Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/hgWGZZIVLWeL0JDEjYPr5gxz7Fg.roa
File:                     hgWGZZIVLWeL0JDEjYPr5gxz7Fg.roa (raw, json)
Hash identifier:          FjqJscLQUVwn+x2Y3SKErF+YqFhvs74lzSkyzWfgNVk=
Subject key identifier:   86:05:86:65:92:15:2D:67:8B:D0:90:C4:8D:83:EB:E6:0C:73:EC:58
Certificate issuer:       /CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Certificate serial:       663736
Authority key identifier: 0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/hgWGZZIVLWeL0JDEjYPr5gxz7Fg.roa
Signing time:             Sat 01 Jan 2022 03:55:12 +0000
ROA not before:           Sat 01 Jan 2022 03:55:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6698806 (0x663736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
        Validity
            Not Before: Jan  1 03:55:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8605866592152d678bd090c48d83ebe60c73ec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:da:e9:d9:84:9c:6b:a9:3f:8d:27:40:8e:
                    48:a4:0a:ce:ce:4a:68:83:09:c5:75:a4:bb:90:cf:
                    e0:bb:37:74:30:be:0f:1c:63:9c:e4:3b:57:44:c8:
                    af:3e:af:98:32:5b:b8:70:e7:f9:68:54:b4:6c:f4:
                    05:6d:ee:4b:0e:45:99:74:62:53:06:e9:52:d4:dd:
                    99:90:32:e9:3b:e8:20:38:71:3c:dd:ac:9b:7b:bd:
                    74:b3:ea:90:88:55:a4:b2:e1:d2:c2:3e:81:8e:96:
                    46:65:f7:c2:28:2b:81:e2:3e:af:d1:4c:ba:d5:b6:
                    da:21:47:0e:88:df:4a:49:89:32:b4:e9:bf:a6:20:
                    6e:4c:ae:a5:1b:60:aa:91:b9:a2:a4:76:71:27:16:
                    b0:cb:b1:19:72:25:11:35:16:47:93:01:bb:ac:62:
                    80:72:61:92:d6:75:f0:87:d9:f9:75:1e:81:92:f8:
                    c2:bf:76:65:98:54:5e:ac:f8:7d:9e:bd:f8:e1:02:
                    14:ad:de:7d:ff:ef:23:56:8b:1c:a2:6e:54:b3:3c:
                    cc:d9:c6:6c:29:a9:d1:dd:e8:d5:07:01:a0:7c:9c:
                    bd:f4:83:40:bd:e2:0c:42:32:55:72:1f:33:46:4a:
                    5a:46:b8:3c:c1:79:52:2f:6c:a2:09:36:83:77:f3:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:05:86:65:92:15:2D:67:8B:D0:90:C4:8D:83:EB:E6:0C:73:EC:58
            X509v3 Authority Key Identifier:
                keyid:0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/hgWGZZIVLWeL0JDEjYPr5gxz7Fg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:87:a5:0f:36:7f:64:19:d7:ba:1b:e3:cc:ef:0a:d4:12:
         91:61:32:47:bc:1f:8f:26:d3:b3:bf:c6:18:87:41:28:83:94:
         d4:61:29:4e:7a:19:52:e5:f1:3b:f8:7b:2b:02:a2:38:2f:72:
         a7:6c:a8:84:87:a1:63:97:63:d5:76:7a:b1:e7:56:fa:b7:95:
         e8:6e:4b:2d:3e:3d:3e:11:03:00:5e:ba:91:77:99:1a:9a:d9:
         75:7b:86:4b:9f:6e:04:ed:2d:36:b8:92:6f:a1:4d:ed:3f:20:
         fc:33:ce:68:2a:6a:dc:9e:13:af:8d:ec:64:6c:86:65:1f:1f:
         12:37:fb:eb:7e:ae:78:d4:53:45:a2:75:dd:95:67:93:d7:3f:
         a3:37:6c:33:af:a6:1a:4f:46:7e:a0:f4:26:6f:92:83:f2:db:
         51:aa:43:6d:d1:1c:91:f3:bd:56:53:4b:53:ff:0a:70:d7:54:
         87:42:95:5a:53:a3:bb:8e:aa:4f:b4:64:e5:30:68:6e:18:91:
         5f:ef:af:65:b1:34:89:15:bd:83:e0:60:c9:50:fa:7e:b9:37:
         4d:bc:7f:6d:6d:14:87:13:a2:0a:ad:8c:6e:13:c4:df:e3:79:
         4e:aa:fc:84:5c:16:68:57:4e:5d:3e:1e:50:71:4b:db:70:d0:
         f7:43:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----