Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/qicpNPJ-_nozZ7CtaT1dsHjG3As.roa
File:                     qicpNPJ-_nozZ7CtaT1dsHjG3As.roa (raw, json)
Hash identifier:          Negvzg1e5+jOGr+8rN5bhU1DM2MS+qQ6QtjRidlZ7Ow=
Subject key identifier:   AA:27:29:34:F2:7E:FE:7A:33:67:B0:AD:69:3D:5D:B0:78:C6:DC:0B
Certificate issuer:       /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial:       C54A6A
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/qicpNPJ-_nozZ7CtaT1dsHjG3As.roa
Signing time:             Sat 01 Jan 2022 11:04:52 +0000
ROA not before:           Sat 01 Jan 2022 11:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201922
IP address blocks:        185.179.35.0/24 maxlen: 24
                          2a02:6c20:807::/48 maxlen: 48
                          2a02:6c20:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12929642 (0xc54a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
        Validity
            Not Before: Jan  1 11:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa272934f27efe7a3367b0ad693d5db078c6dc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:df:65:1f:41:42:3d:78:b4:76:89:98:1a:85:
                    5c:72:c1:c5:2e:f7:80:20:90:2e:37:e9:27:e7:0d:
                    99:92:41:a1:03:89:15:b3:ba:5d:c6:2f:77:cc:f4:
                    d1:d7:38:9f:39:b7:47:98:68:17:b1:5f:50:42:ad:
                    80:be:1a:38:89:a5:c3:e6:bc:af:8b:6c:fa:f2:4a:
                    4b:a4:1c:cf:c4:62:69:53:50:c0:86:13:2e:d0:b4:
                    38:2d:05:f6:6e:33:c7:50:2f:0b:c1:94:13:87:53:
                    9f:91:c1:8b:7e:5d:30:e3:f7:73:50:b8:8d:bb:fe:
                    1f:13:54:de:8c:fe:c5:71:cf:37:02:42:7a:9c:48:
                    75:ce:0a:5f:54:f5:67:c2:10:91:c1:26:13:d8:e0:
                    52:a6:bf:8d:25:58:a3:3e:39:68:f3:6c:e6:e7:ea:
                    c8:62:01:aa:c3:3d:b2:b4:f8:ae:ab:26:9f:73:9a:
                    82:84:d5:9b:a6:7d:4e:36:9e:cc:34:63:ca:b5:09:
                    c9:d6:18:cf:ce:a6:26:bb:c1:d5:b4:eb:49:2d:2a:
                    eb:89:27:cf:46:eb:6d:80:aa:4e:de:0b:97:52:c4:
                    5c:a7:18:56:68:68:72:98:96:3e:43:f9:88:17:64:
                    73:33:b7:14:62:cf:e2:b4:d4:78:53:b5:44:f9:99:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:29:34:F2:7E:FE:7A:33:67:B0:AD:69:3D:5D:B0:78:C6:DC:0B
            X509v3 Authority Key Identifier:
                keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/qicpNPJ-_nozZ7CtaT1dsHjG3As.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.35.0/24
                IPv6:
                  2a02:6c20:3::/48
                  2a02:6c20:807::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:05:8e:8d:87:fa:61:31:1f:4b:73:0e:70:ae:19:dc:cd:
         21:b9:79:9e:84:a1:b9:44:d5:40:50:40:ca:79:df:1d:e3:4d:
         08:8d:dc:6d:c1:16:41:e1:09:5e:c1:fb:2a:69:b7:da:49:f3:
         a7:52:18:c9:02:95:7c:07:c5:d1:d8:93:71:4c:9d:c5:83:28:
         46:14:37:07:75:f1:b8:52:b4:15:ea:fd:e0:7f:4f:bb:da:6f:
         96:4d:09:1f:cd:45:2d:48:2a:d3:a4:64:64:c8:f2:90:83:b5:
         01:f8:9e:32:ca:85:fe:2f:14:20:ab:30:21:51:f0:53:e0:82:
         97:78:96:85:b5:bf:84:32:59:ce:56:e7:cd:36:b1:d2:be:0f:
         ee:fb:8a:e7:17:95:96:0c:1c:f5:dd:8c:27:60:a7:82:6b:86:
         ff:a8:15:26:42:8f:ed:ac:5b:fa:40:bb:ed:a6:ae:3b:29:1a:
         cf:79:01:30:8b:d5:b7:0d:f1:1d:75:70:97:51:13:17:f2:ee:
         46:e0:97:7f:c7:69:a7:17:c9:6c:18:d2:65:c7:b0:8a:9a:b5:
         8b:18:69:17:84:15:27:7f:07:78:96:12:6f:bc:0e:c1:b3:1d:
         c8:be:7f:ab:b1:91:14:ac:a2:b6:d9:6d:df:f4:61:9d:a5:db:
         70:89:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----