Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa
File:                     QfMaN8XD6PcKf6myyz-0j4fnkcw.roa (raw, json)
Hash identifier:          YHE/Gt+bMjp+Z+4qLgwR3M/CPVtf/kFYVpqIj+eEcqI=
Subject key identifier:   41:F3:1A:37:C5:C3:E8:F7:0A:7F:A9:B2:CB:3F:B4:8F:87:E7:91:CC
Certificate issuer:       /CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Certificate serial:       01856FF9629513F4197D7DD58A042C5D0396
Authority key identifier: 1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa
Signing time:             Mon 02 Jan 2023 00:54:52 +0000
ROA not before:           Mon 02 Jan 2023 00:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50131
IP address blocks:        188.93.139.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:62:95:13:f4:19:7d:7d:d5:8a:04:2c:5d:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
        Validity
            Not Before: Jan  2 00:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41f31a37c5c3e8f70a7fa9b2cb3fb48f87e791cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:24:b2:95:63:b5:c6:23:ea:74:43:ba:89:
                    3d:b9:15:da:51:f6:46:fc:25:c6:e1:13:78:d0:58:
                    dd:97:57:0c:34:07:a6:f4:e3:7f:9d:4e:b7:65:8f:
                    67:32:54:2b:23:65:5c:5a:c8:33:e3:8f:59:86:bd:
                    4c:72:7c:68:4c:8c:1f:0b:66:7f:d9:1e:d3:7f:01:
                    47:e1:9c:66:da:bf:9d:44:51:a5:97:bd:13:d7:d1:
                    31:ca:c7:ee:11:da:7a:b2:c8:28:c5:a0:11:b7:c0:
                    ad:d7:97:51:25:4b:b9:b0:db:ad:d2:83:98:63:7b:
                    7c:40:00:21:7e:69:9b:c3:53:40:71:ae:f0:f7:24:
                    5c:17:aa:a8:23:9c:02:c0:04:26:1f:0e:09:a2:7b:
                    e4:dc:e6:9a:dc:95:d1:8d:51:70:24:ea:43:ce:57:
                    9c:a7:f6:94:57:c2:4b:0a:fb:fb:dd:ce:86:c0:33:
                    7c:25:2f:cd:a0:39:69:93:ec:f6:a0:27:b9:89:0f:
                    95:fa:a1:1d:73:5c:ee:6b:5b:61:59:45:4b:57:f2:
                    31:ec:e4:04:63:37:6a:26:ea:ca:10:85:f7:3e:9b:
                    b8:20:11:e7:8d:ba:e1:07:31:5e:2e:80:77:29:ce:
                    e9:af:5d:ec:21:fb:de:de:d3:d8:1d:a2:62:95:80:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:1A:37:C5:C3:E8:F7:0A:7F:A9:B2:CB:3F:B4:8F:87:E7:91:CC
            X509v3 Authority Key Identifier:
                keyid:1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f0:0b:35:b1:f3:dd:3d:0c:de:7a:bf:bd:27:e8:a0:f3:9a:
         4c:95:83:85:df:77:d3:e3:aa:ad:dd:73:24:a6:1d:16:cc:9c:
         3b:e6:f1:d4:cc:b9:de:af:ed:c9:27:c2:30:e8:83:d4:7a:55:
         31:ed:57:5c:06:28:13:02:de:8c:23:df:11:ce:4b:1d:6e:a0:
         34:bb:d2:85:89:b7:e3:0e:f6:0e:b2:5d:a5:df:3b:0c:9a:be:
         ad:0b:ef:51:79:2f:6c:eb:dc:5d:7e:fe:59:5d:33:11:78:3b:
         73:fd:ea:9d:cc:08:bb:a3:41:ec:e5:d1:82:b7:30:60:34:52:
         9a:d6:04:23:a8:12:c1:a6:ff:db:c7:b5:7f:c2:d4:a5:df:ef:
         ed:a5:cb:15:05:02:39:e6:5f:a3:74:93:45:89:b2:fe:13:86:
         d5:4e:85:c1:36:a6:b1:60:10:49:fc:65:c1:be:7d:57:66:d4:
         47:00:87:6f:57:68:95:8c:34:43:0b:8a:0c:23:fb:9b:96:9e:
         69:f3:2e:5f:d4:aa:f4:64:63:d7:10:1f:49:65:27:4d:b2:6d:
         92:27:d1:52:a3:48:a2:2c:57:8d:d1:8a:7d:99:a4:42:a9:1c:
         73:84:b9:d0:3b:2c:dd:92:7a:30:f9:5d:b5:33:fa:c0:52:9a:
         7d:16:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----