Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/b22L-A43rXUysAyVOQvwTBKKuBE.roa
File:                     b22L-A43rXUysAyVOQvwTBKKuBE.roa (raw, json)
Hash identifier:          dEFCYyYAgoKKYiY86sYGdCyFI1nDsjeezpnzooxKDTc=
Subject key identifier:   6F:6D:8B:F8:0E:37:AD:75:32:B0:0C:95:39:0B:F0:4C:12:8A:B8:11
Certificate issuer:       /CN=f77b08858d028bf1d2d1811a38a3c81e11de32ae
Certificate serial:       097EA0F0
Authority key identifier: F7:7B:08:85:8D:02:8B:F1:D2:D1:81:1A:38:A3:C8:1E:11:DE:32:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93sIhY0Ci_HS0YEaOKPIHhHeMq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/b22L-A43rXUysAyVOQvwTBKKuBE.roa
Signing time:             Sat 01 Jan 2022 07:55:00 +0000
ROA not before:           Sat 01 Jan 2022 07:55:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31246
IP address blocks:        213.155.224.0/19 maxlen: 19
                          2a0a:cac0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159293680 (0x97ea0f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77b08858d028bf1d2d1811a38a3c81e11de32ae
        Validity
            Not Before: Jan  1 07:55:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f6d8bf80e37ad7532b00c95390bf04c128ab811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:bd:c2:6b:dd:5b:6a:67:28:59:06:85:8a:
                    9b:01:96:d0:83:df:b9:00:b8:dc:0e:ef:30:c6:55:
                    63:d1:1d:a7:c3:a5:31:a1:f3:5f:b8:cf:bc:3f:cb:
                    54:53:ff:bf:8b:14:14:aa:07:41:b6:be:80:cc:e3:
                    61:1d:35:15:21:5e:c7:37:c7:8e:32:d3:3b:1d:cb:
                    6b:33:21:28:d2:1f:da:ee:13:f0:72:93:1f:2e:4a:
                    ea:af:9e:bc:2b:81:e2:76:61:a3:ff:65:fe:6e:bd:
                    ad:c4:72:66:c0:66:0e:4e:15:b8:98:1e:fa:2e:68:
                    9c:41:8d:0b:db:cb:53:58:e3:7c:19:c6:23:ff:9d:
                    a0:7d:ce:7a:dc:a1:33:78:cd:71:9c:48:05:e1:e4:
                    a3:84:00:db:ed:d0:30:86:3d:95:40:f6:49:92:e6:
                    95:5c:14:32:63:04:da:06:92:28:57:e2:62:07:32:
                    1f:c0:f6:c2:41:48:73:0b:8e:5b:78:a8:f1:5f:e5:
                    50:fe:74:c7:95:5a:7a:c1:18:2f:ad:04:bd:16:ae:
                    43:c1:09:54:23:07:a4:df:93:7b:16:89:64:23:59:
                    ef:96:cf:b2:07:1e:d9:38:18:aa:13:cf:44:88:db:
                    74:13:87:8f:02:c8:99:93:62:04:a9:f4:5c:49:b2:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6D:8B:F8:0E:37:AD:75:32:B0:0C:95:39:0B:F0:4C:12:8A:B8:11
            X509v3 Authority Key Identifier:
                keyid:F7:7B:08:85:8D:02:8B:F1:D2:D1:81:1A:38:A3:C8:1E:11:DE:32:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93sIhY0Ci_HS0YEaOKPIHhHeMq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/b22L-A43rXUysAyVOQvwTBKKuBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/93sIhY0Ci_HS0YEaOKPIHhHeMq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.155.224.0/19
                IPv6:
                  2a0a:cac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:17:d6:37:3d:9f:e1:8e:d5:cc:0a:44:a5:8f:ee:a2:b2:de:
         cb:81:1d:d0:53:00:da:42:4a:a2:5d:22:59:0c:60:83:54:e6:
         c9:19:e7:5b:da:96:7e:62:77:fe:79:84:2d:94:40:28:3a:5d:
         2b:e8:68:b9:d5:98:82:f8:3e:92:ed:f8:48:1f:70:d2:50:ac:
         cf:0b:80:28:3e:5c:db:9f:0d:f7:fa:2c:03:7c:4d:29:57:27:
         b0:a2:2a:3b:ab:9e:4a:7c:85:12:bc:52:4f:a0:03:20:22:1e:
         9f:1e:e2:57:a9:29:4e:fa:a4:1e:ae:15:05:0a:37:33:0b:42:
         53:3b:16:dd:57:31:ce:37:a3:25:78:db:fe:b1:4f:f3:fb:04:
         7d:c2:97:a7:20:57:a4:b2:29:68:95:2c:8f:86:c9:c0:fb:23:
         30:89:e0:fc:c1:92:bd:55:79:f1:7d:cb:a9:20:c5:04:fd:27:
         31:5f:93:16:bb:0d:af:32:85:c3:40:c7:16:e6:36:22:4e:10:
         f1:ed:42:aa:b0:1d:50:eb:53:cb:9c:2f:5b:81:07:ef:6a:61:
         18:54:46:94:6d:16:51:8e:d7:81:44:09:02:0a:00:28:09:42:
         21:a0:4a:4b:4d:84:8e:a7:01:95:4a:d4:6a:af:ee:d4:bd:f0:
         ab:8c:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----