Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/cZauqS_ddjfilET9jw4qz_FPIc8.roa
File:                     cZauqS_ddjfilET9jw4qz_FPIc8.roa (raw, json)
Hash identifier:          fui1/3HPyRavHNy1tpj4NAtN17Cz4gFTsHy/+wFg+84=
Subject key identifier:   71:96:AE:A9:2F:DD:76:37:E2:94:44:FD:8F:0E:2A:CF:F1:4F:21:CF
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018607A136C38C2C433B168A8C473B188597
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/cZauqS_ddjfilET9jw4qz_FPIc8.roa
Signing time:             Tue 31 Jan 2023 11:40:51 +0000
ROA not before:           Tue 31 Jan 2023 11:40:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211703
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:07:a1:36:c3:8c:2c:43:3b:16:8a:8c:47:3b:18:85:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Jan 31 11:40:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7196aea92fdd7637e29444fd8f0e2acff14f21cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:fb:1a:a5:f7:57:da:ef:f2:10:22:94:bb:
                    e2:20:4f:96:a3:59:05:c5:ff:7f:f6:74:fc:34:59:
                    98:ce:0d:fe:47:57:03:32:11:ee:bd:f3:5c:f9:40:
                    3c:c0:5d:dc:2a:75:81:99:d7:d4:e9:94:19:14:3e:
                    ba:57:21:87:84:5d:d8:c9:fd:99:9c:bf:52:2a:1b:
                    7a:04:e1:84:32:36:17:4a:ac:25:29:a6:af:f0:cb:
                    8d:c4:f2:fd:c5:8a:02:d7:45:9e:48:ad:fe:1b:92:
                    4e:f6:ac:7f:f3:a4:08:d4:72:75:be:a2:bf:d3:7b:
                    94:2b:76:5d:88:fe:98:d3:3b:ba:eb:bd:4e:98:45:
                    cb:eb:10:f6:e4:dd:48:65:a6:f1:6b:6b:5d:50:44:
                    01:80:31:ba:b1:61:90:6d:93:4a:45:77:2f:08:fc:
                    e9:69:f2:57:9d:e1:31:f4:d9:6f:3d:36:36:b2:f6:
                    20:d3:5a:d5:63:08:b5:57:3b:44:aa:71:c5:ec:66:
                    22:76:f7:b5:df:9e:cb:c3:65:3c:5f:e2:60:46:00:
                    10:c4:df:10:6b:2b:e7:f1:4c:57:59:07:ca:eb:f9:
                    c4:d5:52:d8:fa:09:61:0f:3c:a6:cc:12:66:33:c2:
                    9b:eb:6c:9b:e8:f1:59:c3:67:22:a5:fa:47:f3:06:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:96:AE:A9:2F:DD:76:37:E2:94:44:FD:8F:0E:2A:CF:F1:4F:21:CF
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/cZauqS_ddjfilET9jw4qz_FPIc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:b8:d9:af:3c:da:a3:e5:e7:2a:6c:1d:fe:ff:81:89:53:
         3d:29:ab:81:10:fb:28:bd:31:20:6a:6c:d4:ad:d6:78:cf:a3:
         d3:5d:fb:01:a6:ad:d7:e4:e5:ee:e0:d2:82:79:45:6f:85:07:
         18:e4:5d:49:8a:8c:f9:78:64:95:15:83:60:4d:be:24:3a:f7:
         55:1d:29:48:b2:bc:31:b0:82:fa:b6:56:82:4e:4a:ed:3b:9d:
         b7:f0:7f:7a:c6:9e:70:6e:a1:ef:0e:a1:4f:51:e3:b2:3b:ab:
         82:fa:e8:bc:61:fc:1e:c8:1d:ae:44:fd:fe:d0:50:51:69:91:
         d4:df:f2:1a:ba:fa:6d:c0:ba:9f:30:82:44:27:92:0d:bc:de:
         a9:93:6e:ec:b8:0f:b3:49:0b:32:66:4e:ba:86:60:e4:8c:f8:
         ec:68:d1:5f:47:fc:a2:76:7e:71:d2:00:3c:c1:0b:cf:21:e4:
         e3:c8:9b:c1:23:9d:c6:fa:c0:ae:8c:10:5f:7a:0d:93:86:7d:
         a9:f4:c1:6c:12:a4:10:db:25:10:f6:72:44:b5:bf:3a:84:e8:
         25:49:26:32:d0:c7:11:14:41:5f:13:b7:fe:1c:14:64:12:f5:
         53:eb:a6:45:3f:23:0e:6d:5a:c2:0e:71:e9:54:98:25:b6:d6:
         aa:ca:9c:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYHoTbDjCxDOxaKjEc7GIWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjMwMTMxMTE0MDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTk2YWVhOTJmZGQ3NjM3ZTI5NDQ0ZmQ4ZjBlMmFjZmYxNGYyMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/7GqX3V9rv8hAilLviIE+Wo1kF
xf9/9nT8NFmYzg3+R1cDMhHuvfNc+UA8wF3cKnWBmdfU6ZQZFD66VyGHhF3Yyf2Z
nL9SKht6BOGEMjYXSqwlKaav8MuNxPL9xYoC10WeSK3+G5JO9qx/86QI1HJ1vqK/
03uUK3ZdiP6Y0zu6671OmEXL6xD25N1IZabxa2tdUEQBgDG6sWGQbZNKRXcvCPzp
afJXneEx9NlvPTY2svYg01rVYwi1VztEqnHF7GYidve1357Lw2U8X+JgRgAQxN8Q
ayvn8UxXWQfK6/nE1VLY+glhDzymzBJmM8Kb62yb6PFZw2cipfpH8waOpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHGWrqkv3XY34pRE/Y8OKs/xTyHPMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvY1phdXFTX2RkamZpbEVUOWp3NHF6X0ZQSWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9nbMA0E
AgACMAcDBQMqEmLAMA0GCSqGSIb3DQEBCwUAA4IBAQCW4LjZrzzao+XnKmwd/v+B
iVM9KauBEPsovTEgamzUrdZ4z6PTXfsBpq3X5OXu4NKCeUVvhQcY5F1Jioz5eGSV
FYNgTb4kOvdVHSlIsrwxsIL6tlaCTkrtO5238H96xp5wbqHvDqFPUeOyO6uC+ui8
YfweyB2uRP3+0FBRaZHU3/IauvptwLqfMIJEJ5INvN6pk27suA+zSQsyZk66hmDk
jPjsaNFfR/yidn5x0gA8wQvPIeTjyJvBI53G+sCujBBfeg2Thn2p9MFsEqQQ2yUQ
9nJEtb86hOglSSYy0McRFEFfE7f+HBRkEvVT66ZFPyMObVrCDnHpVJglttaqypxb
-----END CERTIFICATE-----