:25:f6:0a:38:95:c7:6e:59:6e:26:7a:f8:
         5a:0c:26:39:67:d0:b6:88:6f:da:f9:47:2a:12:37:c3:1c:08:
         a3:a9:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----