Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/xVlnw5LXNnO1t2KVU9YNRngGO0g.roa
File:                     xVlnw5LXNnO1t2KVU9YNRngGO0g.roa (raw, json)
Hash identifier:          ElsO412eK2KyM0XkcEf1cIz48/lygpiA8XGKTVgzCwE=
Subject key identifier:   C5:59:67:C3:92:D7:36:73:B5:B7:62:95:53:D6:0D:46:78:06:3B:48
Certificate issuer:       /CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Certificate serial:       07927743
Authority key identifier: 27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/xVlnw5LXNnO1t2KVU9YNRngGO0g.roa
Signing time:             Sat 01 Jan 2022 06:59:52 +0000
ROA not before:           Sat 01 Jan 2022 06:59:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     394923
IP address blocks:        31.210.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127039299 (0x7927743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
        Validity
            Not Before: Jan  1 06:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c55967c392d73673b5b7629553d60d4678063b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:ff:19:4f:e9:89:ab:b2:79:6f:52:89:13:
                    d1:b7:cf:7b:9d:97:e5:9c:e6:23:1b:e2:90:13:81:
                    69:5a:76:96:22:86:39:ec:cf:a0:e4:34:ba:a7:57:
                    b1:b6:4f:6b:e0:40:26:14:84:9a:df:75:76:69:9d:
                    d8:1b:f4:7b:86:95:36:86:e5:03:fc:f0:37:cc:44:
                    e5:3a:87:cd:e2:3c:7c:fe:d6:da:c8:a9:35:df:e5:
                    2c:c2:8a:ed:d8:08:1d:2d:5d:67:70:66:ca:80:d3:
                    32:26:24:99:5c:47:80:ea:00:35:a8:de:c2:3a:63:
                    37:9e:3c:00:5f:61:a0:2b:09:db:35:18:e5:65:41:
                    eb:e6:43:53:53:54:9f:91:45:8f:2d:51:98:00:f6:
                    4a:48:63:1c:78:8d:1b:e6:21:f8:51:8d:a6:52:c1:
                    1d:62:cb:f6:3e:d2:f4:dd:e7:ac:a4:93:41:5e:a1:
                    6d:db:02:5b:bd:ad:f0:1e:36:e8:a7:22:a6:da:7e:
                    a9:c4:bc:31:3f:94:6d:1a:4a:bf:eb:6b:46:6b:75:
                    65:20:e7:7a:5f:38:7d:36:ec:e9:70:13:68:02:38:
                    c4:bc:53:38:ab:13:31:4d:a2:a0:87:79:d7:9c:b2:
                    82:b1:e5:45:87:44:42:90:82:1e:f1:ed:a9:8d:82:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:59:67:C3:92:D7:36:73:B5:B7:62:95:53:D6:0D:46:78:06:3B:48
            X509v3 Authority Key Identifier:
                keyid:27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/xVlnw5LXNnO1t2KVU9YNRngGO0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:ad:5c:5c:40:f5:e5:73:1d:3d:7f:18:0e:46:5c:ef:4b:bf:
         38:11:b3:62:f1:d9:8f:09:e0:6f:b8:7e:5c:49:f0:1f:95:0d:
         47:06:c3:d1:48:61:15:21:12:c9:3a:99:a3:c9:d8:23:28:66:
         52:e5:4a:f0:95:5a:c2:e1:a2:cf:96:8b:83:26:19:d8:8f:ef:
         20:b7:81:2a:13:ab:fe:1b:8f:6c:18:2a:3c:5c:3c:6b:fd:47:
         01:f9:c6:03:0b:fb:bf:bb:be:9d:6a:e1:f7:f1:79:a9:6e:06:
         6f:49:79:90:f7:8c:8d:fe:75:7d:6f:5b:dd:48:30:d2:53:f4:
         42:4b:a8:71:01:87:35:41:1a:44:4b:0a:24:fc:1a:f1:a8:5c:
         b5:74:95:c5:9b:d5:08:81:d0:e9:35:5c:b6:da:cf:d3:48:79:
         cb:b0:b7:8e:c7:0c:ad:29:f3:6f:5a:bb:cc:bc:21:9d:a0:76:
         20:31:54:5b:5e:f1:a1:97:0d:2d:29:31:93:63:9f:59:60:aa:
         bd:c8:ec:c6:b0:df:82:0b:40:aa:51:67:81:34:5d:e0:d7:4c:
         eb:7b:db:5a:12:13:bd:86:cf:c1:bd:eb:1a:5f:aa:dd:2a:4c:
         6f:7d:dc:83:ce:d6:fb:26:06:de:34:a9:d4:d0:e4:08:89:9c:
         be:e1:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----