Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/K5ACg8KEnrJ8vxQycxGEPErJNdA.roa
File:                     K5ACg8KEnrJ8vxQycxGEPErJNdA.roa (raw, json)
Hash identifier:          O2IOVYuhnfG9SmF2RY/wZqI16pwv4NF328Wu7FS4td4=
Subject key identifier:   2B:90:02:83:C2:84:9E:B2:7C:BF:14:32:73:11:84:3C:4A:C9:35:D0
Certificate issuer:       /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial:       01843810516A32587B54EF59619858277D33
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/K5ACg8KEnrJ8vxQycxGEPErJNdA.roa
Signing time:             Wed 02 Nov 2022 11:18:24 +0000
ROA not before:           Wed 02 Nov 2022 11:18:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209982
IP address blocks:        188.241.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:38:10:51:6a:32:58:7b:54:ef:59:61:98:58:27:7d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
        Validity
            Not Before: Nov  2 11:18:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2b900283c2849eb27cbf14327311843c4ac935d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:a8:d6:bc:01:2b:45:47:aa:b1:97:b6:73:
                    44:9c:bb:a5:ef:4f:a1:92:8a:2e:41:a9:0c:4a:58:
                    b7:e4:fc:e5:24:d6:13:6f:eb:c5:41:3e:fe:68:32:
                    01:f3:4c:25:8c:bb:89:14:cb:9d:ae:c6:e2:4f:d5:
                    27:61:f8:d0:3e:68:b4:20:ae:f4:9d:b3:b0:c4:33:
                    a1:a2:74:3d:25:a3:0f:ed:f9:58:7b:3b:c3:f7:10:
                    b1:f2:49:03:e1:33:1a:29:5f:75:1d:83:91:64:1b:
                    9e:23:5e:c3:6b:3c:0c:a9:a7:97:be:21:88:f4:49:
                    7f:55:cc:8e:f5:e6:20:79:a2:e6:c2:76:ea:40:80:
                    f5:f0:70:1b:ff:ec:ae:94:e6:49:5e:0c:19:b0:0b:
                    d4:91:13:09:96:df:47:2b:42:b4:94:79:a1:29:99:
                    ae:a4:a3:ff:79:f2:0e:e6:ec:0a:fb:67:fe:d8:4d:
                    4e:70:bd:59:7a:1c:14:d3:0e:d1:05:58:d3:91:8a:
                    8e:ee:12:3b:8f:66:1c:86:81:af:51:29:14:78:48:
                    29:42:a4:6a:09:44:46:c7:cc:1a:a6:18:41:25:76:
                    a3:fe:5d:ed:21:bb:47:83:ab:02:a0:8f:6a:7b:50:
                    a5:79:98:f8:00:b4:5f:ff:4d:05:6c:93:27:8f:df:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:02:83:C2:84:9E:B2:7C:BF:14:32:73:11:84:3C:4A:C9:35:D0
            X509v3 Authority Key Identifier:
                keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/K5ACg8KEnrJ8vxQycxGEPErJNdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.241.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:10:f0:df:e5:76:c1:1c:1d:c5:7a:3c:7d:16:ef:8e:ee:
         13:01:81:57:77:bf:c3:f0:a0:1d:cd:35:de:5d:00:2a:42:57:
         db:f1:86:7d:f2:92:d5:83:cf:d5:75:d7:9a:27:0f:b1:48:fa:
         3b:a3:1b:89:9d:47:55:3d:b2:7f:d8:15:24:9c:d0:8c:6a:f3:
         12:10:06:f8:27:30:fb:44:a3:e3:ee:ac:6c:f4:98:d5:4b:26:
         31:40:02:e4:78:2f:40:c0:6e:bb:21:63:47:e7:3d:d1:b0:70:
         dc:42:f9:d4:ed:14:bf:48:4d:92:d7:30:12:b8:67:e5:b5:6b:
         52:4a:28:0c:2c:a5:60:bb:63:98:02:7f:41:51:34:d5:5a:8c:
         b8:ba:8c:94:32:c1:a5:d2:49:fd:f5:20:86:5c:1f:8b:14:19:
         a8:cd:2b:8c:4f:bd:f1:65:e2:bc:ce:f0:b4:50:56:cb:f2:e9:
         b4:0c:ce:3e:3b:e8:d3:16:93:b5:27:19:79:c9:24:1d:ea:9f:
         d5:68:ed:c2:8b:00:8f:e7:b3:7a:fd:5d:c5:8d:7a:71:8c:32:
         4d:2a:dc:04:3e:1d:0f:e8:23:2d:21:2e:77:2c:39:9d:3b:1c:
         b5:2f:2a:ec:3d:70:29:96:8d:ac:42:0e:8f:76:ac:07:ed:33:
         6c:45:ce:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ4EFFqMlh7VO9ZYZhYJ30zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMWVhMTVjMjFiN2Q1NWRlYTRiZGM4NjFiMWMwYWZjOWU0
MzcwMzEwHhcNMjIxMTAyMTExODI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjkwMDI4M2MyODQ5ZWIyN2NiZjE0MzI3MzExODQzYzRhYzkzNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeeo1rwBK0VHqrGXtnNEnLul70+h
koouQakMSli35PzlJNYTb+vFQT7+aDIB80wljLuJFMudrsbiT9UnYfjQPmi0IK70
nbOwxDOhonQ9JaMP7flYezvD9xCx8kkD4TMaKV91HYORZBueI17DazwMqaeXviGI
9El/VcyO9eYgeaLmwnbqQID18HAb/+yulOZJXgwZsAvUkRMJlt9HK0K0lHmhKZmu
pKP/efIO5uwK+2f+2E1OcL1ZehwU0w7RBVjTkYqO7hI7j2YchoGvUSkUeEgpQqRq
CURGx8waphhBJXaj/l3tIbtHg6sCoI9qe1CleZj4ALRf/00FbJMnj99i0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCuQAoPChJ6yfL8UMnMRhDxKyTXQMB8GA1UdIwQY
MBaAFJseoVwht9Vd6kvchhscCvyeQ3AxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUt
OTRjZjIyZGVlNWZlLzEvSzVBQ2c4S0Vucko4dnhReWN4R0VQRXJKTmRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZl
LzEvbXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvPGIMA0G
CSqGSIb3DQEBCwUAA4IBAQA5uBDw3+V2wRwdxXo8fRbvju4TAYFXd7/D8KAdzTXe
XQAqQlfb8YZ98pLVg8/VddeaJw+xSPo7oxuJnUdVPbJ/2BUknNCMavMSEAb4JzD7
RKPj7qxs9JjVSyYxQALkeC9AwG67IWNH5z3RsHDcQvnU7RS/SE2S1zASuGfltWtS
SigMLKVgu2OYAn9BUTTVWoy4uoyUMsGl0kn99SCGXB+LFBmozSuMT73xZeK8zvC0
UFbL8um0DM4+O+jTFpO1Jxl5ySQd6p/VaO3CiwCP57N6/V3FjXpxjDJNKtwEPh0P
6CMtIS53LDmdOxy1LyrsPXAplo2sQg6PdqwH7TNsRc7u
-----END CERTIFICATE-----