Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa
File:                     SSlDC9oITaFN8XbsoroLuF6emaM.roa (raw, json)
Hash identifier:          uoQ0omlu4b8tVD3L+fAy7RYSTe8VkMq2zgqtit3csGw=
Subject key identifier:   49:29:43:0B:DA:08:4D:A1:4D:F1:76:EC:A2:BA:0B:B8:5E:9E:99:A3
Certificate issuer:       /CN=19ef82fc25d73135525f2bc0f8226455cf9e5b30
Certificate serial:       05C42F7E
Authority key identifier: 19:EF:82:FC:25:D7:31:35:52:5F:2B:C0:F8:22:64:55:CF:9E:5B:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa
Signing time:             Sat 01 Jan 2022 01:51:47 +0000
ROA not before:           Sat 01 Jan 2022 01:51:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207048
IP address blocks:        185.123.52.0/24 maxlen: 24
                          2a10:ec0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96743294 (0x5c42f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ef82fc25d73135525f2bc0f8226455cf9e5b30
        Validity
            Not Before: Jan  1 01:51:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4929430bda084da14df176eca2ba0bb85e9e99a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:10:05:45:9c:1d:4b:60:6a:b2:f4:97:fa:
                    71:18:f5:76:62:d2:8d:30:dd:a8:83:25:d9:30:e1:
                    f2:fe:c6:bf:50:80:8c:1e:ee:98:bd:9a:ee:59:73:
                    81:6b:d5:cc:88:68:ab:40:f0:71:8a:a8:14:16:67:
                    fa:60:ef:3d:af:49:13:e0:2b:91:0c:23:ad:9e:cb:
                    53:e2:98:57:c1:0e:f5:98:f1:15:dc:70:67:5e:0c:
                    72:d3:78:a5:ed:a1:b1:d6:96:6d:77:fd:3a:09:a5:
                    7a:fa:7c:54:8e:47:e0:fc:6e:08:c4:18:c1:da:f0:
                    55:b1:6a:9f:bc:1c:b0:7d:ea:ad:83:ad:fb:ef:9b:
                    4f:16:7a:d9:d7:37:68:4c:99:a6:db:5d:cf:ff:63:
                    ac:72:63:91:70:83:57:58:40:a8:08:06:66:e2:11:
                    03:de:dc:b9:0e:3c:24:f9:10:ce:89:e3:61:e8:a5:
                    f6:6d:d0:68:11:05:e7:96:90:3d:37:d3:88:c4:2b:
                    b8:6f:51:b8:54:ff:ae:bd:2d:ab:3e:8a:3e:49:da:
                    c9:c2:cf:52:a1:9b:22:76:53:cb:1f:4c:cf:ea:58:
                    1d:4d:fe:ba:eb:04:19:ba:d1:e8:e5:eb:43:97:7d:
                    e6:fb:71:a4:cd:1c:01:76:5b:b1:97:9d:e0:cd:b1:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:43:0B:DA:08:4D:A1:4D:F1:76:EC:A2:BA:0B:B8:5E:9E:99:A3
            X509v3 Authority Key Identifier:
                keyid:19:EF:82:FC:25:D7:31:35:52:5F:2B:C0:F8:22:64:55:CF:9E:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.52.0/24
                IPv6:
                  2a10:ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:96:ef:7f:f2:c9:bb:ee:12:8c:50:7c:69:d0:99:e0:dd:
         b9:b1:d1:74:8d:f1:02:d6:c6:50:2c:98:6f:7d:85:cc:4b:96:
         0f:65:c0:6e:39:d2:5c:1a:28:43:3d:9e:57:45:fe:b3:4c:70:
         17:c2:4f:82:e1:80:39:e2:15:fd:79:66:a9:2f:c9:4e:bd:76:
         72:2a:5d:a5:4b:f8:a1:a6:65:e7:82:f9:1d:4c:03:59:62:92:
         1e:06:1c:45:c8:60:56:04:67:20:b4:d0:37:b4:a5:6a:2c:35:
         39:7f:df:6b:87:55:d1:aa:de:3d:0f:2d:94:1f:0f:e4:b0:45:
         c7:74:b8:16:1c:16:98:bf:7b:65:ad:f1:67:3f:37:3a:ac:a0:
         3a:c2:f3:5b:5e:c1:54:25:db:fe:ee:c8:3d:d9:6d:9d:de:a4:
         f2:0f:0e:cb:9d:12:05:ed:60:13:16:00:82:d0:9a:df:85:d7:
         5d:cd:88:b1:bc:dc:2a:49:ae:0d:da:f1:e3:c2:37:88:b8:8e:
         e4:59:de:7e:f6:66:d5:8e:65:46:a4:ec:e3:9a:e0:92:45:78:
         0f:d7:48:7d:c5:a5:84:b4:61:4b:ba:5e:52:69:dc:bf:bd:dd:
         97:62:09:2d:5b:7d:b4:92:0a:24:b8:91:1d:e1:72:fa:f2:96:
         9a:98:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----