Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa
File:                     zNKzyUtBSKWgxxiSh9MTJn74DeY.roa (raw, json)
Hash identifier:          /UJUAUav0pFlCCK/yUCSBnJv03vETAaUv1250vbKXUM=
Subject key identifier:   CC:D2:B3:C9:4B:41:48:A5:A0:C7:18:92:87:D3:13:26:7E:F8:0D:E6
Certificate issuer:       /CN=1ab4988a0181decbdce10adfef34527b3addc478
Certificate serial:       02B41B4D
Authority key identifier: 1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrSYigGB3svc4Qrf7zRSezrdxHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa
Signing time:             Sat 01 Jan 2022 07:56:20 +0000
ROA not before:           Sat 01 Jan 2022 07:56:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51223
IP address blocks:        212.119.50.0/23 maxlen: 23
                          212.119.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45357901 (0x2b41b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab4988a0181decbdce10adfef34527b3addc478
        Validity
            Not Before: Jan  1 07:56:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ccd2b3c94b4148a5a0c7189287d313267ef80de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:8f:62:c1:bb:b6:09:0b:b8:c9:cc:2a:b4:
                    87:b2:9f:da:cb:d0:58:d9:c1:f3:4e:86:9e:16:67:
                    2d:1d:e2:0b:f0:95:27:15:87:d7:f6:ca:2b:3d:16:
                    6a:46:60:3c:a5:06:62:76:d2:c1:f6:79:c8:d6:51:
                    87:8a:11:a6:c3:c8:a9:a9:79:c3:d0:2b:1a:f2:75:
                    8c:a4:a8:e3:dd:a1:b8:02:93:5d:15:b0:e2:16:11:
                    5d:72:c8:6d:b4:3d:1a:75:bd:b0:6e:eb:58:d1:89:
                    89:bf:ab:66:91:52:63:5c:73:5c:f8:ab:a1:b6:41:
                    36:d2:47:00:a3:3c:0e:dc:bc:26:ec:59:35:43:95:
                    8e:7f:63:42:97:b8:20:d0:4a:5f:6e:a6:1b:ee:68:
                    ce:c5:81:5d:f3:33:cf:4a:78:a6:a1:34:fb:50:04:
                    31:c1:2d:27:73:79:20:05:28:f5:05:f1:d9:aa:3a:
                    28:7c:6f:59:11:0f:d6:ef:10:f0:33:f5:f6:16:b7:
                    30:8f:29:99:67:85:13:7e:e8:0f:5f:4f:95:53:a0:
                    c4:4c:6d:43:5e:b0:a3:aa:89:d6:0c:33:a8:b8:ae:
                    69:2c:60:6c:f6:36:97:d0:39:ea:b9:33:6b:75:3f:
                    be:06:36:22:00:5f:38:b3:3c:f0:ff:62:b5:05:fb:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D2:B3:C9:4B:41:48:A5:A0:C7:18:92:87:D3:13:26:7E:F8:0D:E6
            X509v3 Authority Key Identifier:
                keyid:1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrSYigGB3svc4Qrf7zRSezrdxHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/GrSYigGB3svc4Qrf7zRSezrdxHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.119.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:a1:8f:c2:fb:1c:68:35:be:11:de:d8:1e:06:51:0a:3f:
         f7:ab:2c:3c:06:4a:c4:ad:40:cb:46:fe:6f:9f:6a:30:75:bd:
         66:f9:76:da:73:3b:9e:3d:7a:1f:4f:52:e9:95:dc:44:af:37:
         ac:41:65:6e:3a:f6:4a:5e:d1:12:8a:73:9b:a7:c1:62:ae:a4:
         6f:8d:81:25:f5:0e:84:5c:52:84:7a:8b:21:6a:49:d3:79:f3:
         4f:e3:50:8a:bc:f1:f9:de:5b:07:36:9c:c0:cc:47:99:22:fd:
         0a:c8:df:e8:65:9f:65:bb:f5:c4:b8:cd:8a:ab:8d:9e:67:76:
         55:8c:5e:48:57:4a:a7:74:1a:f2:e1:2f:c4:17:bf:dc:ec:33:
         68:45:11:0c:17:31:1f:41:7b:c2:04:20:6c:9a:b3:e6:8f:8a:
         4d:29:53:2c:17:93:1d:48:1a:54:3f:5d:b7:14:76:e2:5b:07:
         22:57:69:b4:ea:51:3f:68:a5:eb:be:7a:ba:fa:e4:0a:38:77:
         e9:23:46:ec:2f:41:d9:f3:46:0a:cb:7b:73:85:b1:76:28:87:
         37:ad:b3:e2:52:30:e0:66:d2:a6:45:98:15:1a:a3:c2:7f:da:
         6c:06:18:6a:ba:ef:dc:79:5a:e8:43:7f:19:e4:7b:d2:0e:b8:
         59:25:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----