Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/sxz0R7xbyYdIFHAvszV6Twlsd0Q.roa
File:                     sxz0R7xbyYdIFHAvszV6Twlsd0Q.roa (raw, json)
Hash identifier:          9AO8vY29TYAynnx+3UBNWr+uwDWaZIUQvBckhRk+yok=
Subject key identifier:   B3:1C:F4:47:BC:5B:C9:87:48:14:70:2F:B3:35:7A:4F:09:6C:77:44
Certificate issuer:       /CN=0e2bc9932aa9ceab5f72b6d032b9faede0d68860
Certificate serial:       03087211
Authority key identifier: 0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DivJkyqpzqtfcrbQMrn67eDWiGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/sxz0R7xbyYdIFHAvszV6Twlsd0Q.roa
Signing time:             Sat 01 Jan 2022 10:01:10 +0000
ROA not before:           Sat 01 Jan 2022 10:01:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62275
IP address blocks:        185.234.112.0/24 maxlen: 24
                          2a01:ab40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50885137 (0x3087211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2bc9932aa9ceab5f72b6d032b9faede0d68860
        Validity
            Not Before: Jan  1 10:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b31cf447bc5bc9874814702fb3357a4f096c7744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:c0:11:dd:3f:82:d6:5e:c7:01:54:1e:49:
                    0f:fd:b8:77:3f:51:37:1a:f2:50:21:5c:ab:7a:aa:
                    77:3e:0c:00:46:1f:c7:28:0b:a9:b6:fc:88:0f:1c:
                    16:53:4c:09:69:be:ae:78:a3:13:f6:09:6d:1b:56:
                    e7:24:bc:d0:bb:e5:77:b7:9d:6e:07:d9:ed:f3:8f:
                    12:b6:41:eb:6c:17:3e:d7:a5:50:de:cc:2b:5e:e8:
                    55:c5:5f:45:a4:3a:0f:26:a4:11:db:4d:d1:2b:81:
                    b5:e7:b6:42:28:c3:13:fb:f2:d3:5e:1d:85:9d:18:
                    b8:c1:0c:f3:6a:40:58:0b:11:e3:5b:c6:f8:7f:7c:
                    2e:74:28:7a:66:be:af:bc:a1:d6:0b:25:46:ca:9c:
                    ff:0b:64:56:ba:e5:ca:75:4c:49:b3:4c:b1:66:85:
                    6f:2a:82:00:90:83:2f:a2:57:ec:b5:43:bf:5b:16:
                    a8:60:13:b7:ae:c9:82:69:ea:c9:08:82:27:b7:a6:
                    66:92:ac:1c:bf:e9:27:c0:2c:86:1c:34:48:04:98:
                    f7:28:96:7f:32:53:e7:3d:8e:34:f7:e2:c2:75:5c:
                    ef:b3:90:06:92:3c:fa:49:7b:5d:44:13:99:ac:3e:
                    00:28:64:24:ea:58:fb:75:d8:34:12:19:59:5a:4f:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:F4:47:BC:5B:C9:87:48:14:70:2F:B3:35:7A:4F:09:6C:77:44
            X509v3 Authority Key Identifier:
                keyid:0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DivJkyqpzqtfcrbQMrn67eDWiGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/sxz0R7xbyYdIFHAvszV6Twlsd0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.112.0/24
