Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa
File:                     1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa (raw, json)
Hash identifier:          ugBZ6xSbRGY+1IcSG9pM1xES6ma58HW31MSkxtobsTU=
Subject key identifier:   D6:EC:D6:43:A6:B0:98:A3:61:16:4E:68:F9:13:A6:50:DE:CF:31:DC
Certificate issuer:       /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial:       0185733144AD467086EA5B700E26AC344144
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa
Signing time:             Mon 02 Jan 2023 15:54:46 +0000
ROA not before:           Mon 02 Jan 2023 15:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212806
IP address blocks:        185.175.90.0/24 maxlen: 24
                          2a10:4740:40::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:31:44:ad:46:70:86:ea:5b:70:0e:26:ac:34:41:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
        Validity
            Not Before: Jan  2 15:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6ecd643a6b098a361164e68f913a650decf31dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:34:04:32:98:70:ff:76:bb:61:25:a0:6d:
                    c2:0d:19:8f:73:65:04:8f:78:67:37:86:38:eb:84:
                    f5:6a:46:b8:87:82:7b:c5:65:50:bc:0c:f4:1f:bd:
                    2b:4f:d4:ea:d6:f8:87:1f:44:2b:79:a2:94:f5:7c:
                    df:b2:f9:25:85:10:01:91:c6:f6:44:e0:b7:4e:9a:
                    f9:9d:c9:de:94:e7:70:17:9a:50:a1:4b:a4:0d:32:
                    40:42:a3:88:27:81:f9:11:f5:30:a7:0f:b8:b1:b3:
                    2a:e6:c2:c0:bf:6d:51:b7:d6:f4:49:c0:5e:23:4c:
                    ce:36:8c:ca:84:dc:15:80:d1:18:c5:35:3c:56:e7:
                    84:f5:4a:57:bd:57:a1:f6:15:d5:21:07:f8:48:82:
                    f2:78:96:b4:52:c0:e4:2b:73:3d:41:35:e2:7d:e4:
                    e1:6e:6a:05:39:47:0e:3b:cc:36:d5:98:dc:4b:48:
                    2a:73:5c:f7:12:bd:00:14:6b:fd:5a:68:31:fe:1e:
                    11:60:d0:05:a8:99:6c:c3:90:7d:4c:a9:f0:f4:af:
                    09:81:74:5e:b1:df:a9:88:3d:4c:0d:80:55:22:c6:
                    4f:a6:3f:cb:c5:5d:0d:22:30:fa:a7:ab:0a:cd:fe:
                    1c:99:c3:f7:09:9c:2b:96:5c:de:9f:d2:3d:5c:86:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:D6:43:A6:B0:98:A3:61:16:4E:68:F9:13:A6:50:DE:CF:31:DC
            X509v3 Authority Key Identifier:
                keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.90.0/24
                IPv6:
                  2a10:4740:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:83:96:e4:d4:5a:08:77:4d:5c:63:81:3c:de:a3:28:18:
         7e:0c:60:45:29:8d:32:88:28:4e:19:ab:d2:66:13:3a:97:66:
         2e:b3:7f:2c:a3:f2:11:73:2c:fe:f3:f1:97:45:0f:15:97:12:
         5d:c2:74:b8:80:26:b3:2a:fc:b2:60:86:71:ff:e0:19:92:43:
         3c:d7:eb:d9:e5:85:9d:3b:74:eb:9b:c2:60:c8:2e:39:df:e9:
         e0:dc:d7:cd:ca:f8:94:16:e1:7c:26:5a:07:5e:cb:22:8b:8a:
         f7:22:e6:4a:ca:a5:58:e2:d8:bc:41:ff:71:9c:c2:79:54:6d:
         2f:3e:b0:37:ad:06:c5:78:bc:20:eb:59:18:fd:93:99:c4:30:
         bf:1e:b5:76:7b:49:a7:f2:7d:42:1d:6d:f0:94:c5:67:55:51:
         4b:33:68:fc:6d:46:a6:4f:f1:9c:e6:e8:e4:ed:70:3f:b9:7a:
         a3:28:00:4c:7a:eb:99:74:4e:31:97:94:db:b0:7e:cd:16:8f:
         3c:e6:29:1e:bd:0d:23:9f:80:4f:39:f6:82:21:8c:bb:4f:ab:
         a2:90:dc:5c:08:da:c2:8c:fc:8c:de:6f:69:36:6c:4e:ba:4b:
         ec:5e:35:88:1c:84:dd:f6:84:e4:8a:9c:0f:20:67:24:6f:e3:
         55:0a:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----