Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/YN2KeNgptOT2yyS-Wc5_HV3ds7M.roa
File:                     YN2KeNgptOT2yyS-Wc5_HV3ds7M.roa (raw, json)
Hash identifier:          MMAbEO+Zy+Xc/MsorRnJRPqECnUwOIEWx0TtOMclgrw=
Subject key identifier:   60:DD:8A:78:D8:29:B4:E4:F6:CB:24:BE:59:CE:7F:1D:5D:DD:B3:B3
Certificate issuer:       /CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
Certificate serial:       01E99267
Authority key identifier: F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/YN2KeNgptOT2yyS-Wc5_HV3ds7M.roa
Signing time:             Sat 01 Jan 2022 14:06:52 +0000
ROA not before:           Sat 01 Jan 2022 14:06:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59816
IP address blocks:        185.213.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32084583 (0x1e99267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
        Validity
            Not Before: Jan  1 14:06:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60dd8a78d829b4e4f6cb24be59ce7f1d5dddb3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:86:09:11:fe:5c:ea:c3:50:7e:c2:24:53:
                    e6:57:84:f1:0a:b3:91:62:e4:15:71:c6:d4:d9:de:
                    ea:5a:3d:e8:db:ec:42:c6:1e:fd:27:ba:05:de:b9:
                    d4:20:64:fb:d9:ad:f6:e7:e7:5b:89:73:e4:9d:7d:
                    88:ea:f5:e2:55:36:6c:3b:9a:d3:43:d8:a3:06:28:
                    10:bb:20:03:3f:45:65:ac:5f:75:bd:17:d3:e3:7d:
                    84:d1:e8:87:d8:e6:7a:97:3f:be:16:89:af:ca:af:
                    e2:9e:79:3f:5c:7b:f7:60:2a:d3:56:c9:e4:41:31:
                    84:3a:d5:95:f9:0a:4d:a0:71:a5:66:82:88:8b:d6:
                    38:92:89:12:1f:a1:df:36:05:48:86:dc:69:20:da:
                    4c:f9:64:1f:a6:ae:9d:35:b8:72:d5:82:9f:a2:55:
                    0f:39:0f:e0:cf:00:6b:22:a8:68:45:1b:5a:d5:ef:
                    b7:45:96:64:f2:00:58:3a:4c:96:75:dd:e1:c6:3e:
                    1a:29:38:59:56:57:33:27:dd:76:67:50:dd:1c:05:
                    76:f8:09:0d:0f:33:b5:0c:8c:96:4a:4e:ee:d5:af:
                    ca:8b:ed:8e:b6:d3:81:50:6d:06:21:3b:37:09:c4:
                    eb:83:e8:8b:56:f2:f8:c2:b6:9a:19:fa:b8:60:5a:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DD:8A:78:D8:29:B4:E4:F6:CB:24:BE:59:CE:7F:1D:5D:DD:B3:B3
            X509v3 Authority Key Identifier:
                keyid:F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/YN2KeNgptOT2yyS-Wc5_HV3ds7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:e4:de:57:77:33:36:bd:59:dd:ee:84:fc:11:03:f1:01:
         d7:44:5f:a3:25:0a:db:a0:33:b3:e3:78:d1:e7:90:6d:fa:98:
         39:71:84:47:f4:dc:19:2f:79:82:e0:67:b7:ed:6f:7d:f5:52:
         34:a9:d4:ec:d1:6a:90:d8:fa:c5:91:22:47:e1:77:1f:18:bf:
         ce:e8:70:a4:be:43:f4:e4:40:b2:33:68:7d:82:e0:16:b4:43:
         88:c1:0d:c3:a1:de:93:84:72:77:55:f9:dd:07:18:64:2b:e2:
         70:6f:1c:37:a1:d2:66:7c:b0:b0:43:3b:9e:c4:64:55:c1:44:
         87:20:ab:db:12:60:de:fe:d6:c2:94:1d:83:c0:e6:57:e4:e4:
         73:63:b3:6d:b2:e8:17:ba:0f:0f:2b:f1:61:55:c0:23:47:3b:
         5a:b4:dc:8d:24:93:f2:2c:eb:40:ea:9e:4d:53:aa:ba:0c:f3:
         47:60:a1:25:e2:77:c3:10:5a:e3:64:f5:fc:78:58:36:f7:11:
         e8:9d:b9:14:09:e9:98:d1:4c:67:b3:fa:36:b3:be:03:0b:ba:
         27:0b:2b:e3:a4:16:53:db:f5:b5:82:95:0c:a6:e3:cd:08:66:
         88:0f:7f:0b:b9:8b:04:f6:76:d4:16:71:e3:33:40:c5:ea:6e:
         e2:09:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----