Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/uysmjI0aQH7F66Y59j3BrNlAJ34.roa
File:                     uysmjI0aQH7F66Y59j3BrNlAJ34.roa (raw, json)
Hash identifier:          v9nLIca69e3XpefRO1E33w3oHHBXai0JdrYXY3RdWaU=
Subject key identifier:   BB:2B:26:8C:8D:1A:40:7E:C5:EB:A6:39:F6:3D:C1:AC:D9:40:27:7E
Certificate issuer:       /CN=1c216327a5cb83f1207811143710e227c0533f32
Certificate serial:       0F83FFC0
Authority key identifier: 1C:21:63:27:A5:CB:83:F1:20:78:11:14:37:10:E2:27:C0:53:3F:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/uysmjI0aQH7F66Y59j3BrNlAJ34.roa
Signing time:             Sat 01 Jan 2022 12:05:55 +0000
ROA not before:           Sat 01 Jan 2022 12:05:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52147
IP address blocks:        185.118.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260308928 (0xf83ffc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c216327a5cb83f1207811143710e227c0533f32
        Validity
            Not Before: Jan  1 12:05:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb2b268c8d1a407ec5eba639f63dc1acd940277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:4b:40:d8:2a:36:03:5a:c0:db:de:8d:51:
                    ff:57:6f:08:6d:98:cf:d5:af:88:6d:bd:eb:21:1a:
                    b1:dd:2d:4f:46:d7:1e:6f:87:4a:f0:63:fd:db:bb:
                    13:07:e9:f2:b5:ee:db:2c:c9:f1:7e:48:67:b3:9e:
                    cc:bb:47:78:04:25:b3:64:0b:fe:3b:75:2f:9f:62:
                    33:7e:a8:b3:00:04:b7:c3:c1:35:84:45:7b:43:6f:
                    c0:b5:66:6e:0a:e7:6c:89:9c:e1:7c:0d:fc:f2:9c:
                    2d:28:e5:fa:b6:f8:73:23:64:c6:4e:da:24:58:e9:
                    e8:e4:6f:35:bf:f3:21:82:2f:48:4b:d6:ec:07:38:
                    a9:67:93:97:cb:90:80:9e:df:b8:83:43:a7:d3:00:
                    cc:30:44:03:cb:f5:76:cd:8a:1a:5b:ab:aa:e5:ed:
                    2e:8a:4a:4f:cb:f8:0b:e4:7c:de:78:43:61:a7:52:
                    25:f1:4c:ba:f2:f3:24:e2:1b:38:3d:5f:d1:21:59:
                    b8:fb:95:93:24:dc:15:87:3c:84:26:29:07:21:2e:
                    5b:d5:ce:52:f8:8e:f4:63:ff:12:33:49:e2:a5:59:
                    ff:bc:13:ad:20:dc:e5:ab:59:9f:72:57:ca:27:76:
                    02:e7:12:ab:42:3c:14:76:55:eb:a3:c3:20:e0:03:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:26:8C:8D:1A:40:7E:C5:EB:A6:39:F6:3D:C1:AC:D9:40:27:7E
            X509v3 Authority Key Identifier:
                keyid:1C:21:63:27:A5:CB:83:F1:20:78:11:14:37:10:E2:27:C0:53:3F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/uysmjI0aQH7F66Y59j3BrNlAJ34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2c:db:a2:84:59:cc:f4:8d:2e:26:18:13:cb:5e:e9:7b:92:
         f5:58:5d:a2:cb:90:55:ac:12:5c:ed:9d:e9:f6:92:06:b9:9c:
         ca:43:48:59:30:ce:7b:e5:b6:ec:4b:92:6a:fc:30:26:a0:d3:
         a8:f3:f6:4c:08:e7:ab:f6:20:de:ae:02:b2:08:88:17:e4:0d:
         54:27:7c:e0:85:f1:e7:64:bd:f8:10:cb:44:46:58:bb:ac:78:
         25:b3:ec:4c:8e:db:09:5c:a2:9a:71:54:91:a1:5d:c4:01:e3:
         a5:6d:89:6d:3a:b3:d7:f3:0d:ba:e9:14:fa:ed:d3:d9:e1:a4:
         03:d4:6b:04:0d:5d:7d:0e:51:9f:4c:d6:9f:73:fa:57:c4:6f:
         92:fe:75:e5:73:fb:d6:81:b4:82:67:1b:0e:46:88:2e:9d:f5:
         30:f4:48:01:22:13:7c:e7:02:63:79:d1:6b:cc:c1:7e:17:fb:
         2c:00:0a:f7:bb:3a:dd:b8:b2:7d:42:2a:00:99:f2:ae:16:16:
         9a:27:7b:0c:55:94:6a:20:21:9e:38:33:db:fe:d2:31:27:88:
         2e:54:95:73:e4:57:44:26:67:9f:76:39:64:41:dc:d5:9c:6f:
         13:30:ba:b0:1b:90:76:56:10:10:44:05:4e:4b:2e:3b:d2:21:
         5c:44:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----