Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/XxF_4pWyCJu8mlH2_Aj_UPRA8NA.roa
File:                     XxF_4pWyCJu8mlH2_Aj_UPRA8NA.roa (raw, json)
Hash identifier:          PfYeZlVjo/JkenfzfMiltiHScSk1PzrLuAjlBJl4Zcs=
Subject key identifier:   5F:11:7F:E2:95:B2:08:9B:BC:9A:51:F6:FC:08:FF:50:F4:40:F0:D0
Certificate issuer:       /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial:       08E2D6F6
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/XxF_4pWyCJu8mlH2_Aj_UPRA8NA.roa
Signing time:             Mon 07 Feb 2022 08:04:30 +0000
ROA not before:           Mon 07 Feb 2022 08:04:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8808
IP address blocks:        93.152.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149083894 (0x8e2d6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
        Validity
            Not Before: Feb  7 08:04:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f117fe295b2089bbc9a51f6fc08ff50f440f0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:c3:38:b7:9a:6e:5b:da:2d:f1:68:98:cd:
                    df:82:ef:62:67:a7:f5:b0:e1:1b:09:6f:f2:18:20:
                    20:80:db:ab:0e:d7:19:9d:35:bd:98:b8:0a:c7:0d:
                    08:e3:9a:8b:73:52:56:4a:06:80:40:91:18:33:3e:
                    9c:75:77:9d:64:b6:70:84:6f:6d:bc:84:73:00:f9:
                    10:49:25:dc:96:ed:50:22:d1:f9:1f:74:3f:1e:49:
                    fa:8f:d1:73:53:eb:f5:19:2f:4f:89:84:f2:40:d7:
                    f2:63:84:16:71:61:52:cf:0e:e3:85:14:29:c3:96:
                    b0:79:58:9a:48:b4:57:6c:ec:43:ed:34:1b:95:4e:
                    7e:f5:45:26:62:d5:6b:57:7d:b5:28:cc:e1:cd:36:
                    6a:da:98:b7:6b:91:12:f8:a3:0c:8f:7a:f5:3b:20:
                    61:cf:fb:43:81:e3:b6:47:75:8b:3b:30:e3:80:63:
                    02:e2:32:70:23:86:12:23:4d:82:51:b8:1f:92:85:
                    ef:01:8c:97:e4:d3:43:74:22:67:3a:be:cd:75:eb:
                    03:70:f0:3b:98:9f:d3:94:a3:76:27:80:4b:21:cf:
                    f3:d2:6c:62:d7:0d:e9:19:a8:01:fc:ac:ca:9d:46:
                    77:e1:87:63:a0:24:bd:cb:30:1d:14:69:1e:5c:5a:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:7F:E2:95:B2:08:9B:BC:9A:51:F6:FC:08:FF:50:F4:40:F0:D0
            X509v3 Authority Key Identifier:
                keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/XxF_4pWyCJu8mlH2_Aj_UPRA8NA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:fd:49:b2:05:b3:15:eb:d4:a6:06:16:3b:a5:fb:e1:a4:
         3d:e6:46:b7:f2:90:d4:61:a1:db:c6:fa:be:f4:a2:b1:bf:64:
         0a:84:c5:77:54:3e:24:57:82:b9:f9:fc:93:5a:60:ad:cf:f8:
         1c:86:06:e8:60:37:1f:77:a0:cf:4a:68:e5:d8:0a:28:0a:52:
         b7:57:8c:1a:e4:15:1c:87:1c:1c:9f:79:c5:b5:02:79:d9:a6:
         aa:61:5c:93:5a:35:e3:4c:7a:2b:ba:85:e4:40:c9:f6:44:aa:
         7a:61:fa:48:a1:a7:45:28:0e:9b:07:88:da:9e:ff:e1:3f:65:
         b8:42:28:4d:b1:ca:5d:1d:70:08:a4:4f:11:f6:ce:87:84:eb:
         b5:a0:c1:41:16:eb:69:ed:07:37:4c:d8:7e:dd:84:36:45:73:
         02:cf:2d:53:71:46:5b:76:64:c4:d7:45:75:21:18:98:92:11:
         21:6d:5c:c4:ae:81:b5:05:b7:92:9a:1d:06:af:f8:5a:8b:80:
         f2:06:b3:ff:62:61:0a:bb:84:3a:f0:ae:0a:72:03:ad:75:9b:
         a1:66:8f:11:0e:14:91:52:b0:c7:49:4e:67:82:1f:0a:a0:65:
         02:b6:76:2b:3b:de:7a:e8:e5:00:9e:bf:2f:24:24:41:31:04:
         58:50:1e:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOLW9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MTgxMjc3NDRiNGM2NjVjMmVmOWRlYTRkZjg2N2I1NDNhYzY1NjY5MB4XDTIyMDIw
NzA4MDQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWYxMTdmZTI5NWIy
MDg5YmJjOWE1MWY2ZmMwOGZmNTBmNDQwZjBkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtawzi3mm5b2i3xaJjN34LvYmen9bDhGwlv8hggIIDbqw7X
GZ01vZi4CscNCOOai3NSVkoGgECRGDM+nHV3nWS2cIRvbbyEcwD5EEkl3JbtUCLR
+R90Px5J+o/Rc1Pr9RkvT4mE8kDX8mOEFnFhUs8O44UUKcOWsHlYmki0V2zsQ+00
G5VOfvVFJmLVa1d9tSjM4c02atqYt2uREvijDI969TsgYc/7Q4Hjtkd1izsw44Bj
AuIycCOGEiNNglG4H5KF7wGMl+TTQ3QiZzq+zXXrA3DwO5if05SjdieASyHP89Js
YtcN6RmoAfysyp1Gd+GHY6AkvcswHRRpHlxa5nsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfEX/ilbIIm7yaUfb8CP9Q9EDw0DAfBgNVHSMEGDAWgBTRgSd0S0xmXC75
3qTfhntUOsZWaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBZRW5kRXRNWmx3dS1kNmszNFo3VkRyR1Ztay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvYTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8x
L1h4Rl80cFd5Q0p1OG1sSDJfQWpfVVBSQThOQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
YTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8xLzBZRW5kRXRNWmx3
dS1kNmszNFo3VkRyR1Ztay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV2Y6jANBgkqhkiG9w0BAQsFAAOC
AQEAfeb9SbIFsxXr1KYGFjul++GkPeZGt/KQ1GGh28b6vvSisb9kCoTFd1Q+JFeC
ufn8k1pgrc/4HIYG6GA3H3egz0po5dgKKApSt1eMGuQVHIccHJ95xbUCedmmqmFc
k1o140x6K7qF5EDJ9kSqemH6SKGnRSgOmweI2p7/4T9luEIoTbHKXR1wCKRPEfbO
h4TrtaDBQRbrae0HN0zYft2ENkVzAs8tU3FGW3ZkxNdFdSEYmJIRIW1cxK6BtQW3
kpodBq/4WouA8gaz/2JhCruEOvCuCnIDrXWboWaPEQ4UkVKwx0lOZ4IfCqBlArZ2
KzveeujlAJ6/LyQkQTEEWFAe2w==
-----END CERTIFICATE-----