Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa
File:                     pUXD-5Sgf5FLD29pRp3d1bn3xko.roa (raw, json)
Hash identifier:          8Mos0yKvOXLzriZt5t+Kd6lDlQuM3UUjTQMiPAgDmZ4=
Subject key identifier:   A5:45:C3:FB:94:A0:7F:91:4B:0F:6F:69:46:9D:DD:D5:B9:F7:C6:4A
Certificate issuer:       /CN=eb19b10727f59594743f91234c9eb7133f6c4731
Certificate serial:       1BC2C2E4
Authority key identifier: EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa
Signing time:             Sat 01 Jan 2022 06:04:17 +0000
ROA not before:           Sat 01 Jan 2022 06:04:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61425
IP address blocks:        5.198.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465748708 (0x1bc2c2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb19b10727f59594743f91234c9eb7133f6c4731
        Validity
            Not Before: Jan  1 06:04:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a545c3fb94a07f914b0f6f69469dddd5b9f7c64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:b2:ba:71:52:cf:41:85:57:8e:0d:e5:61:
                    92:ac:4a:46:9c:74:33:33:60:d6:bc:28:3c:8f:aa:
                    59:8b:e8:ab:0a:8f:68:e8:85:ac:4a:2e:98:14:19:
                    03:bd:99:30:78:a7:da:32:b4:64:eb:e4:18:77:d3:
                    2e:06:2d:42:a0:5d:b4:33:e4:60:55:4f:a7:43:34:
                    f9:06:23:81:eb:04:ce:80:dd:b7:9b:8b:6c:30:92:
                    5a:4f:2d:23:f9:f4:3c:5e:db:99:cd:83:62:04:90:
                    e6:76:57:28:67:f5:66:aa:1c:48:d1:a2:62:8b:85:
                    bb:e5:1b:e7:e7:dd:f5:06:c1:8e:cd:cc:96:29:73:
                    0e:94:0b:f3:0f:9e:8d:50:23:df:c7:3e:2e:9b:dd:
                    fc:5c:ce:26:34:65:75:c2:c2:1b:ca:1e:f6:5c:05:
                    f1:4d:de:00:a2:a5:b5:50:46:f2:96:94:38:bf:b1:
                    28:d6:b7:a8:61:e1:20:02:57:1f:da:ac:e2:c2:f9:
                    bb:db:92:6d:76:76:aa:58:0e:6d:90:87:96:5c:d5:
                    04:50:2e:2d:4d:3b:05:02:90:a8:ae:00:19:e4:b0:
                    48:c2:4d:f8:8f:cb:d5:76:c6:45:ff:d4:65:c4:ad:
                    f6:80:2f:85:a4:cf:7b:84:3b:64:29:16:cd:93:6b:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:45:C3:FB:94:A0:7F:91:4B:0F:6F:69:46:9D:DD:D5:B9:F7:C6:4A
            X509v3 Authority Key Identifier:
                keyid:EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/6xmxByf1lZR0P5EjTJ63Ez9sRzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.198.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:56:31:0e:27:7c:59:bd:4f:19:30:60:97:92:84:c9:17:
         64:85:c4:d6:75:5f:ff:7f:d9:5b:3a:b9:3c:75:c1:c4:b7:13:
         ab:59:8a:6a:47:00:79:dc:49:c8:6c:d6:19:4a:eb:45:d0:0e:
         96:c1:35:93:58:d5:e7:2b:ab:ef:84:e0:19:69:28:d2:43:80:
         f6:18:91:e6:65:b3:94:53:33:04:7c:49:76:7e:96:23:26:8d:
         3c:36:1c:37:48:9e:6b:ff:81:23:2b:7f:e0:b3:15:29:0d:0a:
         dc:54:d1:27:94:04:e0:d5:2b:64:93:87:1d:57:ac:ae:7c:c0:
         30:5f:ba:e0:3c:04:7f:4b:e1:74:79:57:50:38:ca:1b:96:67:
         f4:fe:7a:14:95:15:bc:b9:be:e6:8c:98:15:dc:0c:8a:82:6d:
         d0:66:11:28:22:7d:b6:45:5b:89:73:1c:29:a9:71:ba:cb:91:
         c4:6e:72:49:08:98:ae:f6:59:cf:71:bd:46:86:df:f8:58:a6:
         f5:ec:d5:f5:8b:64:a4:82:27:62:7c:b0:ac:6d:3d:0a:7c:15:
         44:e4:c0:c8:14:0d:eb:f9:22:85:78:22:14:60:72:1b:af:9d:
         ab:2b:83:63:fd:00:15:cb:10:81:88:11:29:53:e9:f6:95:20:
         eb:08:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----