Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/9DR46Lx_-zSm27xjwwTAxhVRV_0.roa
File:                     9DR46Lx_-zSm27xjwwTAxhVRV_0.roa (raw, json)
Hash identifier:          gKcej/l9TrkKv9+Am91LSMl5TUW+1Juab3ma75vvYUE=
Subject key identifier:   F4:34:78:E8:BC:7F:FB:34:A6:DB:BC:63:C3:04:C0:C6:15:51:57:FD
Certificate issuer:       /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial:       06D24AAE
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/9DR46Lx_-zSm27xjwwTAxhVRV_0.roa
Signing time:             Sat 01 Jan 2022 04:55:50 +0000
ROA not before:           Sat 01 Jan 2022 04:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207921
IP address blocks:        195.39.246.0/23 maxlen: 24
                          2a0f:4ac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114444974 (0x6d24aae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
        Validity
            Not Before: Jan  1 04:55:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f43478e8bc7ffb34a6dbbc63c304c0c6155157fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:3d:12:b9:6f:33:f9:af:20:4f:6a:da:bb:
                    f3:29:56:d8:45:2c:59:2b:f6:84:1f:3f:8d:42:0f:
                    ae:8c:b5:1b:45:a1:3f:e2:dc:03:4b:80:8e:a1:a7:
                    31:ef:1a:66:16:24:cc:c3:7e:af:7e:a1:46:d0:98:
                    3f:92:e1:4d:69:d3:c9:3d:02:9c:20:49:98:31:ed:
                    24:a9:da:b0:61:63:b6:d4:b5:e8:79:18:54:4f:3c:
                    ef:a7:bb:0e:ef:8b:43:b5:90:c1:d7:05:37:a2:33:
                    96:70:3a:af:fc:13:72:4e:5f:d9:fa:f9:63:cc:10:
                    3d:0c:9e:d2:ec:54:7e:2c:25:95:87:2d:8e:97:68:
                    4a:8f:3a:e8:69:e7:c1:f1:b8:08:c4:82:f1:13:d2:
                    21:eb:bb:25:c5:ec:40:58:b8:24:4f:c8:8d:dd:bc:
                    1f:a8:60:8a:29:22:ab:20:e3:27:b7:dd:b2:f8:dd:
                    67:26:0b:68:5f:ae:c7:1d:a8:85:a9:49:89:f0:36:
                    30:8d:85:98:1b:f1:cb:67:11:00:89:ee:d1:db:30:
                    b1:92:9d:cd:92:e4:cf:f3:10:68:14:e4:5f:7d:cb:
                    23:df:30:87:48:ed:aa:94:e7:b4:0e:15:37:bd:f3:
                    44:27:0f:34:b1:2c:b8:72:4d:22:3c:11:86:6e:ea:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:78:E8:BC:7F:FB:34:A6:DB:BC:63:C3:04:C0:C6:15:51:57:FD
            X509v3 Authority Key Identifier:
                keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/9DR46Lx_-zSm27xjwwTAxhVRV_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.39.246.0/23
                IPv6:
                  2a0f:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:ac:26:04:33:7f:04:04:ce:1c:7e:cd:be:d4:1a:eb:c6:
         57:7e:2a:38:16:6e:6a:4a:de:68:74:f1:b4:d1:d3:f9:c1:3b:
         72:91:91:94:13:78:52:c0:41:c7:40:22:bf:18:ec:fe:da:ee:
         ab:dd:77:61:0a:46:0f:58:51:73:59:4d:ac:91:26:26:10:e5:
         7f:56:0c:86:df:f6:86:a7:ee:ad:b5:d8:13:be:9a:c0:9c:fc:
         49:5d:cf:c1:ba:72:71:9e:33:7b:fa:62:cf:f7:78:77:ab:99:
         83:d8:b8:e1:09:f3:08:75:e4:97:45:30:62:6b:d2:9f:0e:3f:
         56:51:36:74:57:2d:63:09:03:a1:15:37:0e:52:d6:79:94:60:
         00:d1:10:01:4c:97:90:a1:98:9b:ed:a8:c0:ec:61:8a:a0:f0:
         16:67:16:82:61:81:fb:eb:d4:73:f8:2a:85:20:3b:e6:6a:0e:
         ca:79:45:a7:ec:59:90:56:1c:18:83:5e:77:03:b2:4e:20:2b:
         bf:be:21:59:4c:ce:68:e3:52:da:29:14:32:da:ec:2f:22:e4:
         a7:38:31:c1:d3:48:79:5a:a9:0e:61:50:6e:8b:b3:3b:1e:99:
         e0:29:fa:82:22:d0:d3:56:43:c1:19:ec:41:46:e6:8c:78:75:
         94:d4:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----