Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/OCYLPAbluJf-7arY2Xi9s55hL8E.roa
File:                     OCYLPAbluJf-7arY2Xi9s55hL8E.roa (raw, json)
Hash identifier:          WENr3CGxOYA67eK1wj9m4DnuNu/pf6g5rlNKrD9J5d0=
Subject key identifier:   38:26:0B:3C:06:E5:B8:97:FE:ED:AA:D8:D9:78:BD:B3:9E:61:2F:C1
Certificate issuer:       /CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
Certificate serial:       02C5D333
Authority key identifier: 9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/OCYLPAbluJf-7arY2Xi9s55hL8E.roa
Signing time:             Sat 01 Jan 2022 05:53:54 +0000
ROA not before:           Sat 01 Jan 2022 05:53:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8823
IP address blocks:        94.154.2.0/24 maxlen: 24
                          2a07:2680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46519091 (0x2c5d333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
        Validity
            Not Before: Jan  1 05:53:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38260b3c06e5b897feedaad8d978bdb39e612fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:32:c7:73:05:01:07:83:23:68:f5:26:46:0b:
                    fb:10:73:fe:ff:33:16:9b:81:4e:2b:66:59:47:e4:
                    56:7e:a0:03:de:dc:db:7b:76:b8:c9:f2:96:d2:c4:
                    05:ba:c0:44:9a:2d:f0:88:92:68:bc:b1:7c:df:cb:
                    60:68:c4:ae:d2:e1:c0:7d:7e:db:1a:d2:8c:83:5e:
                    8e:07:6f:81:4b:cb:73:38:71:e8:ea:86:39:ce:34:
                    15:0a:bc:6d:80:a6:fc:ff:b5:7f:1a:0d:95:16:6b:
                    d9:ad:6a:6b:c1:42:99:98:9e:d4:ad:a0:cb:5b:d8:
                    50:a7:46:7d:5e:23:2b:d1:dc:6c:18:44:26:fe:76:
                    50:61:25:2c:39:db:2a:65:c2:98:93:73:0f:b3:af:
                    b4:76:a2:ea:03:05:7f:a5:1b:36:84:ed:8c:0b:61:
                    79:7e:8c:95:28:1a:67:5c:2a:94:6e:25:d6:60:6d:
                    06:a2:e5:42:16:ff:20:e1:15:49:07:2b:a8:f9:48:
                    65:c4:83:f7:ee:79:78:a7:8c:7c:f8:bb:e0:7f:55:
                    de:e6:fb:12:10:9b:76:5f:d0:4e:af:9e:26:96:bc:
                    6f:ea:53:fe:72:60:6d:b2:b8:a9:34:11:55:52:2f:
                    77:4b:f7:b7:48:82:41:29:85:2b:40:77:4c:b2:f2:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:0B:3C:06:E5:B8:97:FE:ED:AA:D8:D9:78:BD:B3:9E:61:2F:C1
            X509v3 Authority Key Identifier:
                keyid:9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/OCYLPAbluJf-7arY2Xi9s55hL8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.2.0/24
                IPv6:
                  2a07:2680::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:95:9d:53:d1:87:a6:13:4b:9c:c5:6c:0a:4b:28:35:f0:
         21:ce:42:5e:7b:88:0d:3c:f5:b2:47:12:59:c0:88:ba:fd:8e:
         68:27:ce:de:16:89:33:8d:01:e3:81:65:fb:eb:62:b8:84:2c:
         d6:da:b1:c4:cb:b0:10:ed:39:be:ed:10:48:13:f3:83:a0:ec:
         81:50:a6:63:fe:53:3a:e1:9f:52:14:da:81:77:f7:c8:66:37:
         a1:26:13:4d:69:24:21:1f:31:79:41:34:e3:7f:f0:9f:f5:0f:
         ba:87:2d:a1:c3:ed:e2:c5:b2:74:ca:88:ef:fb:09:47:f1:2c:
         41:c4:ec:fe:2d:f8:ef:6f:42:e6:d5:b8:f8:09:91:05:f1:52:
         0c:88:36:f5:3a:90:4a:03:90:56:f8:fe:a9:7c:8c:9b:f1:f6:
         8e:2f:6f:f0:42:69:fd:72:f3:21:9e:37:f1:68:72:84:e4:7c:
         5c:5d:2a:f1:d9:e1:cd:cb:2f:1f:28:e7:62:ff:82:3b:c8:44:
         71:12:e4:ae:41:e7:15:85:b9:9a:b0:80:25:e4:41:ab:35:ae:
         0e:9a:8f:98:53:7f:ea:d0:d5:5b:25:47:89:2d:76:95:84:c6:
         97:d8:38:e2:74:49:7b:05:a2:3b:7d:ab:ac:ee:ac:97:6e:15:
         1e:4c:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----