Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa
File:                     LIUBOme4i3T1_sE9grXjIqJaqWM.roa (raw, json)
Hash identifier:          9b6FtmnAOZpb4OwgQtCpwazQSvzoZOmA1DuDgV4f1T0=
Subject key identifier:   2C:85:01:3A:67:B8:8B:74:F5:FE:C1:3D:82:B5:E3:22:A2:5A:A9:63
Certificate issuer:       /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial:       01856F4B8EC32389FB2363B01122BAB20B2A
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa
Signing time:             Sun 01 Jan 2023 21:45:00 +0000
ROA not before:           Sun 01 Jan 2023 21:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47264
IP address blocks:        185.75.240.0/24 maxlen: 24
                          2a05:5500:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:8e:c3:23:89:fb:23:63:b0:11:22:ba:b2:0b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
        Validity
            Not Before: Jan  1 21:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c85013a67b88b74f5fec13d82b5e322a25aa963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:9e:ca:f7:56:41:90:e5:e4:9c:03:91:89:
                    b2:17:5d:57:33:52:9f:3d:10:ed:eb:0c:d2:b8:cd:
                    a8:3d:1b:0f:5f:59:17:65:8f:01:75:49:42:a9:a2:
                    15:31:d9:4a:0e:30:b4:32:73:01:b9:30:11:fc:09:
                    95:74:cf:1b:4b:65:15:81:f7:05:7d:5e:56:2e:d9:
                    ce:9f:c5:f9:97:69:12:77:78:8b:68:f9:c2:5f:05:
                    4c:83:c8:02:49:f9:df:84:eb:fe:ea:9c:08:f5:28:
                    54:19:83:7e:41:2a:f9:ed:5b:cf:10:e9:31:ef:0c:
                    49:42:66:8b:e3:8f:78:c6:3e:52:45:27:3c:95:66:
                    cc:cb:11:b9:58:fe:66:0d:17:8d:4e:84:7a:51:aa:
                    a7:c5:e1:f8:32:ea:a6:66:6f:bf:e7:90:14:bf:06:
                    fe:97:e4:24:2f:94:74:56:f5:c8:7e:04:10:dc:33:
                    67:30:50:65:3a:95:c6:22:fd:d4:9d:20:42:6c:0a:
                    b0:52:93:08:e9:8a:c2:1b:ad:de:39:e9:89:3f:be:
                    2a:d0:4c:e4:e6:03:94:54:43:6b:19:f5:1a:2f:0a:
                    52:f7:c6:c7:33:e1:dc:50:eb:6f:ce:66:1b:17:1c:
                    e2:c7:09:9f:2b:f1:a8:ce:76:1d:e1:02:ca:50:ac:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:01:3A:67:B8:8B:74:F5:FE:C1:3D:82:B5:E3:22:A2:5A:A9:63
            X509v3 Authority Key Identifier:
                keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.240.0/24
                IPv6:
                  2a05:5500:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:2f:fa:08:e0:ae:c6:d5:96:dc:c1:fd:28:7b:44:0a:84:
         d1:d4:c1:c1:21:e9:70:09:5c:3d:ab:b7:fa:1d:ae:49:63:e5:
         25:cf:f1:c5:22:eb:02:b7:eb:14:f1:26:a2:6e:2e:d8:93:30:
         db:ed:21:f6:16:69:59:99:c3:93:cd:54:c2:6a:0d:88:e9:50:
         69:c2:46:3a:f7:3b:14:76:07:c2:ac:72:e7:03:5b:92:cf:b8:
         07:0e:ec:84:e0:b8:d3:5f:27:2e:5c:eb:99:a2:2a:2b:d7:26:
         8a:ce:d6:25:fa:78:a2:ca:fd:56:3e:44:0c:0e:b8:14:88:2d:
         32:ed:af:61:34:e6:dc:b8:87:9e:5a:dc:97:bb:0b:3e:16:0d:
         9e:09:6e:cd:41:e1:a6:da:e8:13:ff:41:39:30:76:2e:fc:e7:
         7e:60:a4:48:05:c9:f4:db:e8:a4:30:1d:46:c5:f2:ef:e1:c7:
         ea:5f:92:b6:df:98:22:aa:bc:5d:c4:f6:5e:10:32:ef:40:77:
         7a:93:a6:f8:24:5d:2e:a2:88:69:a3:57:f5:01:92:a8:65:c8:
         63:ee:c5:9a:8e:14:b0:a8:d9:bc:d4:88:62:f5:eb:31:93:aa:
         ad:23:ca:14:69:e6:54:cb:ae:77:58:25:81:94:f3:23:c6:a0:
         3e:6d:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----