Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/Al-2Nc0oHg48_XreDk93KNvefSg.roa
File:                     Al-2Nc0oHg48_XreDk93KNvefSg.roa (raw, json)
Hash identifier:          Vd1xfJ0bKJI98ZwHfSoRbsWNtAIIalvpbES1IqWGAss=
Subject key identifier:   02:5F:B6:35:CD:28:1E:0E:3C:FD:7A:DE:0E:4F:77:28:DB:DE:7D:28
Certificate issuer:       /CN=600a32e803fb2bf4f47b17877a812599a3fbf0ad
Certificate serial:       0185719580FC3550254AD04236918B12EF19
Authority key identifier: 60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAoy6AP7K_T0exeHeoElmaP78K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/Al-2Nc0oHg48_XreDk93KNvefSg.roa
Signing time:             Mon 02 Jan 2023 08:25:01 +0000
ROA not before:           Mon 02 Jan 2023 08:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41776
IP address blocks:        185.194.13.0/24 maxlen: 24
                          2a0f:f140::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:80:fc:35:50:25:4a:d0:42:36:91:8b:12:ef:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a32e803fb2bf4f47b17877a812599a3fbf0ad
        Validity
            Not Before: Jan  2 08:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=025fb635cd281e0e3cfd7ade0e4f7728dbde7d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:66:af:c1:13:cb:53:91:51:39:30:25:8b:
                    e4:e4:db:d7:b7:7e:9e:24:c5:4c:f6:23:a2:c1:a1:
                    1a:29:65:d6:81:61:82:5c:7a:01:af:d0:fc:30:f1:
                    76:90:f5:dd:8f:d0:a9:e2:3a:a9:5a:c2:37:76:c8:
                    03:27:c6:31:3f:da:d4:26:34:72:2a:f9:35:80:0e:
                    0c:1c:29:05:88:7a:ba:d4:51:7f:27:6e:fc:c5:35:
                    b2:72:68:44:46:df:f8:ab:57:d8:ac:12:a3:d3:a5:
                    0c:31:2b:b0:76:d5:e1:b6:f3:29:48:e0:78:0d:f1:
                    70:33:b6:0e:8a:2a:9e:ac:a0:16:a7:51:99:40:96:
                    e8:a0:a7:a8:52:23:20:11:64:21:9c:e6:fa:a1:1a:
                    37:3d:3c:da:da:d7:9a:40:5c:8b:de:b6:38:2e:74:
                    66:07:9a:b7:88:2a:63:76:dc:16:95:21:ce:c6:f8:
                    75:0b:fe:aa:15:f1:f9:d4:2f:90:a9:bd:fe:4f:11:
                    3a:c4:9e:34:27:69:2f:be:ca:c4:df:a9:13:02:7f:
                    90:e0:a4:4c:a5:0c:24:9c:25:e3:99:2b:f8:eb:36:
                    93:15:eb:96:2f:89:7f:66:b8:8d:60:cd:6f:d3:81:
                    bf:d3:07:29:d9:bd:6c:36:f7:be:80:8e:a1:da:13:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5F:B6:35:CD:28:1E:0E:3C:FD:7A:DE:0E:4F:77:28:DB:DE:7D:28
            X509v3 Authority Key Identifier:
                keyid:60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAoy6AP7K_T0exeHeoElmaP78K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/Al-2Nc0oHg48_XreDk93KNvefSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.13.0/24
