Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa
File:                     dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa (raw, json)
Hash identifier:          Fj3DO1R/E5+24VZ+OZo/hm1nks1gIIg69F6PTo2qTDI=
Subject key identifier:   75:59:8E:3F:EE:4B:3A:C6:F3:BE:A6:6C:56:07:47:5E:56:5C:EB:F7
Certificate issuer:       /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial:       0184B0A346C16E4DFE0045287D8F10AD80F2
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa
Signing time:             Fri 25 Nov 2022 21:13:21 +0000
ROA not before:           Fri 25 Nov 2022 21:13:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207921
IP address blocks:        195.39.246.0/23 maxlen: 24
                          2a0f:4ac0::/31 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b0:a3:46:c1:6e:4d:fe:00:45:28:7d:8f:10:ad:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
        Validity
            Not Before: Nov 25 21:13:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75598e3fee4b3ac6f3bea66c5607475e565cebf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:5e:d4:3d:bd:bc:c5:66:c7:bf:c3:8c:42:
                    d5:53:92:c3:ad:b4:b4:c4:6c:f9:52:b3:a5:11:cb:
                    0c:2c:98:ea:13:cf:25:08:aa:cf:57:85:ca:1e:7a:
                    0e:f8:8d:29:b8:07:4a:6b:6a:57:a6:ca:68:1c:d7:
                    6f:f3:69:37:8a:72:76:e2:30:2e:6e:cb:71:0e:ad:
                    be:34:c3:c3:8c:fb:32:da:31:d7:9b:5e:15:93:4d:
                    20:40:6b:55:ac:8d:32:b9:e6:17:54:a6:be:8f:28:
                    0a:f3:a1:d3:a0:7f:13:43:35:90:7a:91:44:c5:e0:
                    fe:fa:32:7a:7f:5a:0a:ac:9c:46:ad:1c:3b:0a:58:
                    c0:65:aa:ec:72:c7:83:2f:5d:28:a6:59:1d:f1:79:
                    96:ed:66:e9:fd:b3:28:af:3d:53:89:a8:18:2b:96:
                    2f:a8:8b:50:aa:e0:d2:af:2f:93:dd:11:a7:2b:97:
                    04:57:8c:f9:62:23:43:90:b8:03:e8:7f:b2:bc:38:
                    18:1c:3e:e6:45:bb:73:31:71:56:c6:be:ca:42:4a:
                    78:a1:5a:0e:30:da:ca:85:45:39:6f:19:ae:38:d8:
                    39:02:e5:9f:5e:45:95:4f:32:f6:af:2a:25:42:cb:
                    63:e3:88:9f:05:0c:f2:b7:07:a5:03:81:ad:47:de:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:8E:3F:EE:4B:3A:C6:F3:BE:A6:6C:56:07:47:5E:56:5C:EB:F7
            X509v3 Authority Key Identifier:
                keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.39.246.0/23
                IPv6:
                  2a0f:4ac0::/31

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:f6:d5:80:86:32:cd:c8:8a:ab:7b:d0:e5:b4:78:b5:da:
         9e:5b:54:1a:fb:e4:77:3b:ff:9b:ae:45:60:fa:11:b3:b1:8a:
         47:23:91:49:fd:ac:0e:e9:93:17:d6:53:77:0f:dc:f0:8c:da:
         7c:a8:83:bd:cc:ed:7e:4d:c4:cc:0b:16:45:e4:b6:51:e4:e9:
         47:f6:28:77:bc:72:5c:3f:13:ce:87:c4:b7:55:3b:e1:57:f0:
         7a:b9:fd:83:95:87:44:52:be:83:64:93:a3:89:a8:bd:21:3c:
         df:e4:86:b5:0e:96:4e:e8:c2:dc:b4:ca:da:c0:51:9a:2a:d4:
         1d:21:3f:45:f4:5e:c7:b2:b8:ef:32:bf:b3:f4:40:8f:1d:a9:
         15:45:86:28:e3:db:ee:b9:86:0d:21:df:aa:20:73:ba:80:56:
         09:be:d7:4c:11:7a:e5:3d:48:b1:23:b3:f2:47:5a:4c:d7:09:
         45:f1:cd:9c:89:33:8d:05:16:5a:b9:75:ed:32:99:36:a2:1e:
         45:c0:35:f7:d7:f4:25:e8:06:6d:73:80:25:95:d3:84:f6:27:
         71:2d:50:18:0e:fc:12:0d:5c:47:5f:3e:e3:da:a4:6e:a0:93:
         44:ee:29:90:54:f3:b6:04:a6:33:89:c2:3e:90:c0:7f:c0:eb:
         09:7c:74:bf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYSwo0bBbk3+AEUofY8QrYDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2Q0MTI3Y2RhZmU5YmZiNWQzZjRlZDhhMmFmMmUwM2Y2
ZDYwN2QwHhcNMjIxMTI1MjExMzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU5OGUzZmVlNGIzYWM2ZjNiZWE2NmM1NjA3NDc1ZTU2NWNlYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5e1D29vMVmx7/DjELVU5LDrbS0
xGz5UrOlEcsMLJjqE88lCKrPV4XKHnoO+I0puAdKa2pXpspoHNdv82k3inJ24jAu
bstxDq2+NMPDjPsy2jHXm14Vk00gQGtVrI0yueYXVKa+jygK86HToH8TQzWQepFE
xeD++jJ6f1oKrJxGrRw7CljAZarscseDL10oplkd8XmW7Wbp/bMorz1TiagYK5Yv
qItQquDSry+T3RGnK5cEV4z5YiNDkLgD6H+yvDgYHD7mRbtzMXFWxr7KQkp4oVoO
MNrKhUU5bxmuONg5AuWfXkWVTzL2ryolQstj44ifBQzytwelA4GtR958xQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHVZjj/uSzrG876mbFYHR15WXOv3MB8GA1UdIwQY
MBaAFMN9QSfNr+m/tdP07Yoq8uA/bWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzMxQko4MnY2Yi0xMF9UdGlpcnk0RDl0WUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82M2RlMzEtNTc2OC00YTMwLTkxYzct
YTFlMjI5YzBkYjk3LzEvZFZtT1AtNUxPc2J6dnFac1ZnZEhYbFpjNl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82M2RlMzEtNTc2OC00YTMwLTkxYzctYTFlMjI5YzBkYjk3
LzEvdzMxQko4MnY2Yi0xMF9UdGlpcnk0RDl0WUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwyf2MA0E
AgACMAcDBQEqD0rAMA0GCSqGSIb3DQEBCwUAA4IBAQA9rfbVgIYyzciKq3vQ5bR4
tdqeW1Qa++R3O/+brkVg+hGzsYpHI5FJ/awO6ZMX1lN3D9zwjNp8qIO9zO1+TcTM
CxZF5LZR5OlH9ih3vHJcPxPOh8S3VTvhV/B6uf2DlYdEUr6DZJOjiai9ITzf5Ia1
DpZO6MLctMrawFGaKtQdIT9F9F7HsrjvMr+z9ECPHakVRYYo49vuuYYNId+qIHO6
gFYJvtdMEXrlPUixI7PyR1pM1wlF8c2ciTONBRZauXXtMpk2oh5FwDX31/Ql6AZt
c4AlldOE9idxLVAYDvwSDVxHXz7j2qRuoJNE7imQVPO2BKYzicI+kMB/wOsJfHS/
-----END CERTIFICATE-----