Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa
File:                     xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa (raw, json)
Hash identifier:          IcYJBdDTcGaSYpRnA53NkosHRUejvtYkodvGU//j8bY=
Subject key identifier:   C5:11:40:83:53:21:A9:D1:A6:2B:F1:BE:05:26:29:BC:03:E0:B4:68
Certificate issuer:       /CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Certificate serial:       06DD1703
Authority key identifier: 23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa
Signing time:             Sat 01 Jan 2022 10:57:08 +0000
ROA not before:           Sat 01 Jan 2022 10:57:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44865
IP address blocks:        194.116.242.0/23 maxlen: 23
                          2001:67c:2b50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115152643 (0x6dd1703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
        Validity
            Not Before: Jan  1 10:57:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c51140835321a9d1a62bf1be052629bc03e0b468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:03:b6:e4:3b:89:a7:41:a5:26:88:40:00:
                    48:6b:d6:d3:0f:52:b6:4f:60:d7:8a:aa:99:ba:36:
                    e4:43:92:46:83:ab:60:b5:5d:7f:0d:8e:69:f5:86:
                    92:6f:f3:a6:34:9d:ca:9a:43:51:d5:6e:e1:c8:43:
                    33:0f:4e:81:32:6f:1f:d6:00:e5:3c:0e:e4:10:88:
                    62:c1:c8:40:48:d7:e0:76:f9:aa:0a:88:bc:6e:c6:
                    73:0b:93:b2:ea:85:ad:a7:4f:50:c9:1d:db:a0:da:
                    cb:c5:72:52:f1:63:19:a2:5f:3b:2c:eb:43:50:8a:
                    84:0e:f6:20:d0:d1:bf:ce:f7:a9:9c:ae:d3:1a:09:
                    01:95:e0:cd:7e:07:f1:b7:c1:ca:ee:f3:06:a9:5f:
                    1e:06:b6:f8:9d:22:20:9b:14:04:f2:c3:e9:02:a3:
                    8f:52:0e:d5:92:0c:59:f8:37:80:b2:8a:8f:cf:cf:
                    3d:6f:61:b0:20:c7:41:a6:82:6e:41:12:e9:94:28:
                    4b:9c:fe:30:6c:a6:46:a1:48:e7:05:ae:2b:e7:d3:
                    a9:09:47:ff:a5:dc:d6:39:b2:ca:08:b0:f9:94:49:
                    27:89:75:f5:f1:a2:dc:12:cb:19:bb:a0:42:f0:88:
                    8d:e9:68:19:a6:10:ac:a7:5e:64:03:63:7e:4e:f4:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:40:83:53:21:A9:D1:A6:2B:F1:BE:05:26:29:BC:03:E0:B4:68
            X509v3 Authority Key Identifier:
                keyid:23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/xRFAg1MhqdGmK_G-BSYpvAPgtGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.242.0/23
                IPv6:
                  2001:67c:2b50::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:52:81:a5:70:5c:96:69:23:13:cc:fe:3b:c3:d0:5e:f9:0d:
         e8:f7:c2:6d:3b:fd:34:82:ec:25:1d:bb:ec:0b:ae:fb:a3:7d:
         c6:59:fd:78:51:32:1a:1a:92:0a:1d:86:72:81:73:fe:44:65:
         2b:cc:4b:b9:70:f7:31:8e:55:ca:2e:c8:d7:e9:22:60:3e:a0:
         4b:31:f8:8b:b3:1d:c0:b2:09:f1:c7:4b:de:95:7c:ff:dd:33:
         34:ce:af:76:02:c6:ee:8a:23:9d:7d:91:e8:90:4b:e4:a0:f5:
         dd:4a:10:bc:86:ad:85:ef:0c:fb:37:b6:e6:89:1d:09:ab:ce:
         89:74:ed:bd:1d:a7:c4:d9:02:ca:d4:80:bd:4c:5e:30:0b:e9:
         b5:27:6f:0b:39:99:6b:65:54:d6:b6:22:b0:a7:63:31:b3:52:
         60:25:54:e4:cd:1a:e8:55:11:4c:ab:12:6f:ce:cd:08:ac:28:
         80:b7:9a:67:13:6f:eb:53:4d:82:10:1c:b9:ff:d8:78:29:45:
         b4:ac:59:19:27:8c:86:28:ed:53:60:bc:21:b0:68:f8:bb:bb:
         a6:e2:5d:f3:82:e2:bb:c6:06:de:17:b4:cc:ea:9b:d2:53:63:
         e8:29:04:b6:8b:1f:b5:bf:ed:ee:93:7e:51:5f:6b:71:42:fe:
         e0:ca:f5:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBt0XAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzQwNDA1MmI4Y2E5NzJiYmIyZmY2YTgxM2NhNDFlOGE5NTU5ZWNhMB4XDTIyMDEw
MTEwNTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzUxMTQwODM1MzIx
YTlkMWE2MmJmMWJlMDUyNjI5YmMwM2UwYjQ2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMU4A7bkO4mnQaUmiEAASGvW0w9Stk9g14qqmbo25EOSRoOr
YLVdfw2OafWGkm/zpjSdyppDUdVu4chDMw9OgTJvH9YA5TwO5BCIYsHIQEjX4Hb5
qgqIvG7GcwuTsuqFradPUMkd26Day8VyUvFjGaJfOyzrQ1CKhA72INDRv873qZyu
0xoJAZXgzX4H8bfByu7zBqlfHga2+J0iIJsUBPLD6QKjj1IO1ZIMWfg3gLKKj8/P
PW9hsCDHQaaCbkES6ZQoS5z+MGymRqFI5wWuK+fTqQlH/6Xc1jmyygiw+ZRJJ4l1
9fGi3BLLGbugQvCIjeloGaYQrKdeZANjfk70p/sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTFEUCDUyGp0aYr8b4FJim8A+C0aDAfBgNVHSMEGDAWgBQjQEBSuMqXK7sv
9qgTykHoqVWeyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0kwQkFVcmpLbHl1N0xfYW9FOHBCNktsVm5zby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvNTVlYmQ3LTVmYjgtNDAxMS1iY2U2LWJkMTEwMmJiOGMxYi8x
L3hSRkFnMU1ocWRHbUtfRy1CU1lwdkFQZ3RHZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
NTVlYmQ3LTVmYjgtNDAxMS1iY2U2LWJkMTEwMmJiOGMxYi8xL0kwQkFVcmpLbHl1
N0xfYW9FOHBCNktsVm5zby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcJ08jAPBAIAAjAJAwcAIAEGfCtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAIUoGlcFyWaSMTzP47w9Be+Q3o98JtO/00guwl
HbvsC677o33GWf14UTIaGpIKHYZygXP+RGUrzEu5cPcxjlXKLsjX6SJgPqBLMfiL
sx3Asgnxx0velXz/3TM0zq92AsbuiiOdfZHokEvkoPXdShC8hq2F7wz7N7bmiR0J
q86JdO29HafE2QLK1IC9TF4wC+m1J28LOZlrZVTWtiKwp2Mxs1JgJVTkzRroVRFM
qxJvzs0IrCiAt5pnE2/rU02CEBy5/9h4KUW0rFkZJ4yGKO1TYLwhsGj4u7um4l3z
guK7xgbeF7TM6pvSU2PoKQS2ix+1v+3uk35RX2txQv7gyvXq
-----END CERTIFICATE-----