Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/DI2YEDzGoZUe6VNqJnnXDxIwYjA.roa
File:                     DI2YEDzGoZUe6VNqJnnXDxIwYjA.roa (raw, json)
Hash identifier:          kiN/q1Bo5myUATu7kUG0iyVlqY86z1i79dxVtZGoSz8=
Subject key identifier:   0C:8D:98:10:3C:C6:A1:95:1E:E9:53:6A:26:79:D7:0F:12:30:62:30
Certificate issuer:       /CN=931433e2bb7e832606c462b5366fa941ccfa1fca
Certificate serial:       03043973
Authority key identifier: 93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/DI2YEDzGoZUe6VNqJnnXDxIwYjA.roa
Signing time:             Sat 01 Jan 2022 14:58:21 +0000
ROA not before:           Sat 01 Jan 2022 14:58:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206592
IP address blocks:        194.107.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50608499 (0x3043973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931433e2bb7e832606c462b5366fa941ccfa1fca
        Validity
            Not Before: Jan  1 14:58:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c8d98103cc6a1951ee9536a2679d70f12306230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:db:d2:dc:6d:da:b2:ad:2f:2b:8d:ab:60:
                    f3:f8:a2:b2:7b:d3:d8:68:75:67:c1:3b:c3:0e:26:
                    84:3f:dd:6d:12:51:14:d1:d8:27:b6:ce:f6:00:3c:
                    fd:48:1b:86:97:33:9c:2f:8e:ba:55:0a:57:df:87:
                    59:13:b9:31:f8:1d:e7:50:ae:51:cf:52:60:a6:8c:
                    17:f5:bc:15:62:16:fc:e1:31:f7:01:3c:b4:a8:8b:
                    de:d5:fa:fe:17:69:0d:d7:6a:7b:8e:14:a7:22:71:
                    6d:28:be:be:6b:b3:d9:e3:45:cb:94:a4:e3:44:d1:
                    71:a3:e5:1a:f2:ca:32:a1:68:64:99:5d:8f:9c:54:
                    7a:ed:c5:14:87:d5:d5:46:0c:43:aa:68:85:f2:0e:
                    37:03:b7:ba:0a:4f:34:d0:ea:69:fd:08:89:8b:d6:
                    4d:73:01:e8:a3:cb:30:72:24:8a:13:55:65:99:8d:
                    2c:6b:7b:fc:b0:61:c2:30:fb:cc:57:f4:c5:f9:8b:
                    42:7f:18:45:95:34:ac:c6:58:47:03:6d:57:0e:53:
                    23:9d:71:03:7b:29:88:0d:f2:45:1f:c9:3c:ee:f7:
                    9f:44:41:66:50:54:fb:a5:e5:72:4b:d3:d8:d9:ae:
                    15:6c:e2:d1:ca:e9:3a:73:98:12:cb:5a:33:d5:03:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:98:10:3C:C6:A1:95:1E:E9:53:6A:26:79:D7:0F:12:30:62:30
            X509v3 Authority Key Identifier:
                keyid:93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/DI2YEDzGoZUe6VNqJnnXDxIwYjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.107.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:bf:ed:3b:be:ba:f7:69:f6:6c:9b:25:75:5b:9b:d2:13:
         c7:7f:e3:3d:2f:60:09:55:54:b9:5d:96:77:4e:b2:b0:da:ba:
         7d:82:12:d7:74:1d:83:2b:85:55:bd:73:00:52:f9:4f:fb:4d:
         8d:04:f7:99:71:cb:7a:e9:22:dc:6c:ff:6f:77:c2:2d:87:48:
         08:05:4a:87:ce:5c:97:51:8b:de:82:36:d5:d2:f8:d6:66:3e:
         29:48:3c:7a:f7:8e:0e:46:44:9a:70:80:dd:dc:c8:d0:51:71:
         85:46:ee:01:16:2d:15:a0:16:57:a9:67:16:31:8d:57:cc:8d:
         61:7d:85:95:a0:ff:b4:0b:41:a5:a7:b1:82:51:87:07:a1:f7:
         ec:65:f8:c4:bd:1c:88:47:9a:cf:7a:00:6f:43:87:2a:82:c2:
         62:bf:35:5f:38:89:68:da:7a:77:f0:9b:4a:e4:45:26:8e:c9:
         f1:d4:71:5c:92:d7:75:7f:82:fb:cc:a9:aa:af:02:86:b4:94:
         ef:76:51:16:ec:09:85:3c:59:c4:4d:a0:1a:58:65:b6:f6:b2:
         66:02:ce:ad:89:10:0a:36:51:c6:2c:18:bc:2d:ab:f5:51:8e:
         75:f3:eb:38:af:11:49:7d:c8:b4:d3:65:2e:9f:d0:1e:9d:b7:
         30:4a:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----