Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/_QQHSmZuSddI-q2nYw620qYUt_o.roa
File:                     _QQHSmZuSddI-q2nYw620qYUt_o.roa (raw, json)
Hash identifier:          DH9Kpbpjwwt14OLZoU/d+m9ZMF6PRsqNDA4qUiZMAmw=
Subject key identifier:   FD:04:07:4A:66:6E:49:D7:48:FA:AD:A7:63:0E:B6:D2:A6:14:B7:FA
Certificate issuer:       /CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
Certificate serial:       08DFCBB8
Authority key identifier: 2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/_QQHSmZuSddI-q2nYw620qYUt_o.roa
Signing time:             Sat 01 Jan 2022 08:02:51 +0000
ROA not before:           Sat 01 Jan 2022 08:02:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206207
IP address blocks:        185.190.208.0/22 maxlen: 24
                          2a0a:d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148884408 (0x8dfcbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
        Validity
            Not Before: Jan  1 08:02:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd04074a666e49d748faada7630eb6d2a614b7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:ab:40:13:40:19:68:ed:5b:81:19:30:5f:
                    ed:1d:85:ac:57:56:36:ea:ce:ab:5d:79:9c:e7:49:
                    64:ad:a3:1b:e2:a4:a1:0d:d9:11:88:93:c6:e9:31:
                    22:5a:f8:df:40:ab:6e:0d:aa:ce:9a:c7:1b:eb:39:
                    e7:cc:70:35:e5:3d:c4:cc:19:4c:c3:63:4f:69:c7:
                    c0:44:a4:d8:b9:ce:d0:e9:5b:f5:73:8d:b2:77:bc:
                    9a:32:92:64:7e:11:3b:33:e8:2d:8a:8e:46:0e:f2:
                    df:12:23:1b:23:78:3a:f6:fb:50:da:ce:d3:65:77:
                    e0:7a:f9:73:a3:df:15:16:55:ba:76:0c:c8:a0:ab:
                    c9:8e:bf:8d:33:a5:d1:04:00:0e:c7:dd:ab:a4:db:
                    95:20:83:e8:8d:88:ad:0f:e1:a7:66:20:22:0e:7f:
                    1a:a2:16:ad:17:a2:2e:53:89:3e:75:ce:44:d1:68:
                    64:db:9d:c6:e5:12:29:74:00:9d:03:db:aa:67:49:
                    99:8f:02:f0:17:1c:2b:60:47:7b:fb:0b:94:00:df:
                    f8:28:f0:1c:64:7a:81:5e:8d:6e:ea:09:a3:0c:80:
                    73:1d:40:68:dc:ac:0f:f6:e0:db:d0:d3:5d:9b:c9:
                    31:e1:a3:8a:62:75:8f:6a:ef:75:c5:bd:03:07:bb:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:07:4A:66:6E:49:D7:48:FA:AD:A7:63:0E:B6:D2:A6:14:B7:FA
            X509v3 Authority Key Identifier:
                keyid:2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/_QQHSmZuSddI-q2nYw620qYUt_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.208.0/22
                IPv6:
                  2a0a:d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:22:81:b7:94:0d:c2:f2:8c:f9:ed:71:0c:74:4c:2d:ad:e8:
         81:60:ac:7b:43:12:74:0f:41:85:af:0b:b8:0d:7f:9d:c1:4e:
         74:4e:f6:46:f5:02:49:b3:77:cb:12:f0:d9:b4:82:17:48:19:
         c1:f4:04:83:fc:19:2d:90:66:67:e5:81:0e:36:2b:15:bb:8d:
         ff:0d:9c:bf:0a:fe:cb:aa:ec:eb:35:ed:fd:01:3e:d5:59:be:
         fc:05:a9:98:bb:31:22:90:46:35:4d:0c:79:d1:bc:ed:f5:95:
         fb:f1:3c:44:88:09:f7:6b:11:5a:d4:fd:1c:49:e4:97:17:92:
         c9:47:48:f5:64:2a:a4:5c:ef:54:a4:07:5c:9e:eb:47:5c:0d:
         7c:fd:6b:c1:b3:2f:5e:19:fe:6a:91:52:b3:01:db:df:03:dd:
         39:8b:36:14:b1:de:2b:72:14:7c:de:16:3b:d7:07:85:ba:a3:
         e9:68:64:4f:79:64:3e:10:1c:ab:9c:ec:6e:46:6c:f5:2b:dc:
         f8:5a:8c:a2:a8:e1:e4:64:93:e4:2c:53:c1:c0:d3:50:b0:81:
         45:0f:8e:fd:64:80:fa:ef:96:c3:55:e4:f2:34:e5:9b:eb:30:
         3a:17:23:c0:f3:9c:df:cf:fb:94:3b:33:f4:52:e5:cf:f5:0c:
         11:85:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----