Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/047ac4QbXEPVsQ89PL-w_-hS0Ss.roa
File:                     047ac4QbXEPVsQ89PL-w_-hS0Ss.roa (raw, json)
Hash identifier:          W+0JINyhyaAcMd7GAE7ab0OriMCDXSR99P2QHf4xpyY=
Subject key identifier:   D3:8E:DA:73:84:1B:5C:43:D5:B1:0F:3D:3C:BF:B0:FF:E8:52:D1:2B
Certificate issuer:       /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial:       0185712790F25EA5CB297971C09E1D3BBD05
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/047ac4QbXEPVsQ89PL-w_-hS0Ss.roa
Signing time:             Mon 02 Jan 2023 06:24:56 +0000
ROA not before:           Mon 02 Jan 2023 06:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207671
IP address blocks:        195.39.221.0/24 maxlen: 24
                          2a0f:4ac4::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:90:f2:5e:a5:cb:29:79:71:c0:9e:1d:3b:bd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
        Validity
            Not Before: Jan  2 06:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d38eda73841b5c43d5b10f3d3cbfb0ffe852d12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:90:5e:04:d2:4a:f0:13:27:e7:91:bd:d7:
                    0f:93:fc:c4:0e:7f:c5:24:4e:ff:0c:a9:2f:60:6d:
                    34:61:01:92:e8:12:3a:dc:ed:e3:3f:06:0e:5c:8d:
                    fb:b1:19:d7:7c:8e:0d:f2:ad:ee:37:07:91:5e:f0:
                    56:88:83:8e:91:d0:66:89:14:5c:8a:cb:ac:11:21:
                    c1:65:6d:c9:45:06:38:31:59:cf:61:2e:c0:a3:5e:
                    be:ea:a2:29:5d:aa:33:ec:d1:c1:0e:59:70:ca:8d:
                    43:fb:6c:58:e0:a4:68:9b:5b:1b:60:4a:d2:6d:c2:
                    e2:89:7e:58:49:ed:c7:bf:c3:66:16:d7:86:de:e1:
                    33:62:39:07:ad:88:f5:d2:40:cf:28:c4:89:b2:c8:
                    0b:82:41:06:29:ec:6c:c9:35:c3:1c:c7:1d:05:70:
                    85:bf:e0:c2:2e:43:dc:dd:0f:03:05:fb:dd:a2:9e:
                    02:4e:e5:fd:c7:c8:83:e4:99:1b:24:ed:e7:1d:5a:
                    6f:41:28:72:0f:34:ad:e4:ae:43:29:c2:8e:fc:ba:
                    83:40:a1:f2:df:9e:8b:5b:f3:cd:bf:81:b2:21:df:
                    b1:a4:bf:a2:12:5f:37:cd:c6:3d:b6:b6:5f:5e:12:
                    b9:0a:a8:8f:0c:3f:95:0d:ca:98:61:fa:db:6b:a8:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8E:DA:73:84:1B:5C:43:D5:B1:0F:3D:3C:BF:B0:FF:E8:52:D1:2B
            X509v3 Authority Key Identifier:
                keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/047ac4QbXEPVsQ89PL-w_-hS0Ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.39.221.0/24
                IPv6:
                  2a0f:4ac4::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:7d:88:5d:ce:df:3c:5d:23:87:87:71:04:88:b1:9b:c6:
         8b:6d:f3:5b:9c:bb:e1:88:9d:3a:44:5e:5e:6b:ae:ef:ac:18:
         75:19:5f:96:6e:62:66:4d:e2:84:45:74:6e:23:7d:a7:38:d0:
         93:05:ba:5f:05:51:b5:45:dd:b9:51:7a:61:dd:cb:5d:79:7f:
         1e:44:ce:f2:33:7f:a2:78:22:c6:a4:40:bc:9c:4a:e0:0f:e1:
         e1:6f:5c:51:00:2e:f2:c2:7a:b8:b7:86:85:30:4b:bc:5d:07:
         df:3e:b1:86:52:dd:a5:6f:40:a1:94:fa:00:a7:1b:f3:48:b1:
         a3:28:0f:fb:64:01:4b:38:f5:20:d5:c9:75:4d:44:69:dc:33:
         43:57:d9:ea:d2:e3:22:fd:99:b6:1f:94:b6:57:fc:ef:10:9c:
         8d:16:49:49:84:d1:c7:a2:0d:55:85:8d:42:69:75:66:31:a5:
         08:fb:47:b8:67:21:62:a1:28:60:b8:af:5c:05:1d:74:60:fa:
         33:bb:f0:8d:5e:99:74:8c:1e:5e:8c:fc:74:b8:8a:9b:56:9a:
         c8:00:9a:cc:73:5e:e9:1d:f6:ae:41:69:98:42:47:18:85:64:
         c6:41:db:01:6b:a2:a3:dd:f9:7c:79:b1:b3:2c:ce:7a:1b:e1:
         c5:cc:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----