Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/tOGkbKZ1FzMQLE7iY9DLSzAa7uU.roa
File:                     tOGkbKZ1FzMQLE7iY9DLSzAa7uU.roa (raw, json)
Hash identifier:          dbIDx2A4YVv5qgGMSPB5Dv7zU5Rz/RpEZkrudlsUSyg=
Subject key identifier:   B4:E1:A4:6C:A6:75:17:33:10:2C:4E:E2:63:D0:CB:4B:30:1A:EE:E5
Certificate issuer:       /CN=d040d2d2bcd33c50739125b9ea57ce3cfb204d7f
Certificate serial:       05894AA8
Authority key identifier: D0:40:D2:D2:BC:D3:3C:50:73:91:25:B9:EA:57:CE:3C:FB:20:4D:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EDS0rzTPFBzkSW56lfOPPsgTX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/tOGkbKZ1FzMQLE7iY9DLSzAa7uU.roa
Signing time:             Tue 15 Mar 2022 11:24:29 +0000
ROA not before:           Tue 15 Mar 2022 11:24:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        91.230.49.0/24 maxlen: 24
                          2a12:a8c0::/29 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92883624 (0x5894aa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d040d2d2bcd33c50739125b9ea57ce3cfb204d7f
        Validity
            Not Before: Mar 15 11:24:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4e1a46ca6751733102c4ee263d0cb4b301aeee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:86:44:95:20:a0:7d:19:e2:79:11:aa:9b:
                    b1:22:7b:31:89:22:8c:d4:a7:65:ff:fb:65:3a:74:
                    7e:25:b0:2b:a8:09:79:26:f4:ae:e1:ae:50:36:d1:
                    58:42:80:cd:75:4a:11:7c:c3:a5:ec:21:cd:3e:34:
                    7f:c1:7f:4b:33:c4:62:fe:3f:d9:ca:eb:31:e0:ac:
                    14:fe:c7:47:ab:0c:22:f5:a5:56:49:9c:0d:91:34:
                    ed:c7:3d:e9:53:cc:61:7c:59:9e:5c:53:f3:79:3c:
                    f1:6e:fd:24:52:c6:c3:20:96:a4:31:0b:67:c1:0f:
                    f1:af:74:f4:6e:6e:1b:6d:f9:c2:78:b5:ac:7f:6a:
                    64:a7:d8:74:13:02:31:cd:7c:32:67:e3:f7:11:c4:
                    2b:bb:8a:a0:6d:64:3e:09:da:62:ea:4d:28:88:a5:
                    2f:8d:45:73:84:15:38:af:d5:c9:87:a6:b4:05:51:
                    ea:94:29:dc:6e:8b:8b:95:d7:e8:7b:0b:4a:98:8c:
                    c5:01:57:fe:3f:e2:d4:a3:36:b5:d9:4e:5b:13:62:
                    08:66:b1:20:f3:c1:fc:35:47:57:6a:77:0b:ac:e8:
                    78:b3:a9:73:7c:4e:d2:33:ab:f9:d3:4e:8c:75:ff:
                    af:43:96:94:81:d2:f5:58:e5:91:cd:f5:25:03:0b:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:A4:6C:A6:75:17:33:10:2C:4E:E2:63:D0:CB:4B:30:1A:EE:E5
            X509v3 Authority Key Identifier:
                keyid:D0:40:D2:D2:BC:D3:3C:50:73:91:25:B9:EA:57:CE:3C:FB:20:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EDS0rzTPFBzkSW56lfOPPsgTX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/tOGkbKZ1FzMQLE7iY9DLSzAa7uU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/0EDS0rzTPFBzkSW56lfOPPsgTX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.49.0/24
                IPv6:
                  2a12:a8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:af:e7:30:ae:90:58:cd:47:87:11:89:7a:5a:20:b2:2e:
         1f:bb:aa:44:78:e4:2c:33:31:b0:1b:c4:95:0d:fe:02:7d:fa:
         2d:bb:b7:4b:fe:a7:22:a2:9e:4b:10:1a:3f:c4:5e:a9:30:ca:
         10:e6:64:2d:47:7c:be:52:1d:29:00:32:d5:58:bc:2f:fa:7a:
         09:38:64:2f:00:29:85:8d:ec:57:38:ab:2e:1a:e2:a4:f3:4f:
         8b:d2:ff:b6:20:14:38:f7:aa:93:64:15:f0:df:44:d2:57:b0:
         34:02:7a:80:95:87:97:41:12:1f:02:b8:63:07:24:96:25:f6:
         a6:a6:54:1e:7e:51:31:80:c7:c9:e7:f0:e5:3b:cd:8b:77:f5:
         9e:b9:a9:b9:56:8a:f8:12:4d:65:ee:59:37:e1:c2:c2:f6:5f:
         80:a3:c3:df:fe:e3:b9:23:9c:31:3b:09:26:fe:82:60:02:35:
         68:7b:1a:38:2c:91:33:c7:ec:ac:04:35:3c:bf:f2:ee:27:3d:
         a7:75:dd:0c:83:b6:c0:63:25:a7:ff:e3:af:19:55:5b:b0:f9:
         84:65:9a:0b:86:d2:72:1c:4d:bf:83:50:d4:d4:f5:85:3f:33:
         39:7f:9a:48:0e:bb:e9:09:27:5f:af:a1:55:16:0a:f8:f2:6d:
         08:59:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----