                IPv6:
                  2a0f:f140::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:8a:5e:c3:81:ea:99:65:c4:e1:b9:42:5d:7e:07:2b:a3:
         45:42:f6:8a:5b:50:85:da:c1:31:81:eb:ed:5f:2f:43:eb:28:
         74:51:fa:34:07:d6:69:2f:eb:2a:ad:03:4c:15:17:a3:fc:98:
         4d:15:85:3b:64:40:a9:23:10:21:52:61:40:36:fc:cb:78:b1:
         28:f9:fc:29:3d:d4:fc:54:8a:bb:b6:23:f0:3c:89:62:55:23:
         63:b4:06:15:1e:c9:fc:8b:9d:a9:54:25:c1:29:9f:45:d2:ed:
         08:77:09:dd:4f:b5:8a:2e:5a:75:08:dd:96:2d:79:5e:b3:a3:
         1e:f9:6f:38:83:33:e9:15:08:03:ae:92:d7:c7:38:8f:b1:05:
         39:27:7f:0a:ee:4d:b4:70:3d:fe:7a:19:48:1f:38:cf:97:34:
         0e:da:52:37:28:ab:a2:57:e7:b9:bb:5d:65:20:f7:12:73:a8:
         5d:14:6d:c7:bb:27:e0:3a:d8:58:04:c7:38:79:0a:df:ce:5e:
         6c:24:d8:49:de:c9:dd:5f:b1:ed:7b:49:1d:54:43:24:b6:f1:
         86:b9:a1:95:c8:04:c3:a8:96:80:2c:e7:40:ea:3a:42:a6:fe:
         8a:e1:26:7f:d7:49:37:4a:8b:93:c3:6e:8c:b2:9e:c4:b1:96:
         bc:7f:2e:26
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxlYD8NVAlStBCNpGLEu8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGEzMmU4MDNmYjJiZjRmNDdiMTc4NzdhODEyNTk5YTNm
YmYwYWQwHhcNMjMwMTAyMDgyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjVmYjYzNWNkMjgxZTBlM2NmZDdhZGUwZTRmNzcyOGRiZGU3ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LFmr8ETy1ORUTkwJYvk5NvXt36e
JMVM9iOiwaEaKWXWgWGCXHoBr9D8MPF2kPXdj9Cp4jqpWsI3dsgDJ8YxP9rUJjRy
Kvk1gA4MHCkFiHq61FF/J278xTWycmhERt/4q1fYrBKj06UMMSuwdtXhtvMpSOB4
DfFwM7YOiiqerKAWp1GZQJbooKeoUiMgEWQhnOb6oRo3PTza2teaQFyL3rY4LnRm
B5q3iCpjdtwWlSHOxvh1C/6qFfH51C+Qqb3+TxE6xJ40J2kvvsrE36kTAn+Q4KRM
pQwknCXjmSv46zaTFeuWL4l/ZriNYM1v04G/0wcp2b1sNve+gI6h2hNCdwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAJftjXNKB4OPP163g5Pdyjb3n0oMB8GA1UdIwQY
MBaAFGAKMugD+yv09HsXh3qBJZmj+/CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFveTZBUDdLX1QwZXhlSGVvRWxtYVA3OEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNjFkZDktNGM4ZS00NjA4LWIxY2It
NzRlNWIyZjQ2MDc5LzEvQWwtMk5jMG9IZzQ4X1hyZURrOTNLTnZlZlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iNjFkZDktNGM4ZS00NjA4LWIxY2ItNzRlNWIyZjQ2MDc5
LzEvWUFveTZBUDdLX1QwZXhlSGVvRWxtYVA3OEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucINMA0E
AgACMAcDBQMqD/FAMA0GCSqGSIb3DQEBCwUAA4IBAQCBWopew4HqmWXE4blCXX4H
K6NFQvaKW1CF2sExgevtXy9D6yh0Ufo0B9ZpL+sqrQNMFRej/JhNFYU7ZECpIxAh
UmFANvzLeLEo+fwpPdT8VIq7tiPwPIliVSNjtAYVHsn8i52pVCXBKZ9F0u0Idwnd
T7WKLlp1CN2WLXles6Me+W84gzPpFQgDrpLXxziPsQU5J38K7k20cD3+ehlIHzjP
lzQO2lI3KKuiV+e5u11lIPcSc6hdFG3HuyfgOthYBMc4eQrfzl5sJNhJ3sndX7Ht
e0kdVEMktvGGuaGVyATDqJaALOdA6jpCpv6K4SZ/10k3SouTw26Msp7EsZa8fy4m
-----END CERTIFICATE-----