Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/vqms36w_67ojN3FWR8Gi-fRFN1A.roa
File:                     vqms36w_67ojN3FWR8Gi-fRFN1A.roa (raw, json)
Hash identifier:          BlaBjuwVdb8S9WZhX2bOGxrslK+ca0twDxeAgasZlcU=
Subject key identifier:   BE:A9:AC:DF:AC:3F:EB:BA:23:37:71:56:47:C1:A2:F9:F4:45:37:50
Certificate issuer:       /CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Certificate serial:       018572A7E4D19F5A04D8BCE2881561DF74D0
Authority key identifier: F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/vqms36w_67ojN3FWR8Gi-fRFN1A.roa
Signing time:             Mon 02 Jan 2023 13:24:43 +0000
ROA not before:           Mon 02 Jan 2023 13:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16246
IP address blocks:        176.98.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:a7:e4:d1:9f:5a:04:d8:bc:e2:88:15:61:df:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
        Validity
            Not Before: Jan  2 13:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bea9acdfac3febba2337715647c1a2f9f4453750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:44:c0:42:5d:fa:35:4e:80:e8:69:70:c0:5e:
                    94:d9:9e:bb:2d:85:7a:c8:36:40:b9:1a:f1:7c:4a:
                    12:b2:8d:85:06:34:21:46:e1:25:6e:84:8f:ae:42:
                    37:6c:34:2b:c8:2f:fa:c3:58:e0:b1:2d:cd:d1:e7:
                    63:a9:ab:8f:90:21:88:b1:2d:97:37:35:74:e0:a3:
                    cd:81:43:1b:c7:17:2c:4b:17:20:c2:b2:88:9b:96:
                    14:21:5e:d3:e6:59:b4:99:8e:b5:f7:e9:21:ec:70:
                    ab:9e:1c:1e:c6:e0:8a:8b:d3:9f:fe:1e:21:0b:c6:
                    f2:8a:2d:3a:ed:4e:c1:97:f4:73:67:de:64:4f:62:
                    70:8c:5c:95:01:87:f0:57:29:42:84:7f:b4:45:24:
                    ed:30:d8:6f:b9:d4:a1:79:51:2a:d2:b1:9d:0a:66:
                    80:75:3b:68:1f:61:57:32:f4:0e:38:4d:f9:50:63:
                    2b:64:fb:63:5c:6d:a5:6c:da:79:be:79:5b:ce:0c:
                    46:14:5a:3c:60:79:b6:f0:64:94:ec:69:c0:24:08:
                    4b:3c:46:60:62:a9:d2:24:3b:aa:63:3c:fc:87:5b:
                    b5:1c:93:d5:d4:75:a0:ff:44:64:58:71:28:a1:da:
                    49:96:25:68:26:5e:8f:1e:92:11:ea:86:0e:8a:54:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:AC:DF:AC:3F:EB:BA:23:37:71:56:47:C1:A2:F9:F4:45:37:50
            X509v3 Authority Key Identifier:
                keyid:F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/vqms36w_67ojN3FWR8Gi-fRFN1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:87:84:42:56:99:b2:ea:80:ab:a6:15:44:e2:2f:c9:e6:
         a1:61:7e:5e:f0:b2:f8:35:f7:c3:ab:7c:6f:8a:3a:72:ad:8c:
         e8:41:c6:c3:4d:94:3e:3e:1b:d5:d9:94:a0:a6:7d:c7:38:13:
         db:0c:39:7c:5b:03:60:1a:1c:ec:34:52:b2:38:08:18:56:39:
         c0:c5:23:51:b3:a2:36:f3:95:71:ad:98:1b:4c:ac:25:d2:4c:
         8a:65:0a:08:9e:6b:d7:f0:44:c7:ea:bf:7e:50:d2:3f:c1:5d:
         b7:83:bc:32:5e:10:bf:17:6e:ca:3e:6f:c4:de:66:5a:ce:2a:
         95:a7:03:f2:01:37:d0:a8:f5:c9:fc:1b:c2:76:6c:27:a6:58:
         eb:3a:9e:6d:33:69:99:67:c7:c7:c6:ad:7b:1d:d1:a2:e7:6a:
         0b:ea:ce:5b:03:70:2c:ff:ad:f4:23:b1:5a:21:e8:6b:2a:e5:
         56:ef:c2:e3:19:d4:7b:f7:e6:e0:91:28:82:ed:9e:cb:1a:60:
         89:18:63:90:83:b8:22:4a:07:15:eb:88:a7:ae:a9:e9:d8:a2:
         f1:d8:3f:5f:0f:59:83:0a:f4:51:1f:f5:35:e3:3e:24:68:33:
         c8:73:4f:bc:30:8e:e9:e6:e9:64:cb:3e:6b:16:dc:07:aa:41:
         5d:4b:bd:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyp+TRn1oE2LziiBVh33TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTA1MTlhOTljNTk5MmZmYjY3YWQzNDVkNDg4OTJhYTFi
ZmI5ZDcwHhcNMjMwMTAyMTMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWE5YWNkZmFjM2ZlYmJhMjMzNzcxNTY0N2MxYTJmOWY0NDUzNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kTAQl36NU6A6GlwwF6U2Z67LYV6
yDZAuRrxfEoSso2FBjQhRuElboSPrkI3bDQryC/6w1jgsS3N0edjqauPkCGIsS2X
NzV04KPNgUMbxxcsSxcgwrKIm5YUIV7T5lm0mY619+kh7HCrnhwexuCKi9Of/h4h
C8byii067U7Bl/RzZ95kT2JwjFyVAYfwVylChH+0RSTtMNhvudSheVEq0rGdCmaA
dTtoH2FXMvQOOE35UGMrZPtjXG2lbNp5vnlbzgxGFFo8YHm28GSU7GnAJAhLPEZg
YqnSJDuqYzz8h1u1HJPV1HWg/0RkWHEoodpJliVoJl6PHpIR6oYOilRiBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6prN+sP+u6IzdxVkfBovn0RTdQMB8GA1UdIwQY
MBaAFPZQUZqZxZkv+2etNF1IiSqhv7nXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxCUm1wbkZtU183WjYwMFhVaUpLcUdfdWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9iYmU5NmMtNjAyMS00NzI2LWEzNjct
Mzc1ZjJiYzFlODdkLzEvdnFtczM2d182N29qTjNGV1I4R2ktZlJGTjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9iYmU5NmMtNjAyMS00NzI2LWEzNjctMzc1ZjJiYzFlODdk
LzEvOWxCUm1wbkZtU183WjYwMFhVaUpLcUdfdWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsGJgMA0G
CSqGSIb3DQEBCwUAA4IBAQBJ74eEQlaZsuqAq6YVROIvyeahYX5e8LL4NffDq3xv
ijpyrYzoQcbDTZQ+PhvV2ZSgpn3HOBPbDDl8WwNgGhzsNFKyOAgYVjnAxSNRs6I2
85VxrZgbTKwl0kyKZQoInmvX8ETH6r9+UNI/wV23g7wyXhC/F27KPm/E3mZaziqV
pwPyATfQqPXJ/BvCdmwnpljrOp5tM2mZZ8fHxq17HdGi52oL6s5bA3As/630I7Fa
IehrKuVW78LjGdR79+bgkSiC7Z7LGmCJGGOQg7giSgcV64inrqnp2KLx2D9fD1mD
CvRRH/U14z4kaDPIc0+8MI7p5ulkyz5rFtwHqkFdS70K
-----END CERTIFICATE-----