Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa
File:                     hg9bz1D74PMGFJVVcJ-xSorVrTU.roa (raw, json)
Hash identifier:          uAESxLGARvfAkwjbjCbnOUMAeSbeYgloXryW16d83GE=
Subject key identifier:   86:0F:5B:CF:50:FB:E0:F3:06:14:95:55:70:9F:B1:4A:8A:D5:AD:35
Certificate issuer:       /CN=0d5c1d712d05562491a4a278a84b9cda35539432
Certificate serial:       01856F9DE839E36E7DD3C205A8702ED19566
Authority key identifier: 0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa
Signing time:             Sun 01 Jan 2023 23:14:57 +0000
ROA not before:           Sun 01 Jan 2023 23:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49037
IP address blocks:        178.212.139.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:e8:39:e3:6e:7d:d3:c2:05:a8:70:2e:d1:95:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5c1d712d05562491a4a278a84b9cda35539432
        Validity
            Not Before: Jan  1 23:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=860f5bcf50fbe0f306149555709fb14a8ad5ad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:88:68:cd:e6:0e:ee:3d:95:08:d9:27:c9:
                    12:1f:5b:dc:4c:5c:08:a2:61:8e:da:76:cc:c7:5a:
                    4a:74:e6:29:77:22:c1:21:1c:26:0d:e5:c1:c2:50:
                    e8:e1:72:7b:3a:fe:bf:a1:21:72:a9:45:c3:28:a4:
                    2a:9b:95:69:f9:44:44:b4:f7:50:27:6a:d4:1d:6d:
                    f2:f4:da:fd:44:92:0c:c2:a3:a7:49:c3:5c:0e:27:
                    65:af:b2:db:bd:54:a0:50:79:c6:4b:29:ee:7e:38:
                    c1:da:12:a5:5e:58:75:a8:b4:85:5a:15:0b:69:e8:
                    3c:38:3d:0f:43:05:82:72:9c:4c:86:dc:e2:00:9c:
                    61:6a:b7:a6:2f:ba:ff:1a:e0:5f:93:72:53:43:e6:
                    96:cc:1f:e8:be:11:16:91:89:b7:b8:15:8f:ba:c4:
                    9b:93:3b:b9:11:80:91:cb:40:4e:8e:a3:59:6c:ac:
                    56:d7:65:5d:9d:a5:51:7a:e9:a7:11:f7:c5:d5:af:
                    6e:ee:d9:28:c8:52:ca:68:b6:95:f6:ed:69:bb:ca:
                    6e:57:b2:dd:ac:be:12:e1:46:bd:e0:6b:5a:bc:3a:
                    58:83:e1:db:7c:f4:21:e1:5c:08:6b:1d:e7:74:0c:
                    8b:a8:dd:d1:f9:63:32:6d:8c:cf:7a:e1:cd:3c:ee:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:5B:CF:50:FB:E0:F3:06:14:95:55:70:9F:B1:4A:8A:D5:AD:35
            X509v3 Authority Key Identifier:
                keyid:0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d2:d4:f5:15:6a:4f:bf:87:b4:8b:9e:24:15:12:1d:3b:04:
         be:28:af:28:37:41:f6:f7:70:e0:b3:59:d6:19:a3:21:b5:01:
         3f:2a:6d:17:28:f7:3b:58:54:b3:62:0d:88:02:f7:58:6f:84:
         2a:5c:30:01:39:e8:9b:5e:d4:c3:68:a4:e9:8d:e7:68:b8:58:
         3a:d6:3e:49:1c:fa:ac:ea:cf:c6:77:bc:5e:0f:28:2f:2e:76:
         fb:62:5e:58:fa:02:0b:1e:fb:37:94:ac:3f:df:ca:40:b4:ec:
         65:90:4a:c8:00:21:0d:c1:fe:8d:4a:b1:31:83:35:b1:f5:5d:
         d2:e0:df:22:02:e4:c3:60:7f:5c:01:49:19:c9:79:56:d0:8f:
         a8:99:0c:28:6b:3a:ef:80:dd:ec:0c:07:e2:52:96:f8:c3:7c:
         00:32:b5:9a:b9:56:b4:48:df:ed:99:d7:f2:cb:a6:7c:55:66:
         1c:72:fc:da:85:4a:a5:cb:1f:e0:dc:0e:7a:b8:5b:e7:1b:0c:
         cb:5f:a4:45:2b:fb:bf:00:f7:dd:b7:3d:e5:ae:63:c2:f9:d4:
         62:bd:75:93:7d:6a:47:21:5d:26:f8:c6:c1:fd:6e:b4:ac:0f:
         39:d3:02:ab:21:bc:ba:f2:9c:22:cf:8f:fc:77:32:ba:69:0b:
         3b:a1:64:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvneg5425908IFqHAu0ZVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNWMxZDcxMmQwNTU2MjQ5MWE0YTI3OGE4NGI5Y2RhMzU1
Mzk0MzIwHhcNMjMwMTAxMjMxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjBmNWJjZjUwZmJlMGYzMDYxNDk1NTU3MDlmYjE0YThhZDVhZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGOIaM3mDu49lQjZJ8kSH1vcTFwI
omGO2nbMx1pKdOYpdyLBIRwmDeXBwlDo4XJ7Ov6/oSFyqUXDKKQqm5Vp+UREtPdQ
J2rUHW3y9Nr9RJIMwqOnScNcDidlr7LbvVSgUHnGSynufjjB2hKlXlh1qLSFWhUL
aeg8OD0PQwWCcpxMhtziAJxharemL7r/GuBfk3JTQ+aWzB/ovhEWkYm3uBWPusSb
kzu5EYCRy0BOjqNZbKxW12VdnaVReumnEffF1a9u7tkoyFLKaLaV9u1pu8puV7Ld
rL4S4Ua94GtavDpYg+HbfPQh4VwIax3ndAyLqN3R+WMybYzPeuHNPO7euwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIYPW89Q++DzBhSVVXCfsUqK1a01MB8GA1UdIwQY
MBaAFA1cHXEtBVYkkaSieKhLnNo1U5QyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFZ3ZGNTMEZWaVNScEtKNHFFdWMyalZUbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNjc1NmEtMTZiMS00N2NmLWJiMTYt
ODM2MDFlZDgzNmJmLzEvaGc5YnoxRDc0UE1HRkpWVmNKLXhTb3JWclRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNjc1NmEtMTZiMS00N2NmLWJiMTYtODM2MDFlZDgzNmJm
LzEvRFZ3ZGNTMEZWaVNScEtKNHFFdWMyalZUbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstSLMA0G
CSqGSIb3DQEBCwUAA4IBAQCV0tT1FWpPv4e0i54kFRIdOwS+KK8oN0H293Dgs1nW
GaMhtQE/Km0XKPc7WFSzYg2IAvdYb4QqXDABOeibXtTDaKTpjedouFg61j5JHPqs
6s/Gd7xeDygvLnb7Yl5Y+gILHvs3lKw/38pAtOxlkErIACENwf6NSrExgzWx9V3S
4N8iAuTDYH9cAUkZyXlW0I+omQwoazrvgN3sDAfiUpb4w3wAMrWauVa0SN/tmdfy
y6Z8VWYccvzahUqlyx/g3A56uFvnGwzLX6RFK/u/APfdtz3lrmPC+dRivXWTfWpH
IV0m+MbB/W60rA850wKrIby68pwiz4/8dzK6aQs7oWTD
-----END CERTIFICATE-----