Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/CeJiVy4_7qBec9yjqBOP3TWbbAs.roa
File:                     CeJiVy4_7qBec9yjqBOP3TWbbAs.roa (raw, json)
Hash identifier:          FBBKzBZtd6o/iVxdl3cnApE9HnW7umoErzRxgZd3zcE=
Subject key identifier:   09:E2:62:57:2E:3F:EE:A0:5E:73:DC:A3:A8:13:8F:DD:35:9B:6C:0B
Certificate issuer:       /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial:       0182CB067AA978B7D9D1F62500F1DEBB606C
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/CeJiVy4_7qBec9yjqBOP3TWbbAs.roa
Signing time:             Tue 23 Aug 2022 14:06:15 +0000
ROA not before:           Tue 23 Aug 2022 14:06:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6830
IP address blocks:        91.149.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:06:7a:a9:78:b7:d9:d1:f6:25:00:f1:de:bb:60:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Aug 23 14:06:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09e262572e3feea05e73dca3a8138fdd359b6c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:43:93:a0:fb:fb:06:98:4f:ad:be:86:66:
                    0d:e6:0d:b2:33:3c:4e:82:3e:ea:f8:c2:ea:97:a6:
                    5c:54:cd:3c:ca:c9:75:11:65:83:6e:66:f3:1a:9b:
                    c2:ec:14:07:94:f5:96:8a:9c:65:3c:e6:e3:3b:48:
                    b9:c8:91:f1:4a:ed:49:a2:b8:3f:01:3a:51:50:5c:
                    ae:ee:84:1f:b8:59:a0:9c:4a:f6:09:c0:db:46:f1:
                    82:a2:73:6f:01:73:6d:15:14:7d:7d:cb:bf:e0:a0:
                    01:34:9d:57:2c:1e:c7:00:b6:f4:90:39:0b:bc:c0:
                    58:77:16:15:0d:77:45:db:94:22:a8:47:d9:06:aa:
                    f9:e1:65:e1:72:04:4f:97:26:ef:bc:7c:72:2d:d1:
                    ad:53:b4:f4:75:06:38:32:3a:74:e7:71:1b:c6:a1:
                    10:b6:a0:dc:34:cc:fa:ea:46:0f:36:0b:7c:1a:31:
                    f3:35:c7:5d:af:9e:44:be:1e:dc:16:82:af:37:e8:
                    a1:97:e0:64:52:17:ca:c4:63:8f:f2:c5:4d:ec:95:
                    9f:87:83:7c:9e:42:6c:a2:42:d4:6f:9c:08:c1:29:
                    6a:2e:38:b8:95:eb:0a:b1:55:05:28:c0:90:45:b5:
                    39:d6:b5:1a:08:26:01:4c:b9:45:57:a5:38:02:ee:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:62:57:2E:3F:EE:A0:5E:73:DC:A3:A8:13:8F:DD:35:9B:6C:0B
            X509v3 Authority Key Identifier:
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/CeJiVy4_7qBec9yjqBOP3TWbbAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:02:6a:0f:39:26:27:8a:8d:0f:b2:78:c2:18:68:27:b1:
         62:58:30:5a:9f:d4:ae:24:40:d8:92:c8:44:65:d9:2b:52:66:
         e6:63:dd:3d:b5:2e:4d:f4:36:57:91:20:ac:40:c5:37:39:51:
         96:69:71:cd:86:e5:e9:9d:f5:b7:bf:6a:cc:31:c7:7b:97:4f:
         af:60:87:25:bc:d3:34:35:9c:ad:48:bd:88:62:c2:d1:cb:50:
         fe:f3:3c:12:93:60:cc:53:12:9c:12:ea:b7:cf:05:d5:93:3a:
         d7:b0:71:52:b1:f9:ad:9b:7b:5a:da:3b:e1:50:40:2f:c4:14:
         80:be:37:50:cb:58:e6:b2:8c:73:1e:48:9b:e6:75:75:23:b6:
         ff:39:70:7c:16:36:f6:7a:14:30:48:71:bd:4e:e9:9a:6f:8c:
         fb:80:52:fd:85:d7:d5:5a:94:82:a3:3e:cb:c0:ef:ef:81:fd:
         4e:07:f7:bd:cc:bf:81:e3:a5:0b:b8:ba:7e:c1:14:51:48:46:
         3b:44:a4:1e:78:81:69:bc:09:61:df:67:fe:10:41:70:38:73:
         2e:35:73:08:d4:84:c4:6d:29:61:34:f1:1c:04:0f:a8:ef:31:
         f2:b6:ae:b0:70:14:e8:0e:be:75:d0:3f:4d:2c:f7:e8:a7:65:
         0d:0b:f0:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLLBnqpeLfZ0fYlAPHeu2BsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Nzg1MGU1NzFmM2YyYWNhMmMxZWMxZDdlNTAyZDliZDE4
NGM0NWMwHhcNMjIwODIzMTQwNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWUyNjI1NzJlM2ZlZWEwNWU3M2RjYTNhODEzOGZkZDM1OWI2YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E1Dk6D7+waYT62+hmYN5g2yMzxO
gj7q+MLql6ZcVM08ysl1EWWDbmbzGpvC7BQHlPWWipxlPObjO0i5yJHxSu1Jorg/
ATpRUFyu7oQfuFmgnEr2CcDbRvGConNvAXNtFRR9fcu/4KABNJ1XLB7HALb0kDkL
vMBYdxYVDXdF25QiqEfZBqr54WXhcgRPlybvvHxyLdGtU7T0dQY4Mjp053EbxqEQ
tqDcNMz66kYPNgt8GjHzNcddr55Evh7cFoKvN+ihl+BkUhfKxGOP8sVN7JWfh4N8
nkJsokLUb5wIwSlqLji4lesKsVUFKMCQRbU51rUaCCYBTLlFV6U4Au6CNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAniYlcuP+6gXnPco6gTj901m2wLMB8GA1UdIwQY
MBaAFKZ4UOVx8/KsosHsHX5QLZvRhMRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMzA5YjUtZjkzZi00YzYyLThkY2Ut
YjBjMTUxZTUxNmNmLzEvQ2VKaVZ5NF83cUJlYzl5anFCT1AzVFdiYkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zMzA5YjUtZjkzZi00YzYyLThkY2UtYjBjMTUxZTUxNmNm
LzEvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW5X4MA0G
CSqGSIb3DQEBCwUAA4IBAQAORAJqDzkmJ4qND7J4whhoJ7FiWDBan9SuJEDYkshE
ZdkrUmbmY909tS5N9DZXkSCsQMU3OVGWaXHNhuXpnfW3v2rMMcd7l0+vYIclvNM0
NZytSL2IYsLRy1D+8zwSk2DMUxKcEuq3zwXVkzrXsHFSsfmtm3ta2jvhUEAvxBSA
vjdQy1jmsoxzHkib5nV1I7b/OXB8Fjb2ehQwSHG9Tumab4z7gFL9hdfVWpSCoz7L
wO/vgf1OB/e9zL+B46ULuLp+wRRRSEY7RKQeeIFpvAlh32f+EEFwOHMuNXMI1ITE
bSlhNPEcBA+o7zHytq6wcBToDr510D9NLPfop2UNC/Bw
-----END CERTIFICATE-----