Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa
File:                     PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa (raw, json)
Hash identifier:          w4eVAE9xT/a7BzG24K3q3Ctuo1/M2OhHjw0i2Plj+HQ=
Subject key identifier:   3D:98:D1:C2:3D:96:6E:FF:CE:97:84:09:4B:28:3D:45:30:BE:4A:99
Certificate issuer:       /CN=f9751064b92bb17bac2c430084ee6b174cb01e6f
Certificate serial:       03D5E935
Authority key identifier: F9:75:10:64:B9:2B:B1:7B:AC:2C:43:00:84:EE:6B:17:4C:B0:1E:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XUQZLkrsXusLEMAhO5rF0ywHm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa
Signing time:             Sat 01 Jan 2022 06:05:25 +0000
ROA not before:           Sat 01 Jan 2022 06:05:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212559
IP address blocks:        91.243.118.0/24 maxlen: 24
                          2a10:78c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64350517 (0x3d5e935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9751064b92bb17bac2c430084ee6b174cb01e6f
        Validity
            Not Before: Jan  1 06:05:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d98d1c23d966effce9784094b283d4530be4a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:60:34:44:28:c4:e5:38:29:ed:9e:88:bb:
                    94:07:a4:7a:ea:5e:34:59:3c:4d:18:ea:ed:f8:d4:
                    28:27:17:66:7c:c4:c4:15:8c:ae:34:51:47:a1:42:
                    fd:71:c1:ec:08:46:c0:6b:53:50:4b:99:76:4e:e7:
                    41:6f:f2:21:60:39:4e:c9:b5:42:48:52:17:68:65:
                    65:58:20:df:57:26:77:a6:dc:99:7d:8f:ae:76:cf:
                    e5:5e:b1:02:31:5f:b3:95:ce:b8:73:81:dd:7f:e1:
                    17:8e:90:d9:d8:21:35:5e:8d:52:be:54:8e:3b:fb:
                    2d:be:dd:31:2d:eb:92:71:e9:86:1e:6c:a2:2c:14:
                    8e:8e:f4:2b:ec:4c:59:74:94:aa:89:65:e1:83:03:
                    0c:20:25:36:dc:9d:79:a3:fa:b1:ba:06:c8:93:83:
                    da:9b:3a:ff:53:c7:58:e1:d8:8d:c5:43:95:a6:2e:
                    ce:87:50:81:b2:7d:a0:bd:2e:dc:b0:1b:2d:f3:91:
                    8f:e8:55:18:fa:c5:4d:e2:02:ea:72:5d:8c:a8:c3:
                    10:17:62:02:e9:f1:db:0e:99:e6:5f:25:12:73:a8:
                    b7:8c:2d:cc:40:25:c4:7f:30:99:64:b4:85:fe:5e:
                    68:64:35:f7:9e:40:97:86:f0:31:12:03:bf:d7:36:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:D1:C2:3D:96:6E:FF:CE:97:84:09:4B:28:3D:45:30:BE:4A:99
            X509v3 Authority Key Identifier:
                keyid:F9:75:10:64:B9:2B:B1:7B:AC:2C:43:00:84:EE:6B:17:4C:B0:1E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XUQZLkrsXusLEMAhO5rF0ywHm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/1-XUQZLkrsXusLEMAhO5rF0ywHm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.243.118.0/24
                IPv6:
                  2a10:78c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:1f:29:bd:13:f3:26:7d:e5:0b:aa:54:db:df:5d:8b:e2:
         bb:ae:88:21:57:d0:be:01:a7:c4:37:33:8f:1c:22:93:ac:bb:
         2c:db:66:69:b7:38:f9:9e:a3:da:0f:20:1e:cd:6b:fa:df:82:
         fe:4d:25:3c:99:75:2e:02:8c:22:90:79:09:7b:8c:16:a8:53:
         64:89:50:1f:2f:e2:dc:35:d9:fb:ab:27:df:81:f7:ab:46:9d:
         e7:15:6d:23:3a:ca:cb:5b:27:9d:99:86:7c:7b:c0:9f:cb:75:
         c5:c7:f4:2f:65:e2:8d:c5:c7:f6:77:7c:60:10:04:e7:f9:a7:
         95:51:38:ad:06:f7:88:59:fb:dc:82:aa:7b:6d:97:70:76:b5:
         7a:1c:3f:c7:42:2a:e3:00:d1:31:85:80:d2:df:4b:f8:f8:4a:
         af:e3:b8:f7:cb:31:89:80:9e:01:38:2a:12:b4:5e:7c:d6:20:
         b9:6b:12:04:09:c6:3f:7c:39:5f:4b:03:60:38:e0:7f:7b:d2:
         c5:0b:64:92:69:aa:e3:87:0f:14:30:91:45:2e:c1:86:22:5c:
         b5:88:4d:15:55:b2:dd:97:b9:12:71:34:19:7d:d6:44:8d:81:
         48:7c:f8:5d:48:83:88:11:09:08:ba:ae:24:b3:c1:15:81:26:
         e3:80:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----