Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/AxwDaR401a2bvyu5L2WH9T-NBK8.roa
File:                     AxwDaR401a2bvyu5L2WH9T-NBK8.roa (raw, json)
Hash identifier:          ivZREt2MYJ4xyZjALaqp9hRV8NdTM+4c0vFEzKLpPkU=
Subject key identifier:   03:1C:03:69:1E:34:D5:AD:9B:BF:2B:B9:2F:65:87:F5:3F:8D:04:AF
Certificate issuer:       /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial:       097B3078
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/AxwDaR401a2bvyu5L2WH9T-NBK8.roa
Signing time:             Tue 24 May 2022 12:29:02 +0000
ROA not before:           Tue 24 May 2022 12:29:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        91.149.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159068280 (0x97b3078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: May 24 12:29:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=031c03691e34d5ad9bbf2bb92f6587f53f8d04af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:eb:57:66:c8:5a:13:28:e8:06:d3:2a:ab:
                    29:37:ea:cd:69:84:0b:c8:63:ec:70:11:bb:eb:30:
                    4b:5e:24:bf:c5:cb:9b:6b:cc:a2:ec:0d:3a:e9:13:
                    9a:5a:5e:55:4f:f5:5e:6d:5b:71:e6:ad:bb:3a:25:
                    31:f6:a5:06:35:eb:8a:a1:dc:6f:9e:04:84:2e:9b:
                    64:ec:7e:e5:d3:62:b2:5e:f9:fb:9f:3d:62:51:00:
                    32:85:0b:98:19:08:b2:8d:e4:9a:a9:52:85:a4:7e:
                    e3:bc:77:bb:c9:a3:8b:81:bc:d3:00:dd:1e:99:ae:
                    7c:16:3e:70:5a:00:f9:60:0f:eb:04:77:29:f1:5c:
                    a3:b2:8a:be:f2:8e:c2:08:cd:f4:7d:7a:fb:93:5a:
                    23:67:d5:6a:af:d5:f0:e4:ae:05:85:f8:3e:e3:bf:
                    4b:76:ec:74:ea:a7:29:45:87:21:c9:16:5d:71:97:
                    20:e4:26:a3:7d:c2:d5:33:b2:0b:4a:ad:5f:e1:b1:
                    a1:9b:05:17:59:9b:b1:22:3f:e3:5f:4c:78:46:5e:
                    40:44:f2:e5:68:5b:3a:a6:67:50:93:a4:91:c2:b8:
                    c8:9f:3f:2f:04:62:2e:f3:f6:3f:a0:3a:32:bf:26:
                    a4:8b:02:89:cf:ef:f0:f7:a6:0b:a5:43:04:50:39:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:03:69:1E:34:D5:AD:9B:BF:2B:B9:2F:65:87:F5:3F:8D:04:AF
            X509v3 Authority Key Identifier:
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/AxwDaR401a2bvyu5L2WH9T-NBK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:a2:1e:ea:f4:3d:54:c1:cd:9f:9e:fc:ba:8c:c0:08:44:
         83:89:7c:8d:01:1a:56:5a:c6:70:62:bb:d5:67:8f:97:3c:31:
         67:9a:f4:99:9c:dd:2d:42:96:38:b2:18:a1:ea:58:76:5d:2a:
         e0:64:18:28:78:ca:2f:66:3c:5b:29:2e:4f:e2:72:36:54:1b:
         d8:39:3c:81:ab:af:93:22:10:36:b0:4d:ba:07:f5:4a:82:e7:
         3e:f4:3a:41:21:05:99:43:20:c4:4f:60:f0:e1:f2:04:3c:5e:
         bc:a7:0d:7f:83:95:33:c7:33:7c:db:64:7a:b9:68:ed:b5:ee:
         b6:51:d0:a8:85:38:a0:9e:f0:12:a4:98:75:ea:2a:9f:d9:4b:
         2d:14:22:f1:40:51:a7:4c:f3:d6:70:37:03:b8:db:ba:fb:d9:
         37:2b:13:ec:2b:8c:f0:8c:53:54:ad:8d:59:c7:14:b0:7e:7d:
         3a:12:95:3b:87:1b:ff:ad:43:44:73:ee:e1:fc:0c:47:23:ea:
         de:a6:08:97:1a:92:9e:21:ae:41:af:ef:dd:df:e7:92:aa:db:
         75:e0:cd:38:7c:0a:24:cc:a9:6c:5f:b0:b5:9e:f0:2f:63:bc:
         00:59:18:19:ae:bd:d2:86:c4:5a:3f:86:cd:bd:d4:1c:be:1d:
         ca:f6:a9:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECXsweDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Njc4NTBlNTcxZjNmMmFjYTJjMWVjMWQ3ZTUwMmQ5YmQxODRjNDVjMB4XDTIyMDUy
NDEyMjkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDMxYzAzNjkxZTM0
ZDVhZDliYmYyYmI5MmY2NTg3ZjUzZjhkMDRhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdW61dmyFoTKOgG0yqrKTfqzWmEC8hj7HARu+swS14kv8XL
m2vMouwNOukTmlpeVU/1Xm1bceatuzolMfalBjXriqHcb54EhC6bZOx+5dNisl75
+589YlEAMoULmBkIso3kmqlShaR+47x3u8mji4G80wDdHpmufBY+cFoA+WAP6wR3
KfFco7KKvvKOwgjN9H16+5NaI2fVaq/V8OSuBYX4PuO/S3bsdOqnKUWHIckWXXGX
IOQmo33C1TOyC0qtX+GxoZsFF1mbsSI/419MeEZeQETy5WhbOqZnUJOkkcK4yJ8/
LwRiLvP2P6A6Mr8mpIsCic/v8PemC6VDBFA54D8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQDHANpHjTVrZu/K7kvZYf1P40ErzAfBgNVHSMEGDAWgBSmeFDlcfPyrKLB
7B1+UC2b0YTEXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BuaFE1WEh6OHF5aXdld2RmbEF0bTlHRXhGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvMzMwOWI1LWY5M2YtNGM2Mi04ZGNlLWIwYzE1MWU1MTZjZi8x
L0F4d0RhUjQwMWEyYnZ5dTVMMldIOVQtTkJLOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
MzMwOWI1LWY5M2YtNGM2Mi04ZGNlLWIwYzE1MWU1MTZjZi8xL3BuaFE1WEh6OHF5
aXdld2RmbEF0bTlHRXhGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAluV5DANBgkqhkiG9w0BAQsFAAOC
AQEAkGqiHur0PVTBzZ+e/LqMwAhEg4l8jQEaVlrGcGK71WePlzwxZ5r0mZzdLUKW
OLIYoepYdl0q4GQYKHjKL2Y8WykuT+JyNlQb2Dk8gauvkyIQNrBNugf1SoLnPvQ6
QSEFmUMgxE9g8OHyBDxevKcNf4OVM8czfNtkerlo7bXutlHQqIU4oJ7wEqSYdeoq
n9lLLRQi8UBRp0zz1nA3A7jbuvvZNysT7CuM8IxTVK2NWccUsH59OhKVO4cb/61D
RHPu4fwMRyPq3qYIlxqSniGuQa/v3d/nkqrbdeDNOHwKJMypbF+wtZ7wL2O8AFkY
Ga690obEWj+Gzb3UHL4dyvapAw==
-----END CERTIFICATE-----