Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/i2q-BhiEmYzNwxn47hrlU-sZ-50.roa
File:                     i2q-BhiEmYzNwxn47hrlU-sZ-50.roa (raw, json)
Hash identifier:          zK7f9eQUkyyvDUeemKzg4hvkge0BB3dP+/NojmuQqD8=
Subject key identifier:   8B:6A:BE:06:18:84:99:8C:CD:C3:19:F8:EE:1A:E5:53:EB:19:FB:9D
Certificate issuer:       /CN=d8df9f7422a607350eb65721decb788963b744c3
Certificate serial:       072EC0F6
Authority key identifier: D8:DF:9F:74:22:A6:07:35:0E:B6:57:21:DE:CB:78:89:63:B7:44:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2N-fdCKmBzUOtlch3st4iWO3RMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/i2q-BhiEmYzNwxn47hrlU-sZ-50.roa
Signing time:             Sat 01 Jan 2022 07:58:52 +0000
ROA not before:           Sat 01 Jan 2022 07:58:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29608
IP address blocks:        185.226.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120504566 (0x72ec0f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8df9f7422a607350eb65721decb788963b744c3
        Validity
            Not Before: Jan  1 07:58:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b6abe061884998ccdc319f8ee1ae553eb19fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:35:ba:41:ea:66:a9:87:50:f2:b2:de:0a:f3:
                    21:27:6a:45:44:f0:d3:75:d2:ce:5c:b0:50:c0:b4:
                    8b:c9:41:56:c4:aa:9d:aa:3f:64:18:51:12:f2:61:
                    1f:02:6d:2d:94:61:e6:d3:f8:4f:db:9a:72:4f:8a:
                    60:7f:f3:0d:22:a1:d7:8b:85:38:9f:54:23:b3:ad:
                    0e:66:35:42:6b:9b:b8:87:b9:62:9e:d4:63:2c:ab:
                    57:9c:d2:63:d4:fc:4c:d9:d4:9f:ad:80:ba:ac:6e:
                    e9:ff:7e:55:f7:ef:75:e3:b9:74:c0:37:f3:4c:11:
                    f8:10:9a:f7:28:cd:1a:13:e0:a7:2f:dc:c5:8d:99:
                    f3:89:d6:4c:35:70:2e:2b:8b:7a:c4:fc:5d:3f:89:
                    25:c6:46:0b:76:3e:0d:5c:48:39:77:4d:58:79:62:
                    11:51:a0:fa:76:52:4f:4f:d7:1c:6e:10:09:6e:a9:
                    d9:78:92:18:26:cf:50:3c:4e:28:8f:cb:a8:6c:95:
                    62:bf:04:74:1f:23:e8:b7:74:fe:11:60:d5:a2:81:
                    85:40:6e:0c:c3:d5:6a:11:5d:51:39:22:f6:ac:1a:
                    c8:3e:8f:08:31:5d:2a:90:a4:b4:bf:a0:be:45:8d:
                    7c:19:70:b0:c3:1c:94:21:ba:0a:85:4a:11:1c:ce:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6A:BE:06:18:84:99:8C:CD:C3:19:F8:EE:1A:E5:53:EB:19:FB:9D
            X509v3 Authority Key Identifier:
                keyid:D8:DF:9F:74:22:A6:07:35:0E:B6:57:21:DE:CB:78:89:63:B7:44:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2N-fdCKmBzUOtlch3st4iWO3RMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/i2q-BhiEmYzNwxn47hrlU-sZ-50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/2N-fdCKmBzUOtlch3st4iWO3RMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:65:5a:22:e3:9d:1d:0d:a8:73:df:85:e0:6c:ec:f0:67:57:
         49:54:53:04:02:1c:17:6c:e2:25:3a:73:d2:ec:07:8c:6a:bc:
         ec:aa:92:e9:df:da:72:96:7b:2b:78:f9:db:8b:20:ab:82:ca:
         a4:d9:6a:51:a2:13:ea:b2:f3:fa:ff:6d:1c:73:e0:e6:9b:cb:
         4c:7a:c6:71:e5:97:7b:21:a2:12:ed:2a:ed:12:5f:82:94:8c:
         aa:1c:b9:d8:01:d6:86:97:b9:3f:ad:80:98:98:2d:0c:1c:ad:
         e0:06:d0:12:bf:22:ab:5e:81:94:60:2d:b8:8f:7b:93:d9:73:
         3d:b3:e2:6d:3e:a1:95:cd:c2:4d:25:55:98:02:75:f0:07:7a:
         ee:8d:3b:0f:9f:41:4c:2b:a4:0d:bd:15:cf:0d:26:5d:6e:5f:
         32:34:57:2a:ed:fd:23:6b:d5:7a:67:21:86:32:9d:4c:e3:85:
         3e:47:28:6d:cb:57:57:81:2d:94:9b:4a:1c:a3:c4:11:5b:11:
         c7:89:1e:84:8b:60:91:53:bb:f4:22:f9:c8:2d:f1:92:f2:39:
         c4:6f:6e:47:6a:04:03:6c:65:ec:c4:b1:7b:4b:e6:38:93:f3:
         69:bd:19:74:58:56:ae:bc:77:f3:9a:18:f1:3f:e5:e4:a5:e4:
         34:39:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----