Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa
File:                     f_In2yBlygzLrMQi38PStkItxZc.roa (raw, json)
Hash identifier:          ALCLKQZf8EAlHpBi1ZWM29xOhwVnnEjrlq8pQt2iYSw=
Subject key identifier:   7F:F2:27:DB:20:65:CA:0C:CB:AC:C4:22:DF:C3:D2:B6:42:2D:C5:97
Certificate issuer:       /CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Certificate serial:       01856C6F33080BDDBA005CD201661469B8E6
Authority key identifier: 20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa
Signing time:             Sun 01 Jan 2023 08:25:04 +0000
ROA not before:           Sun 01 Jan 2023 08:25:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25451
IP address blocks:        185.105.48.0/22 maxlen: 23
                          2a00:4600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6f:33:08:0b:dd:ba:00:5c:d2:01:66:14:69:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
        Validity
            Not Before: Jan  1 08:25:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ff227db2065ca0ccbacc422dfc3d2b6422dc597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:60:10:51:61:39:15:58:14:b9:f7:af:27:c0:
                    97:5d:30:61:86:30:75:5a:b8:48:a4:7b:45:ee:57:
                    3a:72:6e:5b:cc:ee:7f:6e:b6:b9:9f:a4:70:f8:e4:
                    25:4c:0b:c5:fe:2e:d4:22:93:7e:ab:0a:8e:ce:c1:
                    01:a4:9f:c3:8f:27:01:b0:6d:95:0f:7d:04:5b:ac:
                    83:1f:3f:70:1f:c0:f9:16:9d:eb:6b:9d:9e:cf:c9:
                    d7:e1:83:d4:70:be:d8:41:4d:0c:2d:d4:48:42:b6:
                    76:84:a2:94:e4:dc:7e:bf:96:4a:8d:89:e0:4a:d5:
                    3e:63:aa:ca:5e:fd:36:3b:45:45:1f:8c:67:ee:46:
                    71:e8:c5:70:8f:2e:3c:4d:1a:fe:7d:a8:08:bb:44:
                    f5:7e:af:f2:32:18:67:77:e9:4e:19:7c:58:0c:15:
                    2f:d8:3c:7d:30:c8:45:3b:25:be:8f:85:49:46:22:
                    14:95:12:e6:89:7e:3e:06:d9:e4:f1:46:40:6f:40:
                    9b:3c:05:a4:24:91:bc:1c:25:1a:1a:1e:6b:6e:82:
                    30:f0:15:ad:de:b4:d1:2d:21:b5:f5:e4:98:55:c9:
                    29:7d:3f:af:77:17:69:5f:23:80:f4:87:ad:9e:ba:
                    e5:dd:71:65:dc:2c:54:44:23:21:b5:94:46:11:cf:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:27:DB:20:65:CA:0C:CB:AC:C4:22:DF:C3:D2:B6:42:2D:C5:97
            X509v3 Authority Key Identifier:
                keyid:20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.48.0/22
                IPv6:
                  2a00:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:9e:92:2b:ad:ce:8c:a6:0f:c9:9c:aa:bc:f4:77:f7:fc:
         5a:c7:85:16:11:44:c0:b8:d7:67:e7:12:5c:c4:15:4f:f7:5b:
         71:95:b3:16:6e:ad:53:01:a4:d1:d9:36:4e:cd:37:66:1b:ca:
         d1:6a:c1:c7:e5:e5:a0:c5:39:75:8d:8c:46:31:87:a8:28:87:
         d1:c0:38:21:9c:ed:57:a9:72:34:4d:c0:d4:f1:6c:c7:8e:2b:
         a1:45:34:cd:fc:d5:ab:50:fb:58:b7:77:52:3a:81:71:75:58:
         80:cd:fe:4f:96:e8:8f:9f:e2:24:9b:f2:1a:23:7f:1e:50:82:
         75:38:ee:57:03:3e:01:3c:d1:0c:97:76:cb:fc:c3:36:83:39:
         6c:54:9d:e5:9f:02:03:1b:55:42:67:78:71:0f:4c:94:14:5b:
         6c:e7:ff:26:71:a5:45:ad:76:50:a5:45:6a:5d:67:5a:6e:11:
         c0:0d:9d:8f:b4:f1:db:0a:34:85:8c:44:55:cd:36:f5:ae:48:
         28:75:3d:c3:96:43:2b:9d:d9:4a:78:47:e1:93:ed:a2:a5:28:
         de:df:d1:8b:cc:d1:8c:a1:b9:9e:26:f6:a2:12:13:e5:16:c8:
         21:1e:85:d1:fd:9c:b1:bd:9d:e2:cb:70:9d:6d:30:2b:0c:55:
         85:68:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----