                IPv6:
                  2a01:ab40::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:f3:16:87:62:22:98:2a:d0:09:4f:eb:0d:59:2e:4e:36:
         1d:dc:8b:93:d6:3d:95:9c:0e:38:1f:cc:35:6d:07:14:39:f0:
         24:ee:96:62:29:b1:56:39:a7:ce:69:48:87:62:83:fd:7c:57:
         f3:6a:02:aa:a1:2e:43:0a:ec:4d:47:26:47:f3:29:92:8e:3b:
         0e:d5:48:34:a1:bc:a4:a2:c6:ab:28:69:58:7d:54:b3:dd:59:
         af:d7:12:83:b8:7b:b3:8e:39:8b:49:44:96:09:1f:7c:b0:8f:
         80:65:8a:c8:0f:93:84:8d:2b:d0:b3:f0:c7:95:e4:37:7b:66:
         31:f8:ef:48:3f:07:71:22:00:9c:a3:7f:70:f8:8a:50:5c:a0:
         62:06:5a:e3:72:49:bd:7f:c8:b1:e3:50:53:5c:89:1f:50:8d:
         79:1a:dc:f0:2c:4c:6c:3c:35:77:42:fe:54:39:54:23:cc:10:
         81:08:be:6c:14:bb:21:a1:8b:1b:73:54:41:b8:cd:81:a0:7a:
         c8:d2:02:9b:1a:37:21:87:1e:54:72:0d:6c:10:b5:d8:0e:17:
         bb:67:38:eb:ce:7e:77:c3:6f:e2:4d:07:4c:9d:57:81:d7:23:
         1d:38:ab:63:58:56:08:41:84:8f:8f:5d:d4:0a:62:44:11:c6:
         54:12:51:40
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAwhyETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTJiYzk5MzJhYTljZWFiNWY3MmI2ZDAzMmI5ZmFlZGUwZDY4ODYwMB4XDTIyMDEw
MTEwMDExMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMxY2Y0NDdiYzVi
Yzk4NzQ4MTQ3MDJmYjMzNTdhNGYwOTZjNzc0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJcrwBHdP4LWXscBVB5JD/24dz9RNxryUCFcq3qqdz4MAEYf
xygLqbb8iA8cFlNMCWm+rnijE/YJbRtW5yS80Lvld7edbgfZ7fOPErZB62wXPtel
UN7MK17oVcVfRaQ6DyakEdtN0SuBtee2QijDE/vy014dhZ0YuMEM82pAWAsR41vG
+H98LnQoema+r7yh1gslRsqc/wtkVrrlynVMSbNMsWaFbyqCAJCDL6JX7LVDv1sW
qGATt67JgmnqyQiCJ7emZpKsHL/pJ8Ashhw0SASY9yiWfzJT5z2ONPfiwnVc77OQ
BpI8+kl7XUQTmaw+AChkJOpY+3XYNBIZWVpPv4kCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSzHPRHvFvJh0gUcC+zNXpPCWx3RDAfBgNVHSMEGDAWgBQOK8mTKqnOq19y
ttAyufrt4NaIYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RpdkpreXFwenF0ZmNyYlFNcm42N2VEV2lHQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTUvNDkyNjU5LWQzZTUtNDQyMi04YzQ4LTJmZjFhZmUwNGI0NS8x
L3N4ejBSN3hieVlkSUZIQXZzelY2VHdsc2QwUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUv
NDkyNjU5LWQzZTUtNDQyMi04YzQ4LTJmZjFhZmUwNGI0NS8xL0RpdkpreXFwenF0
ZmNyYlFNcm42N2VEV2lHQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALnqcDANBAIAAjAHAwUDKgGrQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmcHzFodiIpgq0AlP6w1ZLk42HdyLk9Y9lZwOOB/M
NW0HFDnwJO6WYimxVjmnzmlIh2KD/XxX82oCqqEuQwrsTUcmR/Mpko47DtVINKG8
pKLGqyhpWH1Us91Zr9cSg7h7s445i0lElgkffLCPgGWKyA+ThI0r0LPwx5XkN3tm
MfjvSD8HcSIAnKN/cPiKUFygYgZa43JJvX/IseNQU1yJH1CNeRrc8CxMbDw1d0L+
VDlUI8wQgQi+bBS7IaGLG3NUQbjNgaB6yNICmxo3IYceVHINbBC12A4Xu2c4685+
d8Nv4k0HTJ1XgdcjHTirY1hWCEGEj49d1ApiRBHGVBJRQA==
-----END CERTIFICATE-----