Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/05O0oYYZHhq5pVCsVV7hmIs3af8.roa
File:                     05O0oYYZHhq5pVCsVV7hmIs3af8.roa (raw, json)
Hash identifier:          0lvsyvMmsV7Yt/JWjNunP8PraDPNrAPzu2HrgVS1XQk=
Subject key identifier:   D3:93:B4:A1:86:19:1E:1A:B9:A5:50:AC:55:5E:E1:98:8B:37:69:FF
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0AB8CAA7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/05O0oYYZHhq5pVCsVV7hmIs3af8.roa
Signing time:             Tue 10 May 2022 07:06:41 +0000
ROA not before:           Tue 10 May 2022 07:06:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63213
IP address blocks:        86.38.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179882663 (0xab8caa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: May 10 07:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d393b4a186191e1ab9a550ac555ee1988b3769ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:a8:27:92:e2:e7:2e:d9:f0:4e:f4:30:a3:
                    d0:6d:f1:03:3c:52:4f:cd:6f:61:40:30:7f:f1:6f:
                    14:16:d5:a3:8b:9c:85:88:05:6b:f7:fe:4f:db:bf:
                    be:6a:34:f8:3b:30:ef:f4:b4:bb:41:12:56:79:f6:
                    b0:2c:27:68:44:f7:b0:3d:26:e4:51:a1:e4:61:ad:
                    48:40:12:d3:03:81:9b:a3:b0:d3:e1:60:7a:86:64:
                    72:02:d1:5e:72:43:0e:e1:9f:96:0d:f1:39:87:0e:
                    db:b1:ac:37:01:8d:84:a1:99:ba:a3:cd:d1:60:97:
                    e8:1b:c7:7b:2f:b9:89:e3:f2:ff:62:15:2a:4e:47:
                    ad:10:ca:45:a0:d6:83:93:62:b2:ce:fc:4c:64:04:
                    bd:12:99:00:1d:65:93:87:6d:97:3c:61:16:3e:12:
                    4f:06:92:cd:ec:b6:c4:66:23:16:12:fc:d1:6d:cd:
                    02:39:ef:80:c9:e3:3c:c1:46:98:f1:92:55:1d:05:
                    cd:26:90:5e:a7:23:76:27:6d:88:ca:5b:4d:58:e3:
                    57:55:4d:68:75:dc:37:59:01:e7:e4:f5:a9:5a:fb:
                    8e:f7:59:17:8f:a7:de:ce:df:f1:30:8c:13:d9:47:
                    16:23:8b:59:d6:19:77:bb:aa:8c:e7:16:cf:84:3e:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:B4:A1:86:19:1E:1A:B9:A5:50:AC:55:5E:E1:98:8B:37:69:FF
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/05O0oYYZHhq5pVCsVV7hmIs3af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:c6:a3:cb:5e:85:e2:a7:f0:ac:d2:06:ef:3c:91:c3:45:
         ec:02:81:6f:f4:a6:65:4f:a9:98:cd:ec:45:75:7c:4d:eb:1e:
         a3:45:1f:0f:20:6e:63:f1:d2:a0:44:38:6a:a4:34:ba:a8:9b:
         a7:b0:6c:69:2e:78:42:1b:43:29:2d:01:77:ef:1a:30:d2:bb:
         3b:0b:aa:e6:eb:c3:b5:8b:0f:34:83:c6:6b:05:47:d9:ef:0b:
         bd:9e:a5:09:d2:94:e9:00:01:f1:7f:4d:90:11:f1:53:22:d9:
         c5:6e:6e:da:99:a6:90:30:21:38:04:0d:c8:24:ec:3b:bf:f2:
         80:b2:66:03:8a:ef:20:25:b4:db:b3:64:5f:b2:5d:1e:1a:46:
         2b:05:d9:5b:b0:e0:42:ac:31:52:82:54:fb:ae:fa:0d:68:ad:
         99:bf:a6:9a:6a:8b:d3:ea:b9:04:a9:bf:f5:90:40:a8:97:a1:
         c3:42:90:cc:95:15:62:13:a3:bc:f9:f6:cc:02:e3:cf:cf:df:
         a9:8c:3d:0c:c9:cf:80:7e:fc:b5:c2:b9:66:d9:ce:51:ba:9c:
         be:eb:38:2f:8a:01:ce:59:55:c4:a3:ab:18:42:af:fb:18:0f:
         e5:21:1f:2a:60:a2:3d:15:69:1c:5f:31:e4:6e:b4:65:28:c5:
         9b:0f:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----