Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/R-BdNrYD_RvgrPyXhF7DkBooGzI.roa
File:                     R-BdNrYD_RvgrPyXhF7DkBooGzI.roa (raw, json)
Hash identifier:          Gnre72QqGBbF4uG+eUifJimgJ7VTPPihNzPgSEbSbxE=
Subject key identifier:   47:E0:5D:36:B6:03:FD:1B:E0:AC:FC:97:84:5E:C3:90:1A:28:1B:32
Certificate issuer:       /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial:       130FEB10
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/R-BdNrYD_RvgrPyXhF7DkBooGzI.roa
Signing time:             Sat 01 Jan 2022 15:55:08 +0000
ROA not before:           Sat 01 Jan 2022 15:55:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3188
IP address blocks:        185.123.102.0/24 maxlen: 24
                          2a06:ad40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319810320 (0x130feb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Validity
            Not Before: Jan  1 15:55:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47e05d36b603fd1be0acfc97845ec3901a281b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:c5:4b:d4:f6:36:9e:ba:3a:a7:e9:78:86:
                    60:65:61:cb:4b:f7:85:f1:cc:5c:f9:72:6c:55:b1:
                    ed:27:87:53:2e:de:b3:b2:f1:9e:e6:70:d6:05:9a:
                    aa:e0:be:ab:7f:5b:e0:16:a9:e9:3a:1c:2e:63:c0:
                    5f:49:14:03:3d:95:41:e7:ba:b4:82:d1:3d:19:54:
                    f6:95:20:e4:c3:4e:4b:0b:50:c7:30:f2:da:37:91:
                    ba:43:88:6c:5d:08:fd:34:57:ee:1f:b6:6c:2b:b8:
                    01:70:db:f9:fe:92:95:48:14:e2:5a:8b:d0:ca:ef:
                    18:38:91:1a:60:a1:6f:fb:b9:6e:c9:18:9d:30:28:
                    f2:1c:2b:b6:f0:6b:ee:99:e7:a2:bd:81:fc:da:dd:
                    a2:35:df:99:fa:7c:fd:b7:9d:fa:45:97:0b:44:1c:
                    61:5f:3c:83:ee:bf:86:c3:d4:fb:56:9c:4f:e3:cb:
                    bb:83:33:59:95:3a:bf:83:dc:a2:3c:57:e1:34:e4:
                    3f:0a:8f:71:30:34:21:dd:68:ae:e9:df:e5:52:76:
                    fd:64:ca:c1:d7:39:d5:c6:5a:c7:f3:89:19:fe:1a:
                    3f:75:00:ae:d8:d1:8a:25:52:13:68:d9:78:25:31:
                    28:ba:6f:63:d2:e0:24:f2:ab:ae:09:fb:2f:c2:a8:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E0:5D:36:B6:03:FD:1B:E0:AC:FC:97:84:5E:C3:90:1A:28:1B:32
            X509v3 Authority Key Identifier:
                keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/R-BdNrYD_RvgrPyXhF7DkBooGzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.102.0/24
                IPv6:
                  2a06:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:de:a6:b1:70:64:6e:82:8f:47:6e:d8:71:d3:ac:f5:5b:55:
         8a:65:ad:b5:83:58:7b:c1:09:e4:bf:bf:11:6c:6e:74:cc:1b:
         0f:ed:c2:f9:e3:3c:33:25:7a:a8:37:c9:96:83:b2:73:a0:97:
         b6:e3:b3:ff:67:65:44:e7:19:9c:28:6c:80:96:f8:5f:0c:35:
         4e:88:49:62:74:c5:6a:86:1b:b4:7a:81:a1:74:a3:5a:4e:21:
         e3:c4:1c:c7:7c:05:7b:23:ec:94:8a:04:87:cd:7c:fb:4b:38:
         16:16:f4:75:60:c1:14:5e:73:6d:ac:d9:6e:69:9d:09:6c:fe:
         0d:7c:ce:ec:65:62:84:7d:d8:cd:e1:af:6b:16:8a:88:59:b6:
         37:22:e2:99:70:c8:11:d1:d4:18:c5:66:ae:22:93:fb:f9:37:
         b6:e8:65:88:c3:bd:f6:01:8c:3f:fc:ec:fd:30:db:42:2c:e7:
         a5:f8:71:fc:ae:df:24:d0:4a:8c:cf:71:d5:08:55:e9:95:b6:
         d7:49:54:b2:0c:dc:8a:b7:e5:32:97:d0:8d:d6:a1:82:b2:7d:
         63:f5:32:e3:38:33:0d:db:7e:19:b0:55:e2:cd:d4:05:07:9b:
         d6:31:ee:f8:91:a8:9e:57:a4:1c:e6:9d:73:6b:f4:93:9c:7d:
         12:76:d9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----