Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/WEzuiXh00RDF4q9_Ji8p5SfyRdw.roa
File:                     WEzuiXh00RDF4q9_Ji8p5SfyRdw.roa (raw, json)
Hash identifier:          0rdbEHchLjL8EAySeXIWD/wYYTmYOhzqpJFo60kn5X0=
Subject key identifier:   58:4C:EE:89:78:74:D1:10:C5:E2:AF:7F:26:2F:29:E5:27:F2:45:DC
Certificate issuer:       /CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Certificate serial:       0186A6E8355C0729312AC98FAC6E60625AFD
Authority key identifier: F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/WEzuiXh00RDF4q9_Ji8p5SfyRdw.roa
Signing time:             Fri 03 Mar 2023 09:58:00 +0000
ROA not before:           Fri 03 Mar 2023 09:58:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202421
IP address blocks:        185.85.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a6:e8:35:5c:07:29:31:2a:c9:8f:ac:6e:60:62:5a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
        Validity
            Not Before: Mar  3 09:58:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=584cee897874d110c5e2af7f262f29e527f245dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:47:c8:2b:f5:df:d3:00:d5:2a:6a:7a:cb:
                    c7:76:f1:2b:6a:9c:23:1b:6a:4e:31:48:64:c9:cd:
                    fe:29:15:35:32:c4:f5:6e:d5:2a:cc:c9:5a:15:a0:
                    5c:95:ee:65:db:38:de:23:51:1f:8b:3b:fc:3d:ca:
                    55:3b:4d:20:ae:79:25:3e:5a:4b:54:ce:db:c9:72:
                    d4:75:e5:3f:2d:1f:74:c0:cb:64:7d:eb:54:ea:ec:
                    5c:20:46:0b:b3:f1:1e:de:27:aa:c0:a5:56:8a:5a:
                    82:dc:a5:c5:fa:db:8b:b8:28:75:4b:b9:12:44:e9:
                    95:6d:b7:c7:1a:a4:bd:f7:09:e3:1a:bd:88:fa:82:
                    6d:b5:0a:24:6d:5e:e3:5b:19:ee:c3:5a:ca:49:d7:
                    a8:69:17:76:92:64:43:e0:7b:a0:d3:00:10:68:33:
                    a1:5c:3c:f2:78:68:2c:67:61:58:a7:f0:7e:05:36:
                    c7:ae:3c:0d:5e:d3:86:b8:17:35:42:81:2e:f5:81:
                    aa:70:07:91:16:2d:1e:4c:c0:59:87:8b:76:53:ce:
                    7e:2b:f1:5d:8f:41:72:39:90:b4:23:41:04:ad:fd:
                    e0:73:92:cf:8d:12:88:4f:53:41:81:2f:e3:22:27:
                    47:fd:41:ac:42:56:91:cd:71:f3:e4:d7:78:f5:40:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:EE:89:78:74:D1:10:C5:E2:AF:7F:26:2F:29:E5:27:F2:45:DC
            X509v3 Authority Key Identifier:
                keyid:F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/WEzuiXh00RDF4q9_Ji8p5SfyRdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8a2RT4topW719o55n1bdza7uC8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:ec:15:27:8c:47:ef:69:7c:09:9f:e0:ce:ed:45:a8:d1:
         bd:77:f8:6c:25:98:d6:4b:eb:0e:6c:25:ac:04:88:f5:5e:3a:
         66:11:40:2f:d3:58:7f:9b:4b:1e:09:dd:3a:f4:d8:0c:9b:06:
         bf:49:f9:9f:1b:81:72:61:08:cf:5e:f3:59:f4:7b:ca:3e:b3:
         9c:10:d2:7c:b9:e8:4d:b9:41:4d:77:3b:99:de:8a:1d:53:eb:
         8f:6f:20:b3:9d:65:ca:99:23:27:97:81:36:6c:e8:12:34:82:
         f9:1d:6d:c3:4a:79:17:36:b1:16:a2:b3:92:04:28:46:a4:c3:
         5c:e9:a8:35:cb:5b:82:82:6c:86:ed:a2:5d:0c:3f:d1:8a:e0:
         c8:ad:f6:99:52:b3:a9:a2:78:de:bc:a6:ad:75:ab:92:78:cd:
         a1:7c:42:4a:c1:b2:12:b1:b2:7a:b4:c4:97:65:1e:be:4f:47:
         91:a0:76:2a:0d:52:75:2d:2c:0a:a7:79:9b:4f:d4:2e:e7:15:
         46:2b:db:8e:fd:ba:99:50:e4:af:97:7a:15:36:ab:99:a8:4e:
         d1:68:bd:17:f7:d5:bc:81:50:d6:67:20:ea:fb:33:14:f8:b6:
         25:85:6d:ba:4a:08:9b:78:69:fe:4f:68:4b:40:02:a5:e4:ec:
         d1:1b:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----