Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/E0JcJzxfiNlT6OXcPVQWpxCAV6I.roa
File:                     E0JcJzxfiNlT6OXcPVQWpxCAV6I.roa (raw, json)
Hash identifier:          2N4el1KTjJ6lzgcVj6aVbYfrzdNqnKLRg7D2ExLlP38=
Subject key identifier:   13:42:5C:27:3C:5F:88:D9:53:E8:E5:DC:3D:54:16:A7:10:80:57:A2
Certificate issuer:       /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial:       0185729ED27E5CE97CDF56BC2F759377D44E
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/E0JcJzxfiNlT6OXcPVQWpxCAV6I.roa
Signing time:             Mon 02 Jan 2023 13:14:49 +0000
ROA not before:           Mon 02 Jan 2023 13:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3188
IP address blocks:        185.123.102.0/24 maxlen: 24
                          2a06:ad40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:d2:7e:5c:e9:7c:df:56:bc:2f:75:93:77:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Validity
            Not Before: Jan  2 13:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13425c273c5f88d953e8e5dc3d5416a7108057a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:71:ca:d7:f5:cb:68:03:2e:fc:f7:83:5e:
                    40:e4:47:f4:b1:52:03:b8:a5:37:ad:0d:c4:45:a8:
                    3f:27:30:83:97:77:bc:12:76:a9:14:4a:af:fc:43:
                    87:55:ba:d9:51:1e:d3:c1:e7:db:0b:84:8d:28:65:
                    ab:8d:94:35:83:ca:07:a3:de:53:73:d2:7d:88:e9:
                    ed:09:91:45:8f:01:7c:f9:c5:cf:29:82:4c:b8:f9:
                    df:3c:92:c5:30:d4:78:94:cc:92:7f:5b:af:ee:d4:
                    5d:bf:79:08:57:09:d3:ff:e5:0e:2d:d9:3d:d5:e7:
                    70:76:e2:01:dc:81:39:4c:d5:f0:a8:e0:55:11:49:
                    22:e1:7a:3a:f2:e3:6e:27:ca:c7:ed:85:87:af:6b:
                    f5:ab:f6:36:c0:51:18:42:b1:5f:76:00:98:b0:4d:
                    7d:c6:a8:da:bc:5c:3c:55:15:5f:45:75:55:89:df:
                    3c:3c:83:0b:36:1c:d0:ba:e6:70:37:24:1f:c7:6e:
                    15:fd:26:19:7c:87:d1:de:46:4f:60:2c:06:ce:f9:
                    41:17:2b:66:7e:02:82:80:01:45:b9:a7:1d:20:cf:
                    da:7c:24:b4:10:05:6a:ed:b5:87:dc:ca:1e:55:16:
                    0e:5a:1e:ca:06:43:6d:d0:f5:d2:1e:b6:5d:d2:16:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:42:5C:27:3C:5F:88:D9:53:E8:E5:DC:3D:54:16:A7:10:80:57:A2
            X509v3 Authority Key Identifier:
                keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/E0JcJzxfiNlT6OXcPVQWpxCAV6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.102.0/24
                IPv6:
                  2a06:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:62:cf:e3:5e:33:46:c8:e0:a9:64:b9:3a:b2:6b:db:d0:84:
         0d:b2:d8:e4:14:7e:9b:14:61:a3:83:a9:9c:09:63:f2:fc:5f:
         32:e2:ef:73:7d:11:c0:46:b0:5a:5a:a0:eb:6d:8c:2d:7c:c3:
         c7:1e:b1:55:92:52:26:99:65:c7:1c:68:c8:18:f0:99:46:11:
         b7:91:15:1b:2c:fb:97:1c:30:1e:4d:2d:7a:ff:ae:95:a2:39:
         48:51:b0:bb:a3:49:f9:df:6b:79:5d:17:64:3c:44:10:67:8c:
         ab:df:05:9e:d0:4f:7a:26:d7:82:33:84:8f:2d:24:4d:a3:1a:
         2b:6c:8a:9b:ae:e1:5f:24:9e:5d:a5:b9:c4:84:66:32:ea:11:
         b5:63:dc:82:66:62:bf:29:7f:9c:78:6e:04:96:79:92:48:f7:
         f5:00:b7:70:bf:23:0e:db:75:64:bf:e5:0c:67:75:9f:26:db:
         8a:d3:bf:b8:4a:4d:46:e2:1d:52:2c:20:d8:bc:fe:57:e3:a3:
         1e:fa:80:22:00:a6:2c:a8:03:9f:fd:40:1d:9e:31:05:17:21:
         3b:b4:74:11:65:8a:83:82:20:f6:50:e1:47:9c:d7:da:27:43:
         bc:90:31:55:44:c0:e2:84:a9:87:11:f1:4c:c0:c1:dd:65:8e:
         0d:13:95:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyntJ+XOl831a8L3WTd9ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzMxM2U5OTY1ZWFhN2IzYWU5YmQ1Y2JmMzU2NmQ0NGE1
MTA5N2QwHhcNMjMwMTAyMTMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzQyNWMyNzNjNWY4OGQ5NTNlOGU1ZGMzZDU0MTZhNzEwODA1N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nNxytf1y2gDLvz3g15A5Ef0sVID
uKU3rQ3ERag/JzCDl3e8EnapFEqv/EOHVbrZUR7TwefbC4SNKGWrjZQ1g8oHo95T
c9J9iOntCZFFjwF8+cXPKYJMuPnfPJLFMNR4lMySf1uv7tRdv3kIVwnT/+UOLdk9
1edwduIB3IE5TNXwqOBVEUki4Xo68uNuJ8rH7YWHr2v1q/Y2wFEYQrFfdgCYsE19
xqjavFw8VRVfRXVVid88PIMLNhzQuuZwNyQfx24V/SYZfIfR3kZPYCwGzvlBFytm
fgKCgAFFuacdIM/afCS0EAVq7bWH3MoeVRYOWh7KBkNt0PXSHrZd0hbHBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBNCXCc8X4jZU+jl3D1UFqcQgFeiMB8GA1UdIwQY
MBaAFIXDE+mWXqp7Oum9XL81ZtRKUQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNNVDZaWmVxbnM2NmIxY3Z6Vm0xRXBSQ1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNTlhN2EtYjU2OS00NjgwLThkZTUt
ZGUyMzEyODBjMmExLzEvRTBKY0p6eGZpTmxUNk9YY1BWUVdweENBVjZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNTlhN2EtYjU2OS00NjgwLThkZTUtZGUyMzEyODBjMmEx
LzEvaGNNVDZaWmVxbnM2NmIxY3Z6Vm0xRXBSQ1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXtmMA0E
AgACMAcDBQAqBq1AMA0GCSqGSIb3DQEBCwUAA4IBAQBhYs/jXjNGyOCpZLk6smvb
0IQNstjkFH6bFGGjg6mcCWPy/F8y4u9zfRHARrBaWqDrbYwtfMPHHrFVklImmWXH
HGjIGPCZRhG3kRUbLPuXHDAeTS16/66VojlIUbC7o0n532t5XRdkPEQQZ4yr3wWe
0E96JteCM4SPLSRNoxorbIqbruFfJJ5dpbnEhGYy6hG1Y9yCZmK/KX+ceG4ElnmS
SPf1ALdwvyMO23Vkv+UMZ3WfJtuK07+4Sk1G4h1SLCDYvP5X46Me+oAiAKYsqAOf
/UAdnjEFFyE7tHQRZYqDgiD2UOFHnNfaJ0O8kDFVRMDihKmHEfFMwMHdZY4NE5X9
-----END CERTIFICATE-----