Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/SO39HFKI8AW12201IHQJcLY0pCI.roa
File:                     SO39HFKI8AW12201IHQJcLY0pCI.roa (raw, json)
Hash identifier:          CE23ZxaxVzsia+e9b4P07m/yLHy0rb+oolJaDjgCGUA=
Subject key identifier:   48:ED:FD:1C:52:88:F0:05:B5:DB:6D:35:20:74:09:70:B6:34:A4:22
Certificate issuer:       /CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Certificate serial:       11AFBED3
Authority key identifier: 20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/SO39HFKI8AW12201IHQJcLY0pCI.roa
Signing time:             Sat 01 Jan 2022 15:02:07 +0000
ROA not before:           Sat 01 Jan 2022 15:02:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25451
IP address blocks:        185.105.48.0/22 maxlen: 23
                          2a00:4600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296730323 (0x11afbed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
        Validity
            Not Before: Jan  1 15:02:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48edfd1c5288f005b5db6d3520740970b634a422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bf:0b:69:e5:b4:b2:0a:7c:2d:74:e6:d4:0d:
                    fe:49:cd:6b:67:d0:5b:f6:f6:a6:24:8b:08:17:e6:
                    8f:67:bc:7a:15:19:9f:79:c1:fc:6b:40:a9:aa:57:
                    bb:b0:bf:9e:26:36:0d:8c:e6:5c:57:60:0e:78:f3:
                    7e:ae:a2:90:0c:0a:e8:07:61:9c:3b:44:43:a9:d8:
                    0e:99:49:fa:aa:a6:b2:90:ae:b1:e2:e7:bf:f6:1b:
                    5c:85:04:91:ea:03:52:66:32:78:58:4f:0f:ed:32:
                    c8:ab:40:8b:47:bf:f6:e4:13:7b:5b:f6:4c:91:eb:
                    22:d6:9a:a4:1e:7f:1f:fe:40:4c:e2:b4:3e:f2:c5:
                    5d:f4:b6:6c:35:80:aa:59:24:90:cd:4a:e1:c1:65:
                    a5:27:5d:7e:76:4e:bf:c9:5a:ec:88:bd:5b:47:f0:
                    c7:51:b9:05:b1:c1:d3:d0:81:5e:4c:d2:03:c0:ce:
                    99:db:80:11:bf:da:7d:0d:d6:59:fe:0a:57:7e:12:
                    ab:a2:f3:7f:cc:2c:17:dc:25:18:b3:68:c2:cc:72:
                    49:82:bd:bd:de:d1:2a:58:64:d7:be:d0:5c:04:6c:
                    27:55:1e:8f:ea:8b:b9:a8:9c:ad:0b:c0:6c:5f:ea:
                    d0:a2:ce:e3:fe:41:d4:dc:46:9b:92:3e:68:eb:a0:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:FD:1C:52:88:F0:05:B5:DB:6D:35:20:74:09:70:B6:34:A4:22
            X509v3 Authority Key Identifier:
                keyid:20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/SO39HFKI8AW12201IHQJcLY0pCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.48.0/22
                IPv6:
                  2a00:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:90:e3:df:b3:65:46:98:2f:cd:7b:ac:0e:a9:14:b9:08:
         88:a3:ef:fa:b2:53:f7:9d:52:89:f7:2a:19:0e:0f:0d:7f:4b:
         0b:0e:91:5c:84:a5:d6:50:16:b3:99:49:13:01:3e:66:fc:ce:
         ab:f6:f1:99:39:74:cb:a7:72:f7:74:b5:e3:d8:24:a4:61:7e:
         30:69:ec:a6:aa:11:4c:c1:ef:89:94:22:7c:28:6d:62:d7:0d:
         09:a8:10:46:93:91:81:28:e1:b7:ff:24:37:71:2c:fc:3f:6c:
         c5:3a:c5:39:d5:b5:41:40:0d:4b:30:54:7a:5d:6f:f3:4b:76:
         86:27:0a:42:19:e0:88:13:ea:fb:81:31:2d:65:52:0d:01:0c:
         7f:14:b5:05:95:6a:a1:14:d3:42:e4:7b:9c:6e:e1:cd:00:af:
         cf:9a:f7:04:4d:ab:6e:41:be:1a:36:c9:d8:c3:fd:1a:8a:f2:
         ca:b6:c7:d6:8c:8c:90:9c:22:2a:ae:c0:a1:4c:c9:a3:50:b7:
         0c:f3:49:d7:63:32:68:41:67:0e:02:35:f9:64:86:e5:8f:9a:
         10:cc:1a:f1:4c:33:50:34:c2:f9:f3:37:26:bb:7b:08:f8:15:
         cd:6b:53:ce:6b:d7:0c:03:33:21:a4:f8:9a:6d:5c:6c:90:fa:
         ba:a8:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----