Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ec3b5a-2143-48ee-8daa-4d88a83e8b7a/1/0kfiYc8O2t7hwR8llO2Vk2K8hG4.roa
File:                     0kfiYc8O2t7hwR8llO2Vk2K8hG4.roa (raw, json)
Hash identifier:          k/0SqTToM/B/krvyGhsQlJWt1LvfYJsWtp6Cxefw91I=
Subject key identifier:   D2:47:E2:61:CF:0E:DA:DE:E1:C1:1F:25:94:ED:95:93:62:BC:84:6E
Certificate issuer:       /CN=1274b215c6f64e38f7ab57bf1cbce4849c853dac
Certificate serial:       01856F2FD30E93AE5504523C7C173D5ED225
Authority key identifier: 12:74:B2:15:C6:F6:4E:38:F7:AB:57:BF:1C:BC:E4:84:9C:85:3D:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnSyFcb2Tjj3q1e_HLzkhJyFPaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ec3b5a-2143-48ee-8daa-4d88a83e8b7a/1/0kfiYc8O2t7hwR8llO2Vk2K8hG4.roa
Signing time:             Sun 01 Jan 2023 21:14:43 +0000
ROA not before:           Sun 01 Jan 2023 21:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35132
IP address blocks:        188.119.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:d3:0e:93:ae:55:04:52:3c:7c:17:3d:5e:d2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1274b215c6f64e38f7ab57bf1cbce4849c853dac
        Validity
            Not Before: Jan  1 21:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d247e261cf0edadee1c11f2594ed959362bc846e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:32:db:bb:96:aa:b7:f7:f0:22:24:22:75:
                    ee:59:bf:c6:3d:b5:bd:8b:3f:ed:8f:59:e5:03:07:
                    1f:42:52:89:a2:5e:a3:65:4c:a1:2e:78:5e:a5:cd:
                    d0:bf:57:e8:95:0f:bf:1e:dd:46:ed:0b:55:c4:c8:
                    2d:e4:98:25:b6:a4:79:df:a1:28:0e:ae:31:8b:04:
                    c1:40:ab:5e:dc:d1:af:5f:8c:f8:c6:45:28:b5:4b:
                    c3:7c:10:e5:83:9b:56:98:10:66:2d:51:c0:2d:4b:
                    1c:fd:de:3c:c4:8c:a2:cb:7b:c1:a3:d5:12:f6:d5:
                    46:4a:85:32:d1:30:88:0b:f3:89:3f:13:c7:07:ee:
                    99:af:73:06:8f:a2:59:05:0b:15:3f:9b:97:46:13:
                    db:2b:ab:b2:67:fb:42:c6:a5:04:a6:ac:72:80:77:
                    0c:d0:6a:a6:5c:a0:81:7d:0b:08:71:23:88:42:0d:
                    e3:a1:9d:04:7a:19:ee:10:a7:31:ac:aa:56:be:db:
                    b1:73:fc:a4:5e:0d:43:a3:20:78:09:2e:a2:88:ed:
                    a4:10:16:60:34:b1:c7:bf:fd:fa:34:c7:39:21:fc:
                    b0:3b:a7:9e:f8:83:78:c8:43:67:0a:f1:d2:b9:93:
                    2f:05:07:f5:78:d1:9d:cb:ed:2e:f8:0e:22:0f:d3:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:47:E2:61:CF:0E:DA:DE:E1:C1:1F:25:94:ED:95:93:62:BC:84:6E
            X509v3 Authority Key Identifier:
                keyid:12:74:B2:15:C6:F6:4E:38:F7:AB:57:BF:1C:BC:E4:84:9C:85:3D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnSyFcb2Tjj3q1e_HLzkhJyFPaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ec3b5a-2143-48ee-8daa-4d88a83e8b7a/1/0kfiYc8O2t7hwR8llO2Vk2K8hG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ec3b5a-2143-48ee-8daa-4d88a83e8b7a/1/EnSyFcb2Tjj3q1e_HLzkhJyFPaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.119.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:cf:8b:29:c2:3e:43:b2:e9:a0:8e:f7:d4:a1:db:58:a4:
         46:73:86:d7:47:44:03:64:19:b0:5a:cc:6e:92:1b:d8:4c:70:
         46:a0:53:66:92:c1:50:c8:bb:c4:8c:41:e8:fa:52:34:49:46:
         58:bf:96:fc:58:d8:0f:96:1e:77:41:fb:93:a1:94:a2:bf:c7:
         93:8b:35:ab:2b:1f:6e:fb:cd:a9:93:b1:f3:46:68:1a:14:41:
         39:32:de:52:ca:aa:8d:56:ce:4e:38:1c:6d:15:fb:54:5d:18:
         cb:98:e3:78:5f:88:40:b3:f8:a0:62:df:50:dd:31:d0:8f:af:
         2f:42:c4:85:2a:ab:18:5d:a5:0a:e8:c6:b0:47:76:b3:1c:67:
         8b:23:13:c0:62:b7:4b:cf:41:d0:3c:31:a9:71:0c:2b:73:4f:
         6f:ed:9f:a2:69:4e:da:5e:0e:d2:a0:16:e7:42:ef:14:c3:2b:
         05:96:c9:c2:15:78:60:39:ac:a5:39:66:6e:0f:06:6d:db:0d:
         c7:38:9b:b0:94:fa:46:37:3b:15:12:45:bf:ff:69:f2:36:b6:
         b7:86:38:e5:c6:41:dd:3d:a3:d0:a4:5a:c2:7d:da:7b:46:8d:
         99:40:9e:51:7e:05:4f:ba:24:2b:53:67:79:32:3e:cc:24:04:
         b5:48:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----