Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa
File:                     deBMS2BbTIhafXdA2au9aBp9kUI.roa (raw, json)
Hash identifier:          mxzI0bwbiSXQRsQNnHuE55CmXzRZJW6Q7L5O3IJizuk=
Subject key identifier:   75:E0:4C:4B:60:5B:4C:88:5A:7D:77:40:D9:AB:BD:68:1A:7D:91:42
Certificate issuer:       /CN=754d54115d17dc1eeab1669a080062180a768e22
Certificate serial:       03B25B3E
Authority key identifier: 75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dU1UEV0X3B7qsWaaCABiGAp2jiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa
Signing time:             Sat 01 Jan 2022 13:03:41 +0000
ROA not before:           Sat 01 Jan 2022 13:03:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39910
IP address blocks:        185.203.90.0/24 maxlen: 24
                          2a10:7a40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62020414 (0x3b25b3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754d54115d17dc1eeab1669a080062180a768e22
        Validity
            Not Before: Jan  1 13:03:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75e04c4b605b4c885a7d7740d9abbd681a7d9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:9c:13:be:eb:bf:08:e0:41:dc:46:c8:60:
                    d5:b2:d7:6c:ad:29:a0:73:76:1a:df:18:e4:e1:f6:
                    06:3a:c2:3b:5e:5b:37:fc:4d:b7:16:ac:e4:e0:63:
                    f3:be:80:ff:68:5c:94:a4:f3:27:92:8e:1e:8a:70:
                    a3:c4:d1:e1:e5:90:20:17:1e:fb:c7:84:6b:4a:51:
                    b3:6f:c4:06:6f:a4:79:08:d6:ca:59:ff:8e:67:9e:
                    0e:33:a2:61:53:88:f9:18:67:62:b3:8c:58:95:8c:
                    f7:de:b0:f1:3a:d6:0f:15:44:51:0a:8f:ca:f8:08:
                    45:38:b1:02:11:0b:52:45:85:61:8a:3c:cf:1d:5b:
                    87:1e:6b:ed:5d:0c:bd:12:73:81:5b:2f:95:8c:34:
                    7a:73:8d:d4:77:3e:17:2f:f4:0a:b9:44:4e:b3:6e:
                    35:1b:7e:06:e5:4f:50:2d:2a:61:01:6e:cc:41:7c:
                    a7:2f:a7:71:51:ab:10:da:88:7f:46:e2:16:b2:77:
                    1f:4d:c5:ad:b7:da:81:f6:25:12:7c:f9:86:29:1e:
                    0e:7b:1e:9c:16:d0:8f:72:c8:bb:31:17:5c:bc:e6:
                    65:51:f3:bf:16:00:b6:fa:b3:80:eb:df:32:76:63:
                    0e:7e:15:c5:a6:f0:38:89:40:92:c8:a7:38:d8:81:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:4C:4B:60:5B:4C:88:5A:7D:77:40:D9:AB:BD:68:1A:7D:91:42
            X509v3 Authority Key Identifier:
                keyid:75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU1UEV0X3B7qsWaaCABiGAp2jiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/dU1UEV0X3B7qsWaaCABiGAp2jiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.90.0/24
