Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/DydUuP22lhsj5IJOZI91l-mKows.roa
File:                     DydUuP22lhsj5IJOZI91l-mKows.roa (raw, json)
Hash identifier:          84vtpeJOzuUxcasG7grPw8/tW3yZ1AEP1CkrVzM+Hjs=
Subject key identifier:   0F:27:54:B8:FD:B6:96:1B:23:E4:82:4E:64:8F:75:97:E9:8A:A3:0B
Certificate issuer:       /CN=9da74336aeecfe7c46963163a7476229ce8a830d
Certificate serial:       07A0D5
Authority key identifier: 9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/DydUuP22lhsj5IJOZI91l-mKows.roa
Signing time:             Tue 15 Mar 2022 14:21:30 +0000
ROA not before:           Tue 15 Mar 2022 14:21:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2586
IP address blocks:        91.213.43.0/24 maxlen: 24
                          2001:67c:32c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499925 (0x7a0d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da74336aeecfe7c46963163a7476229ce8a830d
        Validity
            Not Before: Mar 15 14:21:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f2754b8fdb6961b23e4824e648f7597e98aa30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:93:63:d3:f6:a6:05:10:20:cf:be:78:68:
                    8d:a7:4b:1d:f2:e3:1f:a6:25:03:84:d8:37:0c:0d:
                    43:8f:2e:ee:63:9a:d5:4a:30:c4:85:5d:2a:f0:bc:
                    3f:50:21:db:55:8e:b7:bf:fa:d3:20:27:f6:a5:9f:
                    6b:3e:23:b3:e8:37:c8:17:45:af:dc:a0:17:9d:ca:
                    db:93:8e:0e:29:97:ed:bb:1e:1c:93:35:cf:ea:4f:
                    cd:db:3f:28:88:f1:2c:0b:63:b0:ad:09:83:d1:f0:
                    5c:62:c8:6a:93:72:ae:6f:c0:34:45:3e:8e:3a:9e:
                    9d:8c:a2:c9:b8:5f:bf:94:1d:c9:f4:0a:ab:c1:c5:
                    ab:ec:4b:46:3a:78:63:e1:26:e2:1a:c6:00:df:34:
                    b2:a2:94:e5:cd:11:ab:ad:95:96:e9:da:12:32:54:
                    b2:b4:96:64:04:1b:d5:09:b0:06:bf:a0:a6:dd:cf:
                    97:62:80:f4:5d:d8:a6:42:53:98:4a:e0:20:d2:7a:
                    50:08:41:79:69:83:29:c7:bf:1b:71:21:06:d1:07:
                    68:4f:12:e8:65:5e:38:4e:51:29:ce:90:88:9f:83:
                    64:78:62:23:fb:b7:8f:aa:28:fa:e0:f6:fc:d7:3a:
                    7d:42:a5:c4:66:3c:64:e2:9f:6b:19:a1:55:9d:b0:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:27:54:B8:FD:B6:96:1B:23:E4:82:4E:64:8F:75:97:E9:8A:A3:0B
            X509v3 Authority Key Identifier:
                keyid:9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/DydUuP22lhsj5IJOZI91l-mKows.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.43.0/24
                IPv6:
                  2001:67c:32c::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:37:3a:90:2a:95:73:f9:23:39:ce:01:22:6a:ba:ce:07:f2:
         49:9e:01:f4:c5:7f:8d:ea:dc:76:39:91:85:56:60:e4:5a:6a:
         bb:56:48:54:23:27:95:df:63:ee:8a:30:fc:a2:68:97:ee:5e:
         20:ab:af:e6:21:e5:6f:42:18:38:e2:fc:7a:8a:ad:1d:9c:44:
         f6:f1:d6:c1:fa:ec:3c:1a:d7:91:98:f4:c1:c4:5b:d1:9f:b8:
         9f:bd:4a:7e:3b:f4:c0:00:3a:80:eb:49:27:df:c0:3c:c8:fd:
         09:88:93:3b:f7:01:6a:7d:e0:45:e8:1b:65:67:78:1b:db:72:
         36:74:3a:38:e5:00:6e:49:a5:61:64:ce:d3:13:f0:81:7d:d6:
         a7:f4:e9:4c:ef:55:f0:24:4e:ac:01:95:e0:7c:66:b6:00:36:
         c6:d5:ee:5d:49:db:24:e1:d5:37:9f:60:6f:9f:b9:1d:f7:3d:
         f6:53:55:39:95:b0:08:0d:41:01:c7:55:3b:a7:f8:eb:aa:23:
         cf:3b:3e:69:6b:79:ff:83:56:bb:4c:58:e7:3d:f7:7b:bb:67:
         af:86:ab:4c:de:77:3b:b7:55:43:12:03:e1:f3:5d:7a:3b:d2:
         a4:c1:16:fe:4d:e5:f7:eb:be:69:00:5a:9e:2c:3e:23:76:99:
         9a:71:6b:1d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDB6DVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
YTc0MzM2YWVlY2ZlN2M0Njk2MzE2M2E3NDc2MjI5Y2U4YTgzMGQwHhcNMjIwMzE1
MTQyMTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwZjI3NTRiOGZkYjY5
NjFiMjNlNDgyNGU2NDhmNzU5N2U5OGFhMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo6+TY9P2pgUQIM++eGiNp0sd8uMfpiUDhNg3DA1Djy7uY5rV
SjDEhV0q8Lw/UCHbVY63v/rTICf2pZ9rPiOz6DfIF0Wv3KAXncrbk44OKZftux4c
kzXP6k/N2z8oiPEsC2OwrQmD0fBcYshqk3Kub8A0RT6OOp6djKLJuF+/lB3J9Aqr
wcWr7EtGOnhj4SbiGsYA3zSyopTlzRGrrZWW6doSMlSytJZkBBvVCbAGv6Cm3c+X
YoD0XdimQlOYSuAg0npQCEF5aYMpx78bcSEG0QdoTxLoZV44TlEpzpCIn4NkeGIj
+7ePqij64Pb81zp9QqXEZjxk4p9rGaFVnbA+awIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFA8nVLj9tpYbI+SCTmSPdZfpiqMLMB8GA1UdIwQYMBaAFJ2nQzau7P58RpYx
Y6dHYinOioMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bmFkRE5xN3NfbnhHbGpGanAwZGlLYzZLZ3cwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Ny81ODFmMjgtNTliNy00NzU4LWFiNDAtODhiOTIwMjllOTE0LzEv
RHlkVXVQMjJsaHNqNUlKT1pJOTFsLW1Lb3dzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81
ODFmMjgtNTliNy00NzU4LWFiNDAtODhiOTIwMjllOTE0LzEvbmFkRE5xN3NfbnhH
bGpGanAwZGlLYzZLZ3cwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UrMA8EAgACMAkDBwAgAQZ8Ayww
DQYJKoZIhvcNAQELBQADggEBABM3OpAqlXP5IznOASJqus4H8kmeAfTFf43q3HY5
kYVWYORaartWSFQjJ5XfY+6KMPyiaJfuXiCrr+Yh5W9CGDji/HqKrR2cRPbx1sH6
7Dwa15GY9MHEW9GfuJ+9Sn479MAAOoDrSSffwDzI/QmIkzv3AWp94EXoG2VneBvb
cjZ0OjjlAG5JpWFkztMT8IF91qf06UzvVfAkTqwBleB8ZrYANsbV7l1J2yTh1Tef
YG+fuR33PfZTVTmVsAgNQQHHVTun+OuqI887Pmlref+DVrtMWOc993u7Z6+Gq0ze
dzu3VUMSA+HzXXo70qTBFv5N5ffrvmkAWp4sPiN2mZpxax0=
-----END CERTIFICATE-----