Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/FbNrGyhSs3E1bHJg7tRvwCeiBSk.roa
File:                     FbNrGyhSs3E1bHJg7tRvwCeiBSk.roa (raw, json)
Hash identifier:          4veasDW7U5/hfiBGzW9ZZ1VlCwhRrfqIqrSfMtNH8IY=
Subject key identifier:   15:B3:6B:1B:28:52:B3:71:35:6C:72:60:EE:D4:6F:C0:27:A2:05:29
Certificate issuer:       /CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Certificate serial:       0A8D27F0
Authority key identifier: B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/FbNrGyhSs3E1bHJg7tRvwCeiBSk.roa
Signing time:             Fri 18 Feb 2022 09:01:12 +0000
ROA not before:           Fri 18 Feb 2022 09:01:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203833
IP address blocks:        194.143.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177022960 (0xa8d27f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
        Validity
            Not Before: Feb 18 09:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15b36b1b2852b371356c7260eed46fc027a20529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:69:bf:12:31:be:34:70:72:f9:62:51:d0:
                    62:3c:53:f4:b5:3c:4a:b7:7c:ce:69:82:8e:7d:32:
                    36:6d:97:f9:a3:77:48:8d:5d:75:46:7c:f8:ec:a4:
                    06:71:db:7e:ec:60:a4:cd:9b:6d:bc:c1:8d:a1:d8:
                    9e:ed:c6:53:08:5f:b9:d9:10:98:19:68:2a:a0:8b:
                    9d:68:35:0a:f3:31:21:2d:71:59:ea:b8:8c:19:19:
                    06:93:eb:1b:fb:f3:fe:76:2a:e9:f5:ff:d2:03:44:
                    54:06:95:e3:78:15:6a:86:cb:56:c1:eb:b5:23:98:
                    b4:6a:db:2f:bb:c2:7c:bd:81:eb:2f:a2:c9:14:86:
                    2a:30:7c:7c:f0:79:54:85:fe:b8:ca:a6:0b:17:ac:
                    1c:b0:b9:d0:5e:72:93:96:1d:e2:6b:37:e1:6e:b9:
                    ae:09:34:a5:10:ef:b6:b9:87:95:88:73:01:c3:5a:
                    85:10:04:43:6c:1d:d1:04:61:4a:52:f0:15:24:54:
                    75:dd:4f:2c:90:d9:6e:93:87:48:8c:2b:5f:8b:e7:
                    f2:10:d9:e6:91:93:27:06:7c:e4:23:e9:17:ce:eb:
                    c0:2d:7a:96:2f:49:60:8a:13:f8:77:16:f4:a3:2c:
                    d8:26:a3:f6:07:3e:e1:c6:ae:a8:9c:08:89:6b:59:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:6B:1B:28:52:B3:71:35:6C:72:60:EE:D4:6F:C0:27:A2:05:29
            X509v3 Authority Key Identifier:
                keyid:B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/FbNrGyhSs3E1bHJg7tRvwCeiBSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/sV5S_Hc2FKVvuD2MiD-df5E9uHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.143.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:e3:b5:bc:e7:2a:4c:8b:7b:48:4f:07:15:72:b4:71:63:f6:
         0c:ce:79:07:dd:87:28:6b:0b:4f:45:55:1e:f1:03:2b:61:01:
         09:fa:09:50:29:47:ba:6d:cb:60:5e:52:83:9a:98:91:5d:00:
         43:e3:33:e5:af:be:57:c0:1b:0f:7a:3e:b8:a6:92:9f:bb:07:
         88:a5:ab:01:a3:0e:05:72:44:53:b2:6a:fc:ae:d3:c8:01:28:
         1d:3f:09:cc:71:db:6f:5d:b4:05:99:e5:58:69:03:8e:47:2e:
         3e:16:62:09:c4:b2:30:ac:cc:9a:97:53:07:ae:f3:76:5e:a2:
         35:73:9b:94:2b:00:47:05:d8:cb:d7:4a:3f:dc:d3:b8:f6:35:
         9b:e6:4f:5a:79:b9:7a:d1:87:d8:1d:18:b4:27:72:a3:6d:0e:
         d5:2c:61:58:71:7c:c0:dd:33:48:51:ea:7f:ee:8c:ea:46:9d:
         d3:31:c7:a4:a7:be:b7:cf:9e:21:35:4b:7f:cf:fb:0b:c9:bb:
         f5:0a:22:9f:a6:ca:aa:91:00:f8:d1:f6:6b:82:0a:9a:9e:0f:
         c6:31:06:d9:57:8a:bf:d6:ec:bd:5a:75:6e:66:34:ff:8c:a0:
         4d:b0:a4:fa:85:59:fb:32:4f:91:a1:0f:53:26:e6:a7:05:7a:
         23:69:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----