                IPv6:
                  2a10:7a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:c3:c2:ca:c3:fd:b9:84:0c:ed:4e:68:2a:12:19:82:87:58:
         9c:61:47:69:e1:11:ce:7d:33:5f:b6:57:b5:18:f5:8a:38:32:
         6c:0c:a6:f8:50:f5:a1:86:54:2f:92:be:40:19:96:aa:5a:80:
         56:e7:b9:f5:8c:0a:f3:5e:54:01:06:3d:87:07:f9:d5:0c:2f:
         30:c3:15:da:49:2c:2e:e5:c8:2c:d2:97:3e:6a:0c:5e:e5:08:
         47:b9:f2:ed:26:b0:cc:07:24:2e:f1:68:a7:21:5c:28:8e:a4:
         78:0c:de:16:40:26:dc:48:4e:17:56:18:8b:fe:b8:4c:58:9e:
         23:ac:58:88:fe:5d:a5:d5:f1:9b:70:dd:bd:76:be:f6:ef:5b:
         b9:2d:84:27:cd:d1:2d:20:d1:0e:68:ef:19:dc:3f:98:b4:9a:
         3c:3f:50:e1:38:e0:8a:20:6f:61:96:eb:12:1a:62:68:01:94:
         a4:b8:c9:65:f2:34:32:71:6e:c7:90:14:01:9f:c1:5d:1e:ff:
         f1:9a:6a:07:52:80:fc:3d:40:af:dd:7a:dc:6e:3c:98:8a:bb:
         53:99:9d:fe:b5:32:f2:91:c4:c7:01:60:78:45:5e:ad:ba:69:
         ba:01:b5:d6:6c:12:6c:50:f4:fb:87:bd:23:a8:46:ad:96:c8:
         a1:f3:ae:6f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA7JbPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTRkNTQxMTVkMTdkYzFlZWFiMTY2OWEwODAwNjIxODBhNzY4ZTIyMB4XDTIyMDEw
MTEzMDM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVlMDRjNGI2MDVi
NGM4ODVhN2Q3NzQwZDlhYmJkNjgxYTdkOTE0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnunBO+678I4EHcRshg1bLXbK0poHN2Gt8Y5OH2BjrCO15b
N/xNtxas5OBj876A/2hclKTzJ5KOHopwo8TR4eWQIBce+8eEa0pRs2/EBm+keQjW
yln/jmeeDjOiYVOI+RhnYrOMWJWM996w8TrWDxVEUQqPyvgIRTixAhELUkWFYYo8
zx1bhx5r7V0MvRJzgVsvlYw0enON1Hc+Fy/0CrlETrNuNRt+BuVPUC0qYQFuzEF8
py+ncVGrENqIf0biFrJ3H03FrbfagfYlEnz5hikeDnsenBbQj3LIuzEXXLzmZVHz
vxYAtvqzgOvfMnZjDn4VxabwOIlAksinONiBIGUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR14ExLYFtMiFp9d0DZq71oGn2RQjAfBgNVHSMEGDAWgBR1TVQRXRfcHuqx
ZpoIAGIYCnaOIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RVMVVFVjBYM0I3cXNXYWFDQUJpR0FwMmppSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvM2FjMDQzLTk5MTQtNGE3ZC05NmY0LTc5OWMzNjk3ZTg5ZS8x
L2RlQk1TMkJiVEloYWZYZEEyYXU5YUJwOWtVSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
M2FjMDQzLTk5MTQtNGE3ZC05NmY0LTc5OWMzNjk3ZTg5ZS8xL2RVMVVFVjBYM0I3
cXNXYWFDQUJpR0FwMmppSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALnLWjANBAIAAjAHAwUDKhB6QDAN
BgkqhkiG9w0BAQsFAAOCAQEAqcPCysP9uYQM7U5oKhIZgodYnGFHaeERzn0zX7ZX
tRj1ijgybAym+FD1oYZUL5K+QBmWqlqAVue59YwK815UAQY9hwf51QwvMMMV2kks
LuXILNKXPmoMXuUIR7ny7SawzAckLvFopyFcKI6keAzeFkAm3EhOF1YYi/64TFie
I6xYiP5dpdXxm3DdvXa+9u9buS2EJ83RLSDRDmjvGdw/mLSaPD9Q4TjgiiBvYZbr
EhpiaAGUpLjJZfI0MnFux5AUAZ/BXR7/8ZpqB1KA/D1Ar9163G48mIq7U5md/rUy
8pHExwFgeEVerbppugG11mwSbFD0+4e9I6hGrZbIofOubw==
-----END CERTIFICATE-----