Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/92495c-19a3-4aca-84b3-a63f5a4308a0/1/C2cM6tpqbVusS6Y7Ks3R0dR-kc4.roa
File:                     C2cM6tpqbVusS6Y7Ks3R0dR-kc4.roa (raw, json)
Hash identifier:          ID+iQ8MKzC8Vv1f+lPaqxvT+KOeRj++LvzjBlZzxtg8=
Subject key identifier:   0B:67:0C:EA:DA:6A:6D:5B:AC:4B:A6:3B:2A:CD:D1:D1:D4:7E:91:CE
Certificate issuer:       /CN=a8de097b588a0f66bc6ab7f2ed1dab803ec5d04d
Certificate serial:       0F8FD87C
Authority key identifier: A8:DE:09:7B:58:8A:0F:66:BC:6A:B7:F2:ED:1D:AB:80:3E:C5:D0:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN4Je1iKD2a8arfy7R2rgD7F0E0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/92495c-19a3-4aca-84b3-a63f5a4308a0/1/C2cM6tpqbVusS6Y7Ks3R0dR-kc4.roa
Signing time:             Sat 01 Jan 2022 02:58:57 +0000
ROA not before:           Sat 01 Jan 2022 02:58:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39029
IP address blocks:        195.88.54.0/23 maxlen: 24
                          2001:67c:21e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261085308 (0xf8fd87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8de097b588a0f66bc6ab7f2ed1dab803ec5d04d
        Validity
            Not Before: Jan  1 02:58:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b670ceada6a6d5bac4ba63b2acdd1d1d47e91ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:28:b6:e4:fa:5b:66:fc:32:5a:60:1e:5d:
                    89:ce:db:c2:d5:5e:3c:d9:03:fb:de:56:9f:b0:53:
                    fc:8b:db:71:3a:85:58:e4:35:38:ea:23:a6:c2:9c:
                    e8:a1:cd:48:30:c3:7c:86:b7:f4:09:9e:56:4f:b8:
                    a0:16:e7:2b:fe:b7:21:97:78:74:c3:68:38:ac:48:
                    2a:8d:48:cb:4b:da:9d:a8:0b:76:75:c3:a1:88:5f:
                    e5:e8:89:f9:f5:99:1b:6b:8a:45:06:e2:56:3c:60:
                    58:97:6d:49:4b:92:58:08:67:22:3c:2a:16:da:1e:
                    67:60:0b:d2:0d:9a:6f:cb:c7:12:b9:06:c0:10:b0:
                    58:44:50:08:f8:54:ed:02:32:94:77:0c:a5:f6:c4:
                    80:79:48:19:97:ef:8a:65:70:59:71:56:12:7a:69:
                    ae:26:26:6c:7f:6c:8c:28:e6:6c:92:fa:94:32:9a:
                    06:a9:d4:f6:1f:0b:c3:42:67:85:c1:06:c7:df:93:
                    f9:15:da:ed:bb:12:ed:83:da:bd:a5:65:7a:39:3e:
                    e0:55:6b:f1:02:a5:ed:e8:71:81:d0:c6:04:79:53:
                    9c:59:c3:08:4e:34:6f:22:bb:c8:e6:71:4b:3b:e9:
                    1a:d2:35:c7:fd:b4:16:e2:be:7f:80:19:da:fc:14:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:0C:EA:DA:6A:6D:5B:AC:4B:A6:3B:2A:CD:D1:D1:D4:7E:91:CE
            X509v3 Authority Key Identifier:
                keyid:A8:DE:09:7B:58:8A:0F:66:BC:6A:B7:F2:ED:1D:AB:80:3E:C5:D0:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN4Je1iKD2a8arfy7R2rgD7F0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/92495c-19a3-4aca-84b3-a63f5a4308a0/1/C2cM6tpqbVusS6Y7Ks3R0dR-kc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/92495c-19a3-4aca-84b3-a63f5a4308a0/1/qN4Je1iKD2a8arfy7R2rgD7F0E0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.54.0/23
                IPv6:
                  2001:67c:21e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:46:5a:c1:06:ce:e2:d1:57:1d:82:0c:16:bf:c3:1c:7d:
         57:9c:69:4c:83:b9:d6:22:65:2b:fd:3c:d9:38:92:1b:8f:89:
         40:d4:9e:9b:be:87:43:07:69:11:4d:84:2e:66:f7:3d:b8:8c:
         05:e7:9b:30:a7:e6:73:c3:ff:86:05:ec:ba:2d:c6:45:5e:6f:
         cb:2f:92:92:ed:d2:2f:e0:40:d5:af:76:c7:ea:5d:bd:f8:90:
         cf:f4:94:a5:e7:c6:fc:9b:47:55:7f:b3:8c:a3:99:cf:43:38:
         12:47:8e:21:b9:21:9b:b9:c7:15:b9:ee:c8:32:26:e4:76:9a:
         52:60:98:ec:4c:34:cb:e0:74:ab:9f:11:80:bb:6c:0f:fe:d3:
         76:2b:29:01:92:a0:c6:bc:66:82:d1:7b:5e:48:06:41:31:3a:
         a0:ec:ce:64:d3:8d:93:a3:8c:4c:ce:e9:01:d7:b0:d8:54:ee:
         a2:ed:7d:bb:67:ba:6b:56:3f:cf:91:0c:fb:70:ad:48:af:7a:
         fe:60:e9:78:d5:f2:5f:ac:09:82:b0:da:ee:da:22:83:a0:0b:
         12:df:ab:e1:7a:cf:f9:4b:45:0b:f0:68:0d:c3:2c:b8:06:8c:
         35:5a:26:51:a3:e7:31:c7:4f:a1:33:08:ae:c5:1d:b5:7d:9e:
         31:f7:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----