Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/vqXcFcSrah-OlXyV29MyFDSaR-4.roa
File:                     vqXcFcSrah-OlXyV29MyFDSaR-4.roa (raw, json)
Hash identifier:          Yqv5CmKeBVgRdiw8gMQ0w/U2GHklcp0/P/NihDqX+Js=
Subject key identifier:   BE:A5:DC:15:C4:AB:6A:1F:8E:95:7C:95:DB:D3:32:14:34:9A:47:EE
Certificate issuer:       /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial:       01875CF5C12C5E8F29BF8A2F89556D2F9DE6
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/vqXcFcSrah-OlXyV29MyFDSaR-4.roa
Signing time:             Fri 07 Apr 2023 18:23:42 +0000
ROA not before:           Fri 07 Apr 2023 18:23:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205993
IP address blocks:        85.255.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5c:f5:c1:2c:5e:8f:29:bf:8a:2f:89:55:6d:2f:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
        Validity
            Not Before: Apr  7 18:23:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bea5dc15c4ab6a1f8e957c95dbd33214349a47ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:94:13:cb:b8:71:1c:40:7b:1d:2b:5f:f9:
                    ae:10:f3:46:9f:4b:4e:f9:72:ae:94:65:4e:81:18:
                    19:18:b9:b8:08:11:40:10:3f:03:90:ac:8a:69:60:
                    73:41:3e:50:ec:53:d7:e3:07:29:34:c3:3a:bb:84:
                    17:6c:38:de:73:8c:9d:bc:5d:cb:32:5d:fa:c6:2f:
                    d0:ca:e3:c7:c8:99:ac:8b:42:d0:13:cb:26:f2:6d:
                    5f:14:c9:3b:b5:8f:fa:d0:b7:62:3d:9f:f5:e3:58:
                    f7:75:5a:bf:d9:e7:e1:f5:df:81:08:42:46:bc:18:
                    76:41:01:32:a7:8d:9f:fa:c3:c0:76:cf:43:93:c6:
                    a9:dc:2b:3a:c0:19:b7:53:81:87:8f:ac:fa:c5:1c:
                    3f:47:79:5f:b7:3d:60:b0:a1:89:3d:09:b0:41:4d:
                    6b:8f:62:13:f6:6b:dc:ab:af:a0:86:4e:55:e0:ca:
                    78:31:e0:0b:77:4c:8a:6c:b4:5e:b3:80:74:bc:08:
                    57:7e:9c:21:4e:25:41:70:46:6a:1d:d8:8d:0a:06:
                    d9:e5:1a:65:2e:52:15:e5:1a:9a:7b:f3:03:fc:7a:
                    73:d3:e7:df:08:4a:d8:dc:e0:2d:69:1b:73:5a:18:
                    ed:94:e7:7f:72:c0:41:7d:1f:5c:80:18:f4:14:b4:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A5:DC:15:C4:AB:6A:1F:8E:95:7C:95:DB:D3:32:14:34:9A:47:EE
            X509v3 Authority Key Identifier:
                keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/vqXcFcSrah-OlXyV29MyFDSaR-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.255.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:17:e1:3d:a6:de:c4:e2:7e:64:b3:af:01:9a:f7:67:1c:82:
         d6:e2:d1:5a:24:9c:88:65:d2:5b:ee:03:a8:68:ee:0c:f9:cc:
         25:08:f3:29:76:d9:16:17:04:bf:b8:55:6e:bb:31:b4:36:7e:
         1c:0c:38:22:f6:23:92:4a:bb:b9:66:9b:16:af:40:c2:48:dc:
         85:18:f9:93:53:97:c8:6f:0b:ec:a3:d8:a8:07:c7:b3:8d:ab:
         03:c4:6d:86:5c:b1:e6:ba:0b:88:3d:d0:d7:57:a4:60:64:36:
         73:22:ab:8b:ea:a0:e2:64:b2:7c:36:86:9b:18:ff:15:34:6f:
         85:a8:71:ab:7a:25:00:4b:99:a1:43:ae:81:98:e3:32:18:27:
         20:2e:31:f4:3f:84:48:b6:3c:98:ea:bf:e4:57:57:c6:d4:e1:
         e1:a5:e5:10:a6:fb:da:8c:d6:5f:f2:e0:c9:ae:43:09:65:17:
         90:2b:26:9b:8f:01:e6:5e:be:8d:fc:6c:b5:94:ba:aa:40:55:
         8c:1b:9f:37:d0:a1:04:8c:ad:40:a3:f6:2b:a1:4b:fb:5b:60:
         36:97:4a:c6:33:b8:10:53:8b:e1:58:41:9d:3b:ca:b4:df:20:
         d0:ea:7b:3c:3b:6b:15:47:ed:8c:89:11:9e:8a:58:d5:09:eb:
         41:e0:33:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdc9cEsXo8pv4oviVVtL53mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjMwNDA3MTgyMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWE1ZGMxNWM0YWI2YTFmOGU5NTdjOTVkYmQzMzIxNDM0OWE0N2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjyUE8u4cRxAex0rX/muEPNGn0tO
+XKulGVOgRgZGLm4CBFAED8DkKyKaWBzQT5Q7FPX4wcpNMM6u4QXbDjec4ydvF3L
Ml36xi/QyuPHyJmsi0LQE8sm8m1fFMk7tY/60LdiPZ/141j3dVq/2efh9d+BCEJG
vBh2QQEyp42f+sPAds9Dk8ap3Cs6wBm3U4GHj6z6xRw/R3lftz1gsKGJPQmwQU1r
j2IT9mvcq6+ghk5V4Mp4MeALd0yKbLRes4B0vAhXfpwhTiVBcEZqHdiNCgbZ5Rpl
LlIV5Rqae/MD/Hpz0+ffCErY3OAtaRtzWhjtlOd/csBBfR9cgBj0FLT97wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6l3BXEq2ofjpV8ldvTMhQ0mkfuMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvdnFYY0ZjU3JhaC1PbFh5VjI5TXlGRFNhUi00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVf94MA0G
CSqGSIb3DQEBCwUAA4IBAQBkF+E9pt7E4n5ks68BmvdnHILW4tFaJJyIZdJb7gOo
aO4M+cwlCPMpdtkWFwS/uFVuuzG0Nn4cDDgi9iOSSru5ZpsWr0DCSNyFGPmTU5fI
bwvso9ioB8ezjasDxG2GXLHmuguIPdDXV6RgZDZzIquL6qDiZLJ8NoabGP8VNG+F
qHGreiUAS5mhQ66BmOMyGCcgLjH0P4RItjyY6r/kV1fG1OHhpeUQpvvajNZf8uDJ
rkMJZReQKyabjwHmXr6N/Gy1lLqqQFWMG5830KEEjK1Ao/YroUv7W2A2l0rGM7gQ
U4vhWEGdO8q03yDQ6ns8O2sVR+2MiRGeiljVCetB4DMA
-----END CERTIFICATE-----