Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa
File:                     s6qyVnkvpWdQacvnyt03YxwLl5s.roa (raw, json)
Hash identifier:          aF0JD0GY3TjkFtGaSn4h66X3AtTMzuMVUag/2q6/vbU=
Subject key identifier:   B3:AA:B2:56:79:2F:A5:67:50:69:CB:E7:CA:DD:37:63:1C:0B:97:9B
Certificate issuer:       /CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Certificate serial:       0233BE3D
Authority key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa
Signing time:             Sat 01 Jan 2022 15:58:40 +0000
ROA not before:           Sat 01 Jan 2022 15:58:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        139.28.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36945469 (0x233be3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
        Validity
            Not Before: Jan  1 15:58:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3aab256792fa5675069cbe7cadd37631c0b979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:09:ed:fc:7e:78:51:e4:a0:82:b0:cd:00:
                    7e:88:da:66:40:02:7e:ed:03:dd:c1:9b:50:89:af:
                    68:69:59:79:a1:4e:92:0a:46:87:cb:9f:a5:9b:f7:
                    70:d3:3c:78:4a:c2:fe:de:86:80:fc:e8:2a:f3:79:
                    f1:53:f1:eb:b7:97:a4:ab:2f:f9:50:52:5b:ad:af:
                    34:30:14:3f:62:6f:53:82:ab:fb:bd:88:2e:69:a2:
                    07:7d:4b:7c:f5:ac:fb:77:5f:95:1b:ec:95:f7:24:
                    4f:8e:62:36:28:a9:a0:cc:d6:81:44:c9:ff:98:5a:
                    d2:0d:52:eb:22:17:66:e6:b6:24:3d:9b:ea:32:5f:
                    0e:6f:0a:06:57:c0:86:92:10:ce:75:ba:5a:4d:28:
                    d0:02:89:c5:a1:3c:20:f2:24:56:aa:94:07:59:aa:
                    da:61:cd:8b:ba:8f:cc:f2:7a:b1:c1:3a:ce:e8:ae:
                    ec:a3:39:39:c2:a7:b2:fb:52:11:47:e7:19:e5:78:
                    7b:e4:d0:87:b6:a6:67:2e:89:71:e7:37:09:fa:8d:
                    71:1c:bd:26:33:1b:9d:52:66:e6:ed:9a:f9:00:5a:
                    f2:57:cb:4e:f4:11:76:af:28:0c:8c:35:e3:28:ba:
                    e7:07:2e:14:b9:f4:b4:20:6b:97:a1:44:bc:f0:60:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:B2:56:79:2F:A5:67:50:69:CB:E7:CA:DD:37:63:1C:0B:97:9B
            X509v3 Authority Key Identifier:
                keyid:AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:9b:11:6b:bb:9e:02:31:77:bb:29:66:87:3f:00:11:d0:
         7e:99:6e:4b:f7:98:a6:c5:e7:54:04:76:20:fc:a7:5e:d3:c3:
         b6:db:8f:8f:d8:ef:ff:51:a4:7c:02:4d:96:41:5f:bc:81:fd:
         b5:1d:91:43:55:17:b8:84:ff:f3:ca:e2:8f:f2:87:c8:e5:ea:
         c4:7d:13:cf:b6:5d:6c:ee:cc:5b:7c:d0:c4:8a:dd:8a:35:56:
         eb:7e:9d:9d:2d:94:05:c9:7d:2c:6f:7c:ee:dd:a2:4f:9a:5a:
         e0:5e:ea:9a:00:69:69:50:68:e9:25:f6:bc:bf:37:c8:91:b4:
         ba:64:88:88:bc:d9:01:e7:26:00:5b:1c:ea:aa:4b:d2:60:d3:
         65:46:6c:81:92:86:09:62:c6:aa:da:38:35:33:82:7e:e8:dd:
         23:7c:e5:bb:3c:f1:7b:ca:28:f9:ff:48:04:77:50:b3:d2:18:
         61:ec:01:29:c8:24:c5:77:bc:41:6e:29:a1:ec:5f:e2:44:c9:
         eb:e6:67:a7:a4:97:18:91:07:5b:53:ac:d3:f1:ff:d6:dc:b6:
         63:51:f8:bc:ed:e2:39:6f:2b:29:07:95:82:a2:00:2d:7a:28:
         da:c2:f6:6e:32:3f:e8:59:eb:4f:45:e9:28:09:69:f5:4f:7d:
         17:9b:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----