Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j0rW7J7fVOJwpiol7EgFPaoVsPM.roa
File:                     j0rW7J7fVOJwpiol7EgFPaoVsPM.roa (raw, json)
Hash identifier:          sYuv++Cz0RJoSm0GceSwVSX8qZe0+pgi/4LuXr0KyAM=
Subject key identifier:   8F:4A:D6:EC:9E:DF:54:E2:70:A6:2A:25:EC:48:05:3D:AA:15:B0:F3
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       05EF65E0
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j0rW7J7fVOJwpiol7EgFPaoVsPM.roa
Signing time:             Mon 20 Jun 2022 04:07:44 +0000
ROA not before:           Mon 20 Jun 2022 04:07:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56540
IP address blocks:        85.237.192.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99575264 (0x5ef65e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jun 20 04:07:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f4ad6ec9edf54e270a62a25ec48053daa15b0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:16:16:8e:61:14:1c:4c:a5:15:66:1e:0f:
                    e2:50:5f:a1:6c:23:e7:ae:1a:15:b2:a6:86:2e:17:
                    18:cc:9d:34:c5:aa:ec:6e:e9:11:10:07:2d:4f:41:
                    c0:51:1f:17:95:bc:08:88:54:f7:f0:b6:e3:b0:de:
                    95:91:d0:5a:70:82:e3:95:aa:80:7b:37:28:29:72:
                    ee:1e:6b:4e:f8:e9:54:a6:56:b8:bd:39:f4:35:eb:
                    45:ca:7d:b6:13:05:1f:58:6a:a8:58:47:91:73:b0:
                    3d:25:e0:6d:8e:80:ed:5a:09:b1:b5:92:b8:5b:d3:
                    e5:74:06:d1:84:ae:d9:9a:b2:c6:88:c1:41:9b:5e:
                    cf:b8:42:d7:04:04:75:b0:50:d5:42:34:43:7f:78:
                    09:9b:9c:89:7a:b8:f5:89:88:f9:79:c0:eb:a8:48:
                    55:55:17:f7:f2:a3:d8:bb:1c:24:bc:9a:7c:52:f4:
                    14:f7:85:6a:cc:3b:0e:e8:d4:28:74:3f:ff:f2:51:
                    fe:56:17:ed:f2:40:c7:18:74:34:60:c1:82:c2:b9:
                    3b:af:bb:0f:5b:f7:83:a1:3c:8f:68:d9:a8:ac:4e:
                    8c:d8:09:df:e6:a7:bc:b5:2a:fe:18:05:94:90:ca:
                    d1:46:ca:2f:93:94:72:17:f9:96:31:79:7f:2f:4f:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:D6:EC:9E:DF:54:E2:70:A6:2A:25:EC:48:05:3D:AA:15:B0:F3
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j0rW7J7fVOJwpiol7EgFPaoVsPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:38:18:45:27:61:cc:e0:3a:ba:de:b7:2f:c5:bb:ec:ce:
         39:91:9a:43:5e:a4:49:4e:bf:7e:38:b5:5b:e0:d3:ce:5d:67:
         d1:85:62:87:a2:54:fd:21:c3:a9:53:c1:ed:cd:42:69:84:2f:
         36:e5:eb:24:69:d9:d9:f1:4b:3c:8f:45:59:ed:ee:58:66:4e:
         dc:03:06:b8:c0:04:75:da:56:a3:4b:c4:aa:16:12:91:20:dc:
         75:82:cf:92:33:30:1f:b2:37:f8:9a:5b:fa:14:fd:7a:4b:12:
         11:ed:a8:c1:51:ae:a2:73:c8:86:6a:66:11:08:74:59:bc:9f:
         6f:35:46:7d:04:ab:71:17:91:4f:3a:21:e9:c7:bb:09:11:4f:
         46:a0:b0:13:03:0b:c7:75:ce:d4:10:45:6d:4f:8b:98:35:fa:
         44:9a:4d:aa:4f:8b:8e:8c:fd:46:25:3d:e1:0b:1c:f8:3b:59:
         0c:04:f2:bd:6a:e3:31:93:4c:f9:0f:15:b9:27:5d:83:d8:07:
         1b:03:e5:3c:af:d0:71:bd:c8:13:f4:a3:58:26:16:46:3a:91:
         a5:36:68:ec:5c:ec:84:95:fd:a0:8b:12:8e:86:9a:ee:84:da:
         3e:ef:89:44:0e:d3:b5:46:02:44:ca:00:84:e7:d4:24:6e:a1:
         b1:83:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----