Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gAdpIwAT-C1ETKuoyXd6gkNtgCE.roa
File:                     gAdpIwAT-C1ETKuoyXd6gkNtgCE.roa (raw, json)
Hash identifier:          6G3mLCd1GSxvPbIugGvJhifNXlcPS313OTKW41aWHMM=
Subject key identifier:   80:07:69:23:00:13:F8:2D:44:4C:AB:A8:C9:77:7A:82:43:6D:80:21
Certificate issuer:       /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial:       01850B2ECB865BD5B5AD48EEACE01515B1CC
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gAdpIwAT-C1ETKuoyXd6gkNtgCE.roa
Signing time:             Tue 13 Dec 2022 11:11:33 +0000
ROA not before:           Tue 13 Dec 2022 11:11:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8218
IP address blocks:        185.75.241.0/24 maxlen: 24
                          2a05:5504:3::/48 maxlen: 48
                          2a05:5504:6::/48 maxlen: 48
                          2a05:5504:9::/48 maxlen: 48
                          2a05:5504:11::/48 maxlen: 48
                          2a05:5504:1::/48 maxlen: 48
                          2a05:5504:4::/48 maxlen: 48
                          2a05:5504:7::/48 maxlen: 48
                          2a05:5504:2::/48 maxlen: 48
                          2a05:5504:5::/48 maxlen: 48
                          2a05:5504:8::/48 maxlen: 48
                          2a05:5504:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0b:2e:cb:86:5b:d5:b5:ad:48:ee:ac:e0:15:15:b1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
        Validity
            Not Before: Dec 13 11:11:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=800769230013f82d444caba8c9777a82436d8021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:8d:f0:01:63:c7:a2:ea:03:54:93:94:b9:
                    5e:4e:7c:e5:06:4f:c4:51:89:aa:a5:d5:89:82:f2:
                    bd:de:fc:46:6a:ca:f4:99:f1:e9:5c:07:11:b9:88:
                    a4:26:1c:29:5c:43:65:16:41:cc:58:72:20:5a:2f:
                    f7:ce:9f:7f:46:2e:87:69:a1:24:bf:64:ed:bb:8e:
                    db:e6:75:67:fb:ac:7d:13:21:a4:0c:c4:ef:03:15:
                    01:27:16:2b:99:32:f8:ce:d0:12:2e:3c:f9:b9:99:
                    22:63:da:4a:a7:7a:1f:d4:69:96:23:ed:8d:92:0e:
                    18:b7:b5:ae:98:96:05:4f:af:ab:ab:9e:3e:02:a7:
                    3f:02:04:fb:09:1c:fb:55:d5:03:27:39:7f:6d:09:
                    56:ed:33:75:3d:fd:4d:7c:ce:4f:ec:78:c3:d4:c5:
                    69:43:cb:6a:63:8c:25:a6:b6:03:29:85:21:ef:ea:
                    cb:7d:97:18:af:7a:af:0c:ac:1d:d8:dc:d4:7e:f5:
                    73:57:38:00:ae:95:ce:e9:ff:5a:83:b7:e2:bb:68:
                    62:fb:2c:01:98:a1:99:11:f8:00:35:cd:56:be:2f:
                    06:52:e7:1b:c3:82:36:fb:22:c0:bb:57:84:e2:17:
                    22:89:b2:e0:54:22:db:28:42:79:f5:69:fe:66:b8:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:69:23:00:13:F8:2D:44:4C:AB:A8:C9:77:7A:82:43:6D:80:21
            X509v3 Authority Key Identifier:
                keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gAdpIwAT-C1ETKuoyXd6gkNtgCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.241.0/24
                IPv6:
                  2a05:5504:1::-2a05:5504:9:ffff:ffff:ffff:ffff:ffff
                  2a05:5504:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         58:97:9d:06:5f:d3:46:44:84:a3:c8:ee:a9:72:21:fd:c5:b3:
         9b:d3:b0:61:1e:8c:6c:ce:78:b9:0a:33:ec:ef:95:01:3e:2c:
         f9:08:28:71:cd:52:5c:30:d1:d3:d4:eb:45:ee:8e:95:01:62:
         3a:e1:a3:8f:f6:f0:84:a2:24:f7:5d:d9:f8:6e:13:d2:f6:79:
         18:31:22:68:03:fa:66:8b:52:7d:dc:8a:00:b3:aa:4c:0a:40:
         3d:f5:6f:e4:3f:cd:dd:46:24:14:a6:63:83:6a:35:b5:e5:bc:
         76:f0:66:95:17:e7:2f:2d:3c:e9:77:65:38:29:cf:7e:b4:d8:
         40:4c:6d:67:3c:ac:c2:13:2e:45:e0:b7:14:f1:19:70:dc:c3:
         98:2f:da:68:62:f9:6f:bf:0a:73:fa:90:10:bf:9a:ef:86:0b:
         d5:1f:b8:28:8a:95:51:e8:3e:29:6f:e7:19:ca:65:03:96:25:
         a2:fb:29:99:fd:1e:f6:87:1a:36:e7:e9:5c:8c:57:aa:5a:88:
         3b:b1:65:ba:9d:ed:69:b7:06:8a:43:57:dd:f3:71:74:47:49:
         23:11:8b:f1:74:d2:0f:01:94:b8:fd:ae:4d:02:6a:9f:6e:ef:
         f8:89:5a:a8:e6:16:a4:3a:b5:87:9d:c6:01:df:18:e3:d6:94:
         c6:d8:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----