Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O0Cug-Q5BOVoIO721ZDyj_7-fEc.roa
File:                     O0Cug-Q5BOVoIO721ZDyj_7-fEc.roa (raw, json)
Hash identifier:          9A7yn3whoCj1F1yleWyJ1IRd+/BaSznpagvpyukw7CM=
Subject key identifier:   3B:40:AE:83:E4:39:04:E5:68:20:EE:F6:D5:90:F2:8F:FE:FE:7C:47
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       01854036587D01D5352BCE02CB39D4B01569
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O0Cug-Q5BOVoIO721ZDyj_7-fEc.roa
Signing time:             Fri 23 Dec 2022 18:19:41 +0000
ROA not before:           Fri 23 Dec 2022 18:19:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211703
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:40:36:58:7d:01:d5:35:2b:ce:02:cb:39:d4:b0:15:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Dec 23 18:19:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b40ae83e43904e56820eef6d590f28ffefe7c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:91:eb:ea:2e:2a:4c:67:65:89:2c:e6:86:
                    a5:cb:53:5f:91:11:f1:be:9d:14:ff:f2:28:53:ef:
                    b8:f8:59:d2:ce:c3:ed:c6:8d:5f:1d:60:0b:a8:61:
                    a2:4c:b6:a4:b5:ff:06:d8:dc:fe:f2:1b:4a:09:38:
                    c3:50:01:30:cf:9a:c8:09:ae:f2:6e:49:e1:04:9d:
                    98:4e:bf:06:c2:60:78:3e:b4:96:64:ee:3a:47:79:
                    0e:89:5e:8a:cd:b8:ea:f3:17:ce:0f:7a:db:2d:1c:
                    16:a5:19:09:a8:7a:ac:d5:c3:16:70:02:4a:88:c6:
                    46:37:0d:a9:65:74:f1:ee:1f:8f:d4:39:54:51:6b:
                    d0:b4:3c:7c:3b:02:9a:f6:e5:79:fc:7a:05:0a:ef:
                    77:c3:0b:fb:45:d4:c5:8d:a7:63:48:a2:cc:4c:44:
                    2c:c1:23:97:d9:1a:7f:6b:a1:88:ec:8f:1b:78:09:
                    a1:04:a0:8a:c6:92:25:dd:f3:5b:60:37:9f:3f:37:
                    2f:35:6f:d3:44:8f:a2:0c:95:f5:8d:91:11:bf:7b:
                    3d:eb:39:14:6d:86:62:f7:ea:00:d8:c6:24:a2:6c:
                    dc:b3:c1:d9:7d:1a:0b:96:6f:d3:97:8d:32:dd:13:
                    4f:32:b9:3e:e7:9b:af:d5:14:97:9c:75:d7:6e:52:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:AE:83:E4:39:04:E5:68:20:EE:F6:D5:90:F2:8F:FE:FE:7C:47
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O0Cug-Q5BOVoIO721ZDyj_7-fEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:ec:4a:1a:7f:52:8c:ad:41:93:f1:e2:fd:d5:c4:bd:54:
         ea:e4:a6:6e:d8:cb:22:aa:c6:e0:a3:c0:e8:eb:45:68:23:b8:
         20:bc:47:81:28:97:31:ef:16:e7:0b:f3:ea:ab:06:51:f3:25:
         fe:fd:a7:0b:92:6d:5c:67:0f:28:ea:e6:83:35:a1:25:6d:1e:
         a2:89:f8:b5:21:db:80:d9:48:ca:61:3e:cd:55:e4:cf:f8:be:
         77:55:3c:1f:e3:39:78:04:05:77:a5:77:6a:f4:73:6a:4a:fc:
         de:dd:2a:bf:e6:d1:6f:f3:6e:83:e6:59:6f:cf:50:c2:55:fd:
         ae:ae:48:f8:7b:80:b2:56:79:e7:5c:7e:42:15:31:3b:dc:82:
         17:1b:8c:8c:b0:c0:ca:34:7b:ff:87:91:5d:64:34:f2:a2:05:
         4f:8c:8f:0e:4e:ea:4c:88:a4:1f:95:42:d8:a2:ad:8e:27:50:
         88:99:10:f9:da:15:63:cc:c2:79:b1:7b:f8:38:aa:45:5d:37:
         29:45:6b:c1:0a:92:2d:a3:47:93:a0:7d:c6:c1:36:0e:51:f9:
         87:ea:d4:5b:41:41:9d:39:16:90:06:15:f0:23:94:43:db:b1:
         e8:cf:b2:0b:92:4e:9c:31:d8:9b:78:e1:35:27:03:01:1d:c5:
         d5:bb:a1:40
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVANlh9AdU1K84CyznUsBVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjIxMjIzMTgxOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjQwYWU4M2U0MzkwNGU1NjgyMGVlZjZkNTkwZjI4ZmZlZmU3YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo+R6+ouKkxnZYks5oaly1NfkRHx
vp0U//IoU++4+FnSzsPtxo1fHWALqGGiTLaktf8G2Nz+8htKCTjDUAEwz5rICa7y
bknhBJ2YTr8GwmB4PrSWZO46R3kOiV6Kzbjq8xfOD3rbLRwWpRkJqHqs1cMWcAJK
iMZGNw2pZXTx7h+P1DlUUWvQtDx8OwKa9uV5/HoFCu93wwv7RdTFjadjSKLMTEQs
wSOX2Rp/a6GI7I8beAmhBKCKxpIl3fNbYDefPzcvNW/TRI+iDJX1jZERv3s96zkU
bYZi9+oA2MYkomzcs8HZfRoLlm/Tl40y3RNPMrk+55uv1RSXnHXXblK75QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDtAroPkOQTlaCDu9tWQ8o/+/nxHMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvTzBDdWctUTVCT1ZvSU83MjFaRHlqXzctZkVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9nbMA0E
AgACMAcDBQMqEmLAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5OxKGn9SjK1Bk/Hi/dXE
vVTq5KZu2Msiqsbgo8Do60VoI7ggvEeBKJcx7xbnC/PqqwZR8yX+/acLkm1cZw8o
6uaDNaElbR6iifi1IduA2UjKYT7NVeTP+L53VTwf4zl4BAV3pXdq9HNqSvze3Sq/
5tFv826D5llvz1DCVf2urkj4e4CyVnnnXH5CFTE73IIXG4yMsMDKNHv/h5FdZDTy
ogVPjI8OTupMiKQflULYoq2OJ1CImRD52hVjzMJ5sXv4OKpFXTcpRWvBCpIto0eT
oH3GwTYOUfmH6tRbQUGdORaQBhXwI5RD27Hoz7ILkk6cMdibeOE1JwMBHcXVu6FA
-----END CERTIFICATE-----