Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/Ey7HYrLkcbifppd3HzKFTBA-khk.roa
File:                     Ey7HYrLkcbifppd3HzKFTBA-khk.roa (raw, json)
Hash identifier:          3us0UWvAQdTLVDrWyyPiCYaVpu2QIRb++u41TebUbtw=
Subject key identifier:   13:2E:C7:62:B2:E4:71:B8:9F:A6:97:77:1F:32:85:4C:10:3E:92:19
Certificate issuer:       /CN=9da74336aeecfe7c46963163a7476229ce8a830d
Certificate serial:       06D426
Authority key identifier: 9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/Ey7HYrLkcbifppd3HzKFTBA-khk.roa
Signing time:             Tue 15 Mar 2022 14:20:40 +0000
ROA not before:           Tue 15 Mar 2022 14:20:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35407
IP address blocks:        91.213.43.0/24 maxlen: 24
                          2001:67c:32c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447526 (0x6d426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da74336aeecfe7c46963163a7476229ce8a830d
        Validity
            Not Before: Mar 15 14:20:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=132ec762b2e471b89fa697771f32854c103e9219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:dd:6c:82:7b:d2:e7:9e:65:01:1d:5d:98:
                    24:86:e5:4b:05:a0:6d:1c:0b:bb:5c:75:cd:01:41:
                    85:d9:2d:0c:7e:03:c9:15:9a:0f:b8:24:46:fa:56:
                    f5:45:73:75:77:89:4b:46:99:e7:74:9e:83:69:15:
                    da:2e:25:88:fe:2d:47:e9:65:63:45:cb:b0:6e:f9:
                    a2:e4:26:b6:f9:11:e7:94:e5:f8:35:d4:2a:f2:0d:
                    97:82:82:36:ab:cd:7b:ee:f2:84:db:06:c3:ca:d6:
                    dd:2f:ae:c6:b6:f1:23:d4:65:d5:d6:4f:72:03:01:
                    df:92:c0:8c:54:5b:d2:66:ca:30:2b:cc:75:69:e5:
                    5d:cc:61:64:1d:2c:89:19:e4:cf:c5:16:95:10:1a:
                    d7:d8:08:bb:b3:8e:db:61:c6:8f:96:3c:01:0c:da:
                    ad:48:00:2b:f7:73:9b:7c:0d:5a:3a:0c:1a:85:d9:
                    3c:8e:5b:7c:9f:5d:d7:ca:ba:8e:48:20:f9:b3:4b:
                    61:21:f8:e4:d7:9a:85:4e:2f:8d:dc:ee:53:ea:99:
                    72:a9:09:e1:b4:6e:5d:28:63:c6:f5:4d:b7:23:e7:
                    18:c9:a3:26:19:85:6d:72:74:a3:4e:35:2d:b5:f3:
                    66:7e:0f:84:dd:d2:ef:91:ec:a8:7a:2b:35:c2:fb:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2E:C7:62:B2:E4:71:B8:9F:A6:97:77:1F:32:85:4C:10:3E:92:19
            X509v3 Authority Key Identifier:
                keyid:9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/Ey7HYrLkcbifppd3HzKFTBA-khk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.43.0/24
                IPv6:
                  2001:67c:32c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:de:fa:34:4e:82:77:23:85:11:42:f3:f4:a4:3e:b6:83:
         4b:21:ae:85:d4:f3:02:b5:be:81:f1:0d:8e:10:7d:0e:c9:f8:
         e8:0f:0b:dd:5f:9f:02:dd:9a:5a:ff:57:87:38:85:0c:4e:ef:
         61:21:01:16:4b:66:5d:6e:17:d7:d4:dd:e8:e7:8d:0f:b6:00:
         5b:b4:5d:8b:82:e7:94:ce:bf:7c:28:6c:54:53:f9:8d:9e:f4:
         cd:13:88:ae:61:8b:6a:37:f8:09:bd:d3:31:fa:8c:fb:07:45:
         80:fa:cb:aa:b0:cb:03:2c:43:95:c4:50:ef:0a:00:30:1b:d0:
         e6:e5:bb:a7:fb:76:9e:ea:e4:da:2c:d1:3b:0e:b8:2e:bd:77:
         1f:aa:e1:61:66:e4:bc:99:08:76:b8:e9:b2:13:8f:da:40:98:
         7b:16:e7:a9:e9:a4:84:9d:4d:c5:d4:46:36:06:e3:17:81:44:
         72:8e:8f:1f:d3:fc:c5:16:4a:08:6f:5b:3a:de:0a:7a:0a:a3:
         53:dc:3c:fd:3e:31:e0:ff:74:f9:ff:91:d2:26:4b:44:50:b2:
         10:31:c8:cd:94:bd:40:a1:75:82:0f:0b:bf:fb:70:41:80:4d:
         59:c6:dc:12:88:e1:f5:ad:99:a8:f2:69:95:8c:39:02:34:cb:
         08:6c:73:08
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDBtQmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
YTc0MzM2YWVlY2ZlN2M0Njk2MzE2M2E3NDc2MjI5Y2U4YTgzMGQwHhcNMjIwMzE1
MTQyMDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMzJlYzc2MmIyZTQ3
MWI4OWZhNjk3NzcxZjMyODU0YzEwM2U5MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4qzdbIJ70ueeZQEdXZgkhuVLBaBtHAu7XHXNAUGF2S0MfgPJ
FZoPuCRG+lb1RXN1d4lLRpnndJ6DaRXaLiWI/i1H6WVjRcuwbvmi5Ca2+RHnlOX4
NdQq8g2XgoI2q8177vKE2wbDytbdL67GtvEj1GXV1k9yAwHfksCMVFvSZsowK8x1
aeVdzGFkHSyJGeTPxRaVEBrX2Ai7s47bYcaPljwBDNqtSAAr93ObfA1aOgwahdk8
jlt8n13XyrqOSCD5s0thIfjk15qFTi+N3O5T6plyqQnhtG5dKGPG9U23I+cYyaMm
GYVtcnSjTjUttfNmfg+E3dLvkeyoeis1wvsj1QIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFBMux2Ky5HG4n6aXdx8yhUwQPpIZMB8GA1UdIwQYMBaAFJ2nQzau7P58RpYx
Y6dHYinOioMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bmFkRE5xN3NfbnhHbGpGanAwZGlLYzZLZ3cwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Ny81ODFmMjgtNTliNy00NzU4LWFiNDAtODhiOTIwMjllOTE0LzEv
RXk3SFlyTGtjYmlmcHBkM0h6S0ZUQkEta2hrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81
ODFmMjgtNTliNy00NzU4LWFiNDAtODhiOTIwMjllOTE0LzEvbmFkRE5xN3NfbnhH
bGpGanAwZGlLYzZLZ3cwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UrMA8EAgACMAkDBwAgAQZ8Ayww
DQYJKoZIhvcNAQELBQADggEBAE9+3vo0ToJ3I4URQvP0pD62g0shroXU8wK1voHx
DY4QfQ7J+OgPC91fnwLdmlr/V4c4hQxO72EhARZLZl1uF9fU3ejnjQ+2AFu0XYuC
55TOv3wobFRT+Y2e9M0TiK5hi2o3+Am90zH6jPsHRYD6y6qwywMsQ5XEUO8KADAb
0Oblu6f7dp7q5Nos0TsOuC69dx+q4WFm5LyZCHa46bITj9pAmHsW56nppISdTcXU
RjYG4xeBRHKOjx/T/MUWSghvWzreCnoKo1PcPP0+MeD/dPn/kdImS0RQshAxyM2U
vUChdYIPC7/7cEGATVnG3BKI4fWtmajyaZWMOQI0ywhscwg=
-----END CERTIFICATE-----