Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/6tKN6MAr9adDPD-gbO0vEZFTTJ0.roa
File:                     6tKN6MAr9adDPD-gbO0vEZFTTJ0.roa (raw, json)
Hash identifier:          0dx71yA+a8V+6i3xa4VZzFfZyv/xahAWnEQHJo/ynYY=
Subject key identifier:   EA:D2:8D:E8:C0:2B:F5:A7:43:3C:3F:A0:6C:ED:2F:11:91:53:4C:9D
Certificate issuer:       /CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Certificate serial:       03446419
Authority key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/6tKN6MAr9adDPD-gbO0vEZFTTJ0.roa
Signing time:             Thu 05 May 2022 18:14:41 +0000
ROA not before:           Thu 05 May 2022 18:14:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        139.28.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54813721 (0x3446419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
        Validity
            Not Before: May  5 18:14:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ead28de8c02bf5a7433c3fa06ced2f1191534c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:4c:9c:63:d0:54:42:6b:76:7a:9e:51:57:
                    36:84:63:fb:2e:c5:9d:78:87:9b:c6:b4:a8:26:6d:
                    59:51:79:8f:64:53:46:f2:eb:ba:14:68:a8:ab:25:
                    84:cb:9b:d8:6b:ce:74:08:65:2a:4b:4a:35:34:02:
                    1c:14:a5:26:8a:50:dc:cd:79:00:14:d4:c7:6a:69:
                    16:10:78:ae:4b:52:b1:5b:86:d2:a9:a5:f9:23:31:
                    52:3f:8e:52:69:20:9d:de:04:81:bd:bc:88:9d:79:
                    45:af:a6:c1:82:48:72:9c:82:ec:d3:cc:82:1f:a7:
                    3c:85:6d:b0:c9:37:f6:a1:95:81:0c:04:90:d8:46:
                    f3:5b:ca:15:f3:0e:a4:81:33:c4:44:e2:04:db:03:
                    bf:40:03:6a:2a:ca:c5:13:2c:86:93:4e:60:44:f1:
                    52:cb:32:c7:e2:3d:49:bc:ef:55:69:14:29:1f:91:
                    5d:e3:a1:b1:4c:6a:e3:13:71:b4:33:ee:5d:6d:b6:
                    16:7c:5f:81:bc:73:f0:ec:d1:fc:fd:ae:16:4f:9a:
                    d7:7b:fb:2e:3b:1d:d2:c1:e7:af:75:35:03:45:01:
                    f9:a0:27:20:9b:d8:b8:38:9f:9f:d8:f5:33:63:14:
                    a6:e5:d8:82:16:5c:7e:78:91:81:bc:d3:29:7d:80:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:8D:E8:C0:2B:F5:A7:43:3C:3F:A0:6C:ED:2F:11:91:53:4C:9D
            X509v3 Authority Key Identifier:
                keyid:AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/6tKN6MAr9adDPD-gbO0vEZFTTJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:db:7b:99:f0:67:2b:09:b2:50:62:92:aa:69:91:ea:44:
         b3:88:aa:8f:74:77:31:1a:ec:d3:83:47:fe:0a:a3:75:cf:48:
         68:a1:27:59:fc:67:a0:3e:0f:11:84:f8:0c:49:29:ff:77:1e:
         42:84:1a:01:de:2e:2b:70:bf:21:76:d0:3c:c6:af:c3:54:23:
         42:d5:e2:94:22:df:d7:05:20:fb:a8:62:25:2b:5c:ff:57:ac:
         31:28:d0:45:da:46:19:86:63:9b:29:c1:92:74:b1:81:8a:c9:
         4d:a3:b8:46:00:57:c6:d3:69:fa:39:1a:8a:72:72:4b:fe:dd:
         a2:2e:f6:20:bb:bb:f6:f2:f2:92:be:71:ba:6d:84:7c:93:ff:
         fb:e2:30:d2:cb:f1:bd:7f:88:a6:a0:08:b5:e4:89:95:df:10:
         02:cc:c9:c4:27:d3:4d:17:25:98:4e:a7:4f:2b:94:04:da:52:
         8f:49:c5:ba:6a:7d:f9:5a:ac:45:10:ba:41:9d:a0:24:9a:a8:
         2b:e1:cc:9e:ca:56:8c:22:63:59:8f:f7:a2:f6:e5:fd:63:33:
         b3:79:52:91:2a:e2:57:d1:f1:16:ca:e7:cf:69:65:64:62:84:
         0f:49:8c:73:81:53:b0:a4:0d:44:a8:b0:99:3f:47:3a:42:69:
         4f:9c:7e:17
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0RkGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2M2ZTFiMDM1YWUxM2E2MjRmMjVlOTFmOTI4YTMyMjhjY2ViNjU1MB4XDTIyMDUw
NTE4MTQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFkMjhkZThjMDJi
ZjVhNzQzM2MzZmEwNmNlZDJmMTE5MTUzNGM5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqsTJxj0FRCa3Z6nlFXNoRj+y7FnXiHm8a0qCZtWVF5j2RT
RvLruhRoqKslhMub2GvOdAhlKktKNTQCHBSlJopQ3M15ABTUx2ppFhB4rktSsVuG
0qml+SMxUj+OUmkgnd4Egb28iJ15Ra+mwYJIcpyC7NPMgh+nPIVtsMk39qGVgQwE
kNhG81vKFfMOpIEzxETiBNsDv0ADairKxRMshpNOYETxUssyx+I9SbzvVWkUKR+R
XeOhsUxq4xNxtDPuXW22Fnxfgbxz8OzR/P2uFk+a13v7Ljsd0sHnr3U1A0UB+aAn
IJvYuDifn9j1M2MUpuXYghZcfniRgbzTKX2AlAkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTq0o3owCv1p0M8P6Bs7S8RkVNMnTAfBgNVHSMEGDAWgBSsxuGwNa4TpiTy
XpH5KKMijM62VTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JNYmhzRFd1RTZZazhsNlItU2lqSW96T3RsVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvMGM5YWYxLTc4NzktNDRhNC1iODFiLWFhODJhN2Q5YjM1Mi8x
LzZ0S042TUFyOWFkRFBELWdiTzB2RVpGVFRKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
MGM5YWYxLTc4NzktNDRhNC1iODFiLWFhODJhN2Q5YjM1Mi8xL3JNYmhzRFd1RTZZ
azhsNlItU2lqSW96T3RsVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoscIDANBgkqhkiG9w0BAQsFAAOC
AQEAZvLbe5nwZysJslBikqppkepEs4iqj3R3MRrs04NH/gqjdc9IaKEnWfxnoD4P
EYT4DEkp/3ceQoQaAd4uK3C/IXbQPMavw1QjQtXilCLf1wUg+6hiJStc/1esMSjQ
RdpGGYZjmynBknSxgYrJTaO4RgBXxtNp+jkainJyS/7doi72ILu79vLykr5xum2E
fJP/++Iw0svxvX+IpqAIteSJld8QAszJxCfTTRclmE6nTyuUBNpSj0nFump9+Vqs
RRC6QZ2gJJqoK+HMnspWjCJjWY/3ovbl/WMzs3lSkSriV9HxFsrnz2llZGKED0mM
c4FTsKQNRKiwmT9HOkJpT5x+Fw==
-----END CERTIFICATE-----