Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Q5NYtwLiq1T7oEGiA_whQCe9Cg.roa
File:                     9Q5NYtwLiq1T7oEGiA_whQCe9Cg.roa (raw, json)
Hash identifier:          4bZZw8QIWPsXNXE2lwZheXAfOitLzHzy6WV6cR3YL2w=
Subject key identifier:   F5:0E:4D:62:DC:0B:8A:AD:53:EE:81:06:88:0F:F0:85:00:9E:F4:28
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0AA4ADC3
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Q5NYtwLiq1T7oEGiA_whQCe9Cg.roa
Signing time:             Thu 28 Apr 2022 19:26:02 +0000
ROA not before:           Thu 28 Apr 2022 19:26:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210122
IP address blocks:        193.37.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178564547 (0xaa4adc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Apr 28 19:26:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f50e4d62dc0b8aad53ee8106880ff085009ef428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:d4:84:bf:03:4d:f4:b9:e1:25:b1:a1:92:
                    12:ef:ba:d3:22:83:0b:50:73:ba:8f:75:3f:85:13:
                    b2:09:43:1a:38:5d:5d:d1:35:d5:ea:db:66:4c:88:
                    8b:db:24:e3:81:67:1a:38:4b:fc:d3:d0:66:9e:91:
                    a3:ba:28:8f:f8:c6:92:86:3d:7b:07:94:2c:58:de:
                    8f:f6:b2:21:8b:74:25:5e:1b:d6:9f:3c:b0:29:a8:
                    d2:f5:5b:7c:7a:29:64:00:57:e5:02:5e:af:b9:13:
                    4d:89:22:b6:01:f4:d0:c4:6d:d3:92:15:b5:fc:e8:
                    53:1a:18:44:8f:a1:01:1e:37:e7:55:e9:d6:34:15:
                    ac:ae:4f:49:15:5f:d2:60:e3:c6:7c:6e:be:9c:42:
                    89:03:7e:81:b8:79:aa:81:a9:ed:5c:f7:0b:fc:f6:
                    9b:3a:64:b5:17:bf:4a:46:00:33:17:63:3f:fd:7c:
                    d0:2d:6a:b0:de:33:20:44:9a:6d:88:9f:0d:ea:63:
                    66:e2:e1:bc:9a:c8:a4:08:12:86:b9:62:14:87:34:
                    aa:65:fc:30:eb:a5:81:07:41:43:58:7d:44:8e:f4:
                    6a:92:50:df:59:3a:2f:73:ff:41:13:cf:b7:c3:2c:
                    73:55:df:00:7a:09:ec:e3:67:9a:1c:f7:45:e4:30:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:4D:62:DC:0B:8A:AD:53:EE:81:06:88:0F:F0:85:00:9E:F4:28
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Q5NYtwLiq1T7oEGiA_whQCe9Cg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:9d:6f:4c:52:11:aa:f7:5e:7b:92:53:cd:49:92:54:f6:
         1e:9c:c0:46:14:45:63:6a:0a:f5:05:96:de:7b:d8:95:0b:88:
         e5:4d:e9:51:21:75:f2:fa:df:0e:11:38:f9:fe:1e:d3:4c:3b:
         39:29:3a:cd:b7:76:fd:a2:2c:1c:d8:0e:a9:f2:12:b0:b1:12:
         98:8d:ee:63:3e:e2:be:04:42:2a:62:ee:36:c4:9f:5a:97:ac:
         ca:da:65:ac:80:e3:84:46:61:27:fa:2d:a6:6a:25:5b:ed:97:
         5e:16:06:64:a2:0d:ba:80:97:c0:fe:d1:3a:b7:91:3a:54:4e:
         f2:93:20:2c:b2:b6:1b:00:08:3b:9d:d8:a1:e1:2d:a0:38:78:
         a0:f3:da:8e:c0:a2:7b:ff:73:4c:db:4d:fc:c0:9e:57:4f:15:
         91:d5:ae:71:fb:5f:55:e8:2e:5c:26:21:5d:a1:a6:f7:73:a5:
         8d:88:f7:b1:4f:68:52:9e:64:ca:b5:2b:bb:00:b7:b6:33:f2:
         84:5e:5b:25:c4:f4:27:01:11:99:c1:68:b0:11:d0:ff:6d:d0:
         33:74:4a:9f:6c:93:cb:25:1e:fd:ce:45:44:84:4b:17:87:13:
         24:19:44:8d:ab:58:fd:8f:fd:30:48:ab:06:db:43:5c:1b:67:
         f1:34:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----