Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/Htq3SBStwv0nBtUFtI5oFtRc8wQ.roa
File:                     Htq3SBStwv0nBtUFtI5oFtRc8wQ.roa (raw, json)
Hash identifier:          KjQniDgVJ92mBQL/BikZfrjFYFqt7fKAlZLwbWzkDn8=
Subject key identifier:   1E:DA:B7:48:14:AD:C2:FD:27:06:D5:05:B4:8E:68:16:D4:5C:F3:04
Certificate issuer:       /CN=fac46e0633fc4b5ce2d81a7faceb6167ce42a895
Certificate serial:       018A278B6032D4FB97FE6CD016DDCF081E7A
Authority key identifier: FA:C4:6E:06:33:FC:4B:5C:E2:D8:1A:7F:AC:EB:61:67:CE:42:A8:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/Htq3SBStwv0nBtUFtI5oFtRc8wQ.roa
Signing time:             Thu 24 Aug 2023 12:36:00 +0000
ROA not before:           Thu 24 Aug 2023 12:36:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61207
IP address blocks:        185.215.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:27:8b:60:32:d4:fb:97:fe:6c:d0:16:dd:cf:08:1e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac46e0633fc4b5ce2d81a7faceb6167ce42a895
        Validity
            Not Before: Aug 24 12:36:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1edab74814adc2fd2706d505b48e6816d45cf304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:77:7c:97:5c:ad:03:3b:44:78:94:33:ba:
                    49:75:3b:a2:45:a0:cd:7a:81:bf:76:85:c5:e4:d5:
                    64:77:f8:ab:80:1d:08:7f:5a:12:3a:f1:33:3d:26:
                    ea:d9:5e:0e:87:1f:0d:91:d6:c8:8c:99:39:d6:bc:
                    f3:b3:ae:6e:9c:35:eb:cd:f9:bb:31:de:18:5a:b8:
                    e2:01:8b:9c:89:2f:27:95:79:88:15:c3:5d:ad:c9:
                    af:e5:8b:fb:51:58:d4:bd:82:a5:ff:b7:5f:f5:bc:
                    1a:4f:4d:7d:46:a0:59:30:3a:0a:c8:79:8b:7a:f3:
                    19:41:8a:72:2b:fc:c3:1b:14:9e:7b:78:3e:f5:0b:
                    3a:bd:e7:db:fe:c3:1c:bc:7b:50:39:2c:4d:22:11:
                    fa:69:29:5c:3e:3c:be:c4:1e:82:96:3e:be:a6:c7:
                    61:92:86:32:58:91:76:2e:dd:ce:1e:a9:b8:6e:97:
                    70:0b:b8:fb:74:84:21:73:a1:90:2d:ed:9b:75:e6:
                    95:22:5c:c0:84:8f:b6:06:3c:99:f3:34:9f:c8:1b:
                    07:70:e4:80:21:88:34:9d:f3:44:03:e4:98:8a:b9:
                    ae:cf:61:4e:69:3f:18:5a:32:f6:43:73:f7:52:aa:
                    5c:6b:ef:44:45:3d:b6:b2:b5:cc:45:ec:9b:2e:8c:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:B7:48:14:AD:C2:FD:27:06:D5:05:B4:8E:68:16:D4:5C:F3:04
            X509v3 Authority Key Identifier:
                keyid:FA:C4:6E:06:33:FC:4B:5C:E2:D8:1A:7F:AC:EB:61:67:CE:42:A8:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/Htq3SBStwv0nBtUFtI5oFtRc8wQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:5e:a5:d4:56:6a:b2:ac:8f:fc:9c:4a:19:a3:c0:45:72:
         92:86:61:d2:22:90:93:5b:c0:88:7b:2d:8d:1d:12:8f:67:4f:
         76:33:c0:cf:f4:57:66:fe:a2:01:bd:47:e5:50:04:09:ac:3b:
         5f:7e:38:e2:c2:62:b5:1e:e8:a9:bb:46:da:db:ae:42:74:ea:
         33:78:13:6c:e8:9d:57:1a:f7:a6:05:f8:20:7d:bc:a4:97:5a:
         d0:0b:9e:0d:ba:fc:2b:ab:b6:46:5a:77:b4:cb:75:46:50:3c:
         29:25:05:8e:ac:f8:7c:c5:26:d0:19:8f:f4:b4:e1:67:69:80:
         66:e9:a1:6c:7d:3a:6e:a9:d3:72:f2:22:20:5f:60:24:f0:2a:
         48:1d:49:7e:78:50:9a:3b:04:b7:69:49:ba:2a:84:28:fc:f1:
         b4:7b:2b:b2:ad:c8:73:4d:f2:01:7d:e0:e4:bb:27:53:c1:09:
         ce:c2:99:ab:95:fe:33:9c:04:39:07:af:6a:09:a4:a9:f1:48:
         91:8d:71:00:d3:09:14:e5:b3:68:f6:dc:3a:b0:0b:19:a6:bf:
         f0:ff:7c:5c:88:1f:9a:ca:4e:7b:06:45:0f:b1:a9:19:1f:79:
         78:b8:3d:b2:b8:f6:a2:13:88:d0:63:f7:4d:a6:b4:3a:e1:6a:
         0b:d9:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----