Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/FV55xMF8RqRawX5t6AYjITd87LU.roa
File:                     FV55xMF8RqRawX5t6AYjITd87LU.roa (raw, json)
Hash identifier:          h/AcZ7GxscY6rp9SYbT+LS5uvaPoGPIq39n4W3GVeg8=
Subject key identifier:   15:5E:79:C4:C1:7C:46:A4:5A:C1:7E:6D:E8:06:23:21:37:7C:EC:B5
Certificate issuer:       /CN=7db45b874542d922ef21baa487ac23f10ae1bd3d
Certificate serial:       03F17AD2
Authority key identifier: 7D:B4:5B:87:45:42:D9:22:EF:21:BA:A4:87:AC:23:F1:0A:E1:BD:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbRbh0VC2SLvIbqkh6wj8QrhvT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/FV55xMF8RqRawX5t6AYjITd87LU.roa
Signing time:             Sat 01 Jan 2022 15:57:38 +0000
ROA not before:           Sat 01 Jan 2022 15:57:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197018
IP address blocks:        193.243.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66157266 (0x3f17ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db45b874542d922ef21baa487ac23f10ae1bd3d
        Validity
            Not Before: Jan  1 15:57:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=155e79c4c17c46a45ac17e6de8062321377cecb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:da:c8:cc:d7:24:76:7d:8b:61:0b:20:fa:
                    ee:b9:2c:cc:d8:c8:08:11:d5:cc:c8:45:28:9a:36:
                    50:38:60:07:a1:c0:1e:78:1c:3d:c5:c8:0e:c4:d5:
                    85:d8:7b:bb:4e:c1:d7:41:62:3f:65:5f:85:86:61:
                    e9:61:66:47:e9:b7:b0:dd:d5:8f:f3:52:c0:fb:ab:
                    74:a6:33:97:cf:62:9c:22:cc:89:06:9f:38:85:0d:
                    7b:7d:a7:1d:e0:f6:a5:7e:12:de:fb:98:b3:f8:64:
                    4a:31:9e:c6:04:0c:01:da:60:f1:cf:8d:9f:98:e7:
                    4b:b9:03:c3:04:7d:ad:03:62:34:c8:f6:b6:01:9e:
                    9f:4e:be:db:e9:53:50:a7:0a:23:6e:cf:43:86:67:
                    25:c8:e7:59:ec:89:f7:32:51:20:b8:7f:b3:3b:bb:
                    09:3c:ba:86:25:2e:75:52:5c:b0:42:38:1b:20:92:
                    e0:b6:9e:95:4c:ba:87:88:16:3e:60:a0:08:90:bd:
                    14:40:7b:fc:f7:1e:2f:a1:a2:46:44:58:16:4e:a4:
                    4f:16:57:4e:7a:c3:e0:e6:28:7b:47:10:0b:fc:2f:
                    f1:7e:63:eb:98:cd:94:12:a3:e6:37:6e:b2:7b:3e:
                    94:57:63:ec:6d:30:07:14:91:64:38:4c:7d:35:08:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:79:C4:C1:7C:46:A4:5A:C1:7E:6D:E8:06:23:21:37:7C:EC:B5
            X509v3 Authority Key Identifier:
                keyid:7D:B4:5B:87:45:42:D9:22:EF:21:BA:A4:87:AC:23:F1:0A:E1:BD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbRbh0VC2SLvIbqkh6wj8QrhvT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/FV55xMF8RqRawX5t6AYjITd87LU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/fbRbh0VC2SLvIbqkh6wj8QrhvT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:99:12:29:7d:95:ed:ac:91:14:94:d8:a7:a8:29:10:ff:
         da:3b:58:01:fa:34:d2:7c:bf:c2:91:9c:48:b3:b4:34:00:82:
         cb:0e:0e:19:a3:7a:e5:7f:b1:8f:41:d2:4c:20:1f:08:c3:1a:
         aa:47:ce:ea:9b:ab:b2:be:a5:ba:90:84:a6:63:cd:34:90:ce:
         2d:32:27:82:c3:e4:27:e7:e0:e5:4b:93:46:b2:73:ee:9f:86:
         47:11:ac:1d:75:ba:07:91:c4:8f:7c:54:07:a6:bb:c3:59:f3:
         7f:10:13:87:a0:1d:e1:4c:0e:ae:09:5f:b3:33:eb:9a:95:72:
         2b:c0:53:a9:f4:6d:0f:c3:c2:28:3b:c6:7e:3f:00:4c:b1:c1:
         67:7b:fd:22:e2:2e:71:a6:7a:78:8d:dd:ec:53:e8:05:6e:80:
         46:5a:a8:43:b2:79:62:d3:96:a7:ac:49:e9:05:cd:f8:d8:88:
         09:09:7a:b7:6f:40:d9:d4:2d:da:32:5f:05:89:92:96:4e:01:
         3b:b9:ba:4a:4a:30:20:9d:8f:31:df:78:bf:e1:07:36:c5:80:
         41:0d:af:ff:cd:ab:43:9f:28:f5:78:e0:8d:31:86:b5:70:ca:
         3b:2b:c7:83:0f:a6:18:9c:53:e3:bd:91:39:6b:f0:9d:41:c5:
         71:cf:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----