Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/vObT89W_RQhtuSs2sWvwq4ipwFM.roa
File:                     vObT89W_RQhtuSs2sWvwq4ipwFM.roa (raw, json)
Hash identifier:          Iy7aDtKO44wHfe7DghkPW+QAuhNzzr1o5AUuVEnd9NQ=
Subject key identifier:   BC:E6:D3:F3:D5:BF:45:08:6D:B9:2B:36:B1:6B:F0:AB:88:A9:C0:53
Certificate issuer:       /CN=cccb42889e5ac899c12f3486bda045a90eeff779
Certificate serial:       01856F8B967E364D7D8D58E3944388BB38C5
Authority key identifier: CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/vObT89W_RQhtuSs2sWvwq4ipwFM.roa
Signing time:             Sun 01 Jan 2023 22:54:57 +0000
ROA not before:           Sun 01 Jan 2023 22:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201011
IP address blocks:        185.89.36.0/22 maxlen: 24
                          2a05:d4c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8b:96:7e:36:4d:7d:8d:58:e3:94:43:88:bb:38:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccb42889e5ac899c12f3486bda045a90eeff779
        Validity
            Not Before: Jan  1 22:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bce6d3f3d5bf45086db92b36b16bf0ab88a9c053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:3f:53:77:8a:0a:63:31:ad:e2:ce:3b:4a:
                    6d:18:d1:11:7d:65:b0:ca:cb:17:4a:64:4d:49:2e:
                    3c:5c:13:4e:9d:c7:a0:50:4e:3e:5d:8d:9f:df:44:
                    a8:53:25:c8:bc:2d:b0:b1:36:9b:07:5a:3d:4b:dc:
                    8c:6c:02:c2:a9:f1:93:57:a8:16:01:5c:85:7d:58:
                    2c:a0:d7:4f:54:b5:13:24:27:3c:af:a7:1b:3f:21:
                    b2:6f:35:cc:84:d8:ca:1f:cb:1a:7d:b9:c4:5c:98:
                    96:4d:11:05:d9:a1:08:af:d0:2a:3b:cf:f7:af:2d:
                    3b:41:1c:4f:83:df:c9:5c:47:70:3b:c5:b1:08:44:
                    11:06:ee:06:fc:05:df:a1:d8:20:9a:d8:46:43:12:
                    f4:97:9a:50:45:44:89:6c:8a:3b:2a:99:d2:2e:e2:
                    e4:bd:4c:fa:3f:a1:2a:7f:bf:85:8c:15:4b:9f:59:
                    b5:b1:2e:ec:81:e2:e2:b0:84:82:cc:c3:18:c7:4c:
                    5d:c4:e5:08:60:25:32:bc:7e:a2:16:2c:d8:fd:48:
                    0d:c3:27:0b:34:a0:fc:be:41:06:cc:c3:ed:01:69:
                    8f:17:bc:74:91:38:4b:bd:bd:b5:42:12:15:be:d8:
                    b3:c7:f9:0a:04:de:5d:b0:93:17:9b:f6:89:aa:7c:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:D3:F3:D5:BF:45:08:6D:B9:2B:36:B1:6B:F0:AB:88:A9:C0:53
            X509v3 Authority Key Identifier:
                keyid:CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/vObT89W_RQhtuSs2sWvwq4ipwFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.36.0/22
                IPv6:
                  2a05:d4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:35:c9:cb:12:7f:43:43:a4:ce:40:47:cb:a5:4e:44:7c:
         10:d5:9b:fa:ff:11:7b:d4:fc:0c:c2:f4:32:04:2d:b6:bc:dc:
         fc:43:dc:40:a7:d0:f1:c2:f3:63:39:5a:24:3e:24:59:62:83:
         d9:42:42:1b:34:8d:29:60:19:d2:34:8e:22:f3:e1:b4:76:98:
         55:d4:5b:2e:1f:d5:b9:f8:21:c3:43:20:39:75:fa:59:6f:a6:
         09:c8:00:c7:a9:2e:9a:d3:98:87:8e:e2:42:ca:a3:b0:0e:ec:
         1b:03:83:34:64:ea:61:b4:83:92:7a:96:f6:28:42:d1:f3:1d:
         f1:79:97:47:21:3b:c0:35:e5:cb:86:00:6a:24:d8:fc:de:b9:
         48:ef:b8:b4:07:8c:36:29:ca:9e:69:4d:de:2a:c6:4a:ce:06:
         91:38:82:28:14:4d:9d:7c:64:41:95:84:a0:55:82:8b:59:b5:
         f6:bb:b2:0b:33:9b:06:6a:36:e9:04:73:3b:4c:15:f2:5a:7b:
         b5:dc:70:55:c1:4d:f3:59:9b:2c:80:ba:e9:12:f4:2b:81:e2:
         16:36:8d:e8:65:b8:ee:13:36:df:d6:a4:dd:13:a5:cb:23:d1:
         ee:3f:89:a3:9a:04:d2:ff:4e:0f:e6:1b:b5:fe:01:17:9c:31:
         3f:b0:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----