Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa
File:                     5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa (raw, json)
Hash identifier:          TUSz2kcSM2bS0pVSRJ6f+kkYDvAPwVUNiIog53Bsv+w=
Subject key identifier:   E6:A9:86:D4:85:76:E9:32:A4:A9:35:FC:EC:3B:F5:91:72:BD:BD:0D
Certificate issuer:       /CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
Certificate serial:       0186089FBC7D18863C203C28480E0A203DDB
Authority key identifier: D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa
Signing time:             Tue 31 Jan 2023 16:18:51 +0000
ROA not before:           Tue 31 Jan 2023 16:18:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51088
IP address blocks:        146.19.97.0/24 maxlen: 24
                          2a13:800::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:9f:bc:7d:18:86:3c:20:3c:28:48:0e:0a:20:3d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
        Validity
            Not Before: Jan 31 16:18:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6a986d48576e932a4a935fcec3bf59172bdbd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:8e:94:a0:2b:2f:ad:3c:15:59:58:06:9a:
                    a4:ad:15:b0:d2:d9:e9:f8:13:66:09:1a:63:43:2c:
                    ed:24:8b:30:33:bf:82:41:fd:2b:94:a4:18:44:17:
                    57:22:31:ec:bc:ba:aa:a5:12:16:00:42:24:da:b3:
                    da:1e:9b:ce:1d:60:f7:72:11:b3:63:63:82:61:48:
                    da:ce:07:f8:8a:d6:8d:18:39:91:a6:cb:e0:7e:64:
                    be:1b:65:8d:87:04:11:dc:63:2c:65:15:89:7f:c1:
                    bb:fc:13:94:27:bb:79:ee:7d:f6:d0:32:a4:31:35:
                    ff:10:81:54:20:10:60:f6:75:6d:da:3d:c0:2a:12:
                    b0:28:b1:de:30:0c:15:c6:6e:81:ec:e6:a1:f0:b2:
                    9a:dc:bb:48:64:10:a7:03:13:73:f3:cd:0b:7f:30:
                    69:db:a6:a1:9e:8d:91:68:12:d8:89:15:c8:ca:ea:
                    bb:ea:f9:be:9e:6f:2f:1a:72:38:ed:f5:6b:10:26:
                    6e:85:3a:6f:74:e1:02:19:1a:87:de:92:32:10:50:
                    5f:1d:7f:18:a4:fc:2a:c7:4d:19:a0:83:dd:ca:1a:
                    26:db:85:98:90:50:78:1c:78:da:97:b2:88:af:50:
                    ed:95:5a:a5:9b:49:dc:bb:ed:7f:45:4a:28:ca:b7:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A9:86:D4:85:76:E9:32:A4:A9:35:FC:EC:3B:F5:91:72:BD:BD:0D
            X509v3 Authority Key Identifier:
                keyid:D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.97.0/24
                IPv6:
                  2a13:800::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:ce:32:5e:90:04:b0:60:8a:e1:20:e1:f0:03:0e:86:e0:90:
         dc:f8:94:24:8c:46:42:6b:f6:f6:ac:58:9d:f2:21:05:64:cd:
         b8:db:a9:16:88:03:0c:cb:ce:22:37:4e:9e:2c:44:e1:22:ab:
         63:24:b6:99:9f:1b:69:3a:e1:40:dd:c6:f2:18:6a:da:30:bb:
         80:69:d0:87:17:a7:b5:a1:38:99:e4:16:a2:36:c0:6e:7a:7d:
         74:1b:85:d9:35:e9:98:58:02:38:2f:f5:c0:2e:9d:d5:57:a9:
         85:37:e5:6f:df:05:ef:22:37:2b:2d:2e:6d:d2:e9:9a:40:18:
         30:3f:90:8a:c1:71:88:38:50:f1:27:28:53:64:94:1e:36:ee:
         af:e0:54:47:bd:cf:fe:f8:7c:73:45:e3:58:09:3a:13:95:0e:
         05:da:0a:e0:04:dc:25:0a:a0:39:c1:15:c8:53:47:e2:9c:51:
         5e:a9:95:e8:ad:89:31:85:38:57:71:f6:35:d8:43:36:86:2d:
         d2:33:24:92:ac:49:9d:e5:e6:03:6f:09:57:26:c7:29:54:0a:
         db:20:27:02:a1:b2:4e:79:32:4a:ef:ac:6d:a8:9a:24:61:93:
         da:f2:fb:67:d9:e3:e3:95:a5:57:06:ef:3d:81:16:29:3c:ba:
         b0:17:5b:cc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYIn7x9GIY8IDwoSA4KID3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDQ4ZTQ5ODk3ZTYwMGYxZDFiZDdjNGRjZGZmYTk5ZmQy
ZjEzNGMwHhcNMjMwMTMxMTYxODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmE5ODZkNDg1NzZlOTMyYTRhOTM1ZmNlYzNiZjU5MTcyYmRiZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRWOlKArL608FVlYBpqkrRWw0tnp
+BNmCRpjQyztJIswM7+CQf0rlKQYRBdXIjHsvLqqpRIWAEIk2rPaHpvOHWD3chGz
Y2OCYUjazgf4itaNGDmRpsvgfmS+G2WNhwQR3GMsZRWJf8G7/BOUJ7t57n320DKk
MTX/EIFUIBBg9nVt2j3AKhKwKLHeMAwVxm6B7Oah8LKa3LtIZBCnAxNz880LfzBp
26ahno2RaBLYiRXIyuq76vm+nm8vGnI47fVrECZuhTpvdOECGRqH3pIyEFBfHX8Y
pPwqx00ZoIPdyhom24WYkFB4HHjal7KIr1DtlVqlm0ncu+1/RUooyrdLbQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOaphtSFdukypKk1/Ow79ZFyvb0NMB8GA1UdIwQY
MBaAFNIEjkmJfmAPHRvXxNzf+pn9LxNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdTT1NZbC1ZQThkRzlmRTNOXzZtZjB2RTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYmFkOWUtNDZkNy00ZDRmLTkwMWQt
MTkzNWRkOTUzNzAwLzEvNXFtRzFJVjI2VEtrcVRYODdEdjFrWEs5dlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iYmFkOWUtNDZkNy00ZDRmLTkwMWQtMTkzNWRkOTUzNzAw
LzEvMGdTT1NZbC1ZQThkRzlmRTNOXzZtZjB2RTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhNhMA0E
AgACMAcDBQMqEwgAMA0GCSqGSIb3DQEBCwUAA4IBAQCbzjJekASwYIrhIOHwAw6G
4JDc+JQkjEZCa/b2rFid8iEFZM2426kWiAMMy84iN06eLEThIqtjJLaZnxtpOuFA
3cbyGGraMLuAadCHF6e1oTiZ5BaiNsBuen10G4XZNemYWAI4L/XALp3VV6mFN+Vv
3wXvIjcrLS5t0umaQBgwP5CKwXGIOