Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa
File:                     BHKSbYAKfST2ZdDwp7r1opUIguA.roa (raw, json)
Hash identifier:          2ovLp6PYRSFbSJ19y/x0B/Jd6jKGOH2l+Y9EYa41ap4=
Subject key identifier:   04:72:92:6D:80:0A:7D:24:F6:65:D0:F0:A7:BA:F5:A2:95:08:82:E0
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E82D3E7A62101154EBBDF8CDEAF2D8
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa
Signing time:             Mon 02 Jan 2023 14:34:56 +0000
ROA not before:           Mon 02 Jan 2023 14:34:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35108
IP address blocks:        80.233.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:2d:3e:7a:62:10:11:54:eb:bd:f8:cd:ea:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:34:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0472926d800a7d24f665d0f0a7baf5a2950882e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:d0:72:c2:82:2f:dd:8c:29:3c:4f:bc:12:
                    27:67:64:78:17:d8:3a:d6:50:65:11:5a:0d:02:25:
                    f5:2f:f7:ec:a5:e0:c0:64:34:34:e9:36:7d:21:8b:
                    d7:0f:17:1c:4e:a1:bb:19:ee:ae:04:51:03:14:91:
                    b8:2a:df:5a:d0:3e:37:80:17:19:47:ce:eb:57:23:
                    00:96:cb:fc:14:ef:a3:ef:97:08:f2:a0:db:da:f0:
                    8c:08:37:92:79:f6:d4:64:ed:c6:5a:2a:f8:54:d7:
                    b9:30:b0:48:1c:76:ac:bf:2e:7a:86:e6:42:76:ef:
                    1d:2c:4f:7d:d5:e1:2f:8f:50:33:59:20:e2:37:d6:
                    d5:25:8e:10:a7:a8:0b:2e:e4:98:ba:3e:c0:b4:f8:
                    72:d3:e1:8e:7d:ca:26:7c:01:c2:9d:6c:12:46:9f:
                    f2:a6:a5:a2:f5:fa:de:f3:8a:de:05:8c:68:72:08:
                    b5:45:60:5f:27:0a:12:89:26:69:97:22:86:80:38:
                    8c:f0:f4:38:2c:cd:e0:c6:62:ab:3b:35:c3:da:f1:
                    e7:e0:40:a0:c0:3c:c3:62:2f:30:70:17:64:e7:2c:
                    c9:70:0e:dd:69:f3:b9:3a:87:5d:c0:d8:b0:78:df:
                    f6:27:d8:07:63:d7:fc:08:39:52:ee:49:00:5c:1b:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:92:6D:80:0A:7D:24:F6:65:D0:F0:A7:BA:F5:A2:95:08:82:E0
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:84:79:f5:c6:05:41:26:f5:ae:ea:1c:f0:2d:bd:8c:57:ea:
         1a:8e:96:cd:5b:20:3a:32:dd:96:b9:db:c7:69:55:80:0b:c1:
         43:bc:42:11:09:46:f1:62:12:53:61:97:ff:ba:be:49:e5:fb:
         ad:17:2e:fe:4c:ec:46:6d:78:c0:d5:b4:14:20:4c:45:34:9b:
         99:ea:80:79:da:42:0a:87:2d:5c:2e:ad:a3:08:cf:0c:de:9f:
         22:59:b4:2d:cb:d2:3d:11:9d:9c:82:9c:a3:1b:38:e5:0c:9d:
         7a:9d:04:e0:32:4f:b0:09:b0:07:31:8c:d2:6c:e6:c4:dd:0e:
         26:90:b1:a9:76:d2:fa:8f:00:e4:5d:6b:af:d0:08:fa:26:19:
         f5:aa:07:1e:7b:d0:1c:fe:c5:bf:a9:a3:9d:48:b8:f5:58:f8:
         f2:d5:83:75:0b:5d:32:cf:65:74:f2:f6:c5:a0:61:52:47:39:
         2d:c4:4e:33:74:4c:a3:9f:ea:04:de:39:eb:0d:4e:b1:ff:d8:
         b7:e7:ae:95:02:18:aa:f6:78:01:84:9c:11:91:d3:00:ce:26:
         a3:28:54:3e:48:f3:1d:76:a3:0b:a8:52:9e:65:e6:be:fb:9d:
         70:77:a0:4b:bd:00:75:fe:ed:cb:8c:b8:09:1e:96:06:94:4c:
         0f:91:7f:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6C0+emIQEVTrvfjN6vLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDcyOTI2ZDgwMGE3ZDI0ZjY2NWQwZjBhN2JhZjVhMjk1MDg4MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAvQcsKCL92MKTxPvBInZ2R4F9g6
1lBlEVoNAiX1L/fspeDAZDQ06TZ9IYvXDxccTqG7Ge6uBFEDFJG4Kt9a0D43gBcZ
R87rVyMAlsv8FO+j75cI8qDb2vCMCDeSefbUZO3GWir4VNe5MLBIHHasvy56huZC
du8dLE991eEvj1AzWSDiN9bVJY4Qp6gLLuSYuj7AtPhy0+GOfcomfAHCnWwSRp/y
pqWi9fre84reBYxocgi1RWBfJwoSiSZplyKGgDiM8PQ4LM3gxmKrOzXD2vHn4ECg
wDzDYi8wcBdk5yzJcA7dafO5OoddwNiweN/2J9gHY9f8CDlS7kkAXBuLBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARykm2ACn0k9mXQ8Ke69aKVCILgMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvQkhLU2JZQUtmU1QyWmREd3A3cjFvcFVJZ3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUOmcMA0G
CSqGSIb3DQEBCwUAA4IBAQADhHn1xgVBJvWu6hzwLb2MV+oajpbNWyA6Mt2WudvH
aVWAC8FDvEIRCUbxYhJTYZf/ur5J5futFy7+TOxGbXjA1bQUIExFNJuZ6oB52kIK
hy1cLq2jCM8M3p8iWbQty9I9EZ2cgpyjGzjlDJ16nQTgMk+wCbAHMYzSbObE3Q4m
kLGpdtL6jwDkXWuv0Aj6Jhn1qgcee9Ac/sW/qaOdSLj1WPjy1YN1C10yz2V08vbF
oGFSRzktxE4zdEyjn+oE3jnrDU6x/9i3566VAhiq9ngBhJwRkdMAziajKFQ+SPMd
dqMLqFKeZea++51wd6BLvQB1/u3LjLgJHpYGlEwPkX9D
-----END CERTIFICATE-----