Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/MdXh33NbQFzPTT9qQlybOdKGDwU.roa
File:                     MdXh33NbQFzPTT9qQlybOdKGDwU.roa (raw, json)
Hash identifier:          7M1v51GfXOHdbnCZNwoZEbip1AKP7KW8v9YHo/svvRI=
Subject key identifier:   31:D5:E1:DF:73:5B:40:5C:CF:4D:3F:6A:42:5C:9B:39:D2:86:0F:05
Certificate issuer:       /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial:       08E39058
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/MdXh33NbQFzPTT9qQlybOdKGDwU.roa
Signing time:             Mon 07 Feb 2022 08:04:30 +0000
ROA not before:           Mon 07 Feb 2022 08:04:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41313
IP address blocks:        93.152.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149131352 (0x8e39058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
        Validity
            Not Before: Feb  7 08:04:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31d5e1df735b405ccf4d3f6a425c9b39d2860f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:db:33:f8:ff:a2:ad:87:76:b4:12:5b:41:
                    e0:ad:c5:96:cf:5b:2e:11:2f:a2:e2:f0:6d:09:b4:
                    da:27:b6:db:34:d6:b1:79:df:21:b7:1a:ae:1d:aa:
                    f8:7f:5c:45:8f:0a:1f:f5:52:1b:25:76:cc:e6:f6:
                    ca:6f:ea:16:26:e5:f3:45:6b:27:39:83:e5:4f:0e:
                    07:ff:48:8d:69:e9:ef:78:29:dc:4f:4d:ee:c1:fa:
                    2a:48:8f:65:1b:a1:97:0a:e4:99:4b:a4:78:dd:db:
                    90:88:e3:c3:81:77:1d:f4:47:15:ed:3a:ac:14:72:
                    94:9e:1d:7f:55:59:c4:bf:d2:7d:28:f2:86:c3:d2:
                    4d:60:e3:28:f7:f4:1c:c9:39:63:98:55:8a:eb:8c:
                    ca:0f:32:32:e1:ad:a6:60:19:95:b2:b8:3d:c8:3a:
                    4f:89:90:98:53:34:7e:bb:38:0b:1f:44:1d:32:a9:
                    ed:47:1a:d9:45:e9:8d:64:a5:bc:35:f1:ce:03:4c:
                    b7:e6:17:c1:0d:1c:e6:d4:47:a2:8d:58:a7:8b:12:
                    a0:eb:2f:76:ce:95:5d:c7:14:a4:c5:af:34:d2:49:
                    10:b3:80:f5:09:ba:0e:a7:d3:45:84:0b:5e:ca:ea:
                    40:8c:90:33:8d:8d:54:34:66:28:5b:5c:4e:4f:27:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:E1:DF:73:5B:40:5C:CF:4D:3F:6A:42:5C:9B:39:D2:86:0F:05
            X509v3 Authority Key Identifier:
                keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/MdXh33NbQFzPTT9qQlybOdKGDwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:a5:45:7e:a0:e6:ae:3b:d4:0b:c2:56:ca:d8:ce:d9:10:8c:
         83:3e:56:86:c1:52:56:a9:c9:6e:60:4c:20:32:d3:3b:ca:db:
         ef:9d:92:e8:0f:6c:27:5c:97:9e:ea:db:a2:3d:66:ba:29:4e:
         cc:5c:d3:db:b1:21:80:e7:d5:b5:be:38:6c:d9:0b:80:97:50:
         28:09:ab:a1:fa:1c:a6:1f:24:2a:e2:68:2f:29:e4:63:79:19:
         2a:6d:18:d8:c0:59:df:de:c2:77:22:98:b9:89:c8:9f:53:29:
         08:aa:e5:12:8a:b8:c2:a5:bd:8c:5c:71:5f:15:b1:1a:c7:1a:
         51:17:8b:7d:28:2e:7e:69:cf:94:87:22:c4:b8:a5:9d:f3:70:
         fc:cf:5e:0e:e0:e9:9c:4f:67:9c:b7:b0:69:2a:3b:02:3b:3e:
         56:f2:77:41:bd:34:66:b2:bc:83:fe:99:80:b8:d3:1a:6b:79:
         6f:de:d3:08:49:24:5b:7c:27:bd:f6:f7:2b:12:07:e3:9c:a2:
         a9:f9:3e:d7:64:bc:1a:6e:a7:85:02:dc:d8:1a:f8:65:4f:5c:
         a8:b5:45:5b:87:0c:5c:dc:fa:7b:c2:9c:b6:62:84:77:a4:92:
         a9:24:63:0e:45:98:a3:0c:1a:21:e2:c6:76:4b:69:67:af:49:
         ef:a0:9e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----