Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/RZdORL1Xuk3Gt-quU341pjIxlWs.roa
File:                     RZdORL1Xuk3Gt-quU341pjIxlWs.roa (raw, json)
Hash identifier:          jsAPvmOppwMwHNMV0DtPJH2/VmuGMJXkOLEU1nOBRJU=
Subject key identifier:   45:97:4E:44:BD:57:BA:4D:C6:B7:EA:AE:53:7E:35:A6:32:31:95:6B
Certificate issuer:       /CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
Certificate serial:       0892604B
Authority key identifier: 1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/RZdORL1Xuk3Gt-quU341pjIxlWs.roa
Signing time:             Sat 01 Jan 2022 07:52:58 +0000
ROA not before:           Sat 01 Jan 2022 07:52:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199191
IP address blocks:        176.124.249.0/24 maxlen: 24
                          2001:67c:10bc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143810635 (0x892604b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
        Validity
            Not Before: Jan  1 07:52:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45974e44bd57ba4dc6b7eaae537e35a63231956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:0d:bb:a4:c5:a3:7b:dc:4d:7d:c2:11:20:
                    05:88:5d:fa:4a:c5:c5:72:f8:16:36:69:db:bb:6c:
                    d3:aa:ec:96:b4:42:f9:a9:63:0f:75:e4:e9:94:e1:
                    f5:a6:7e:39:10:f2:1b:6d:51:7e:45:f9:ef:3d:be:
                    11:94:60:be:f3:1d:6d:03:4c:2f:82:c0:da:f3:82:
                    7f:02:fb:e2:9f:b7:af:f9:f7:74:5d:d1:3c:14:e8:
                    1c:69:19:a4:b6:df:b2:9a:64:57:15:4c:b1:f7:e1:
                    cb:1c:eb:d3:4a:46:0e:10:c2:e3:1a:06:aa:9b:ba:
                    d3:f9:80:6c:68:92:27:e4:8b:06:a9:ad:02:49:0b:
                    37:0e:db:23:40:19:9f:03:d0:48:1e:6c:ce:11:9b:
                    50:e9:df:f8:61:ba:25:44:24:fe:45:17:d6:cf:51:
                    28:27:dc:e9:9d:a2:a3:02:21:fb:7d:af:24:1d:86:
                    a4:28:94:76:d8:50:05:f1:94:f6:90:e6:59:bc:1d:
                    71:e1:c3:06:49:3c:4a:80:e1:16:e1:65:b4:c7:df:
                    38:f4:ff:a9:c4:39:b5:99:ff:8f:31:70:35:11:68:
                    cb:43:44:26:35:81:87:22:68:6e:d0:99:d6:4a:85:
                    2c:30:6f:89:2c:eb:f2:f1:c8:69:52:b4:74:ca:25:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:4E:44:BD:57:BA:4D:C6:B7:EA:AE:53:7E:35:A6:32:31:95:6B
            X509v3 Authority Key Identifier:
                keyid:1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/RZdORL1Xuk3Gt-quU341pjIxlWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.249.0/24
                IPv6:
                  2001:67c:10bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:46:06:dc:08:28:5b:b0:d8:1b:2a:e6:a2:7f:a9:4e:91:
         70:43:72:57:60:6d:c8:af:83:5a:6c:fd:70:3e:79:42:11:95:
         a4:24:8b:43:1d:5e:95:fe:18:89:22:ad:c0:5a:8a:31:58:15:
         71:f8:0d:7f:b7:66:3b:2b:8c:5c:42:27:a3:8b:c9:75:d6:a4:
         9b:ae:ba:77:79:bc:98:b5:00:48:15:b2:e9:a2:27:3c:4a:d9:
         cd:15:5b:bd:fc:41:96:ad:31:65:28:08:55:e6:9e:ea:16:2f:
         74:02:d7:15:45:4a:9f:c5:55:1c:56:33:54:a1:28:fb:8b:c1:
         4a:cb:65:34:1e:d9:d7:0f:01:b2:03:fb:80:19:5b:e8:08:4d:
         e5:d0:ba:70:b8:41:48:bc:e9:92:28:59:30:f4:62:00:49:a1:
         ac:5a:e4:96:ab:b7:69:db:9f:40:31:1a:25:54:d0:0c:43:73:
         20:9a:8e:44:22:19:25:e0:3f:41:46:dd:8f:ae:fe:c1:30:74:
         60:ad:30:70:4c:88:11:1f:d3:a3:23:77:18:79:19:8f:f0:0f:
         53:7b:4d:27:3c:89:12:c3:e8:49:27:dd:6b:61:59:d2:5a:e5:
         8d:2d:ab:51:a5:bb:d5:b4:40:32:71:1e:ea:94:15:5b:81:e2:
         1d:a5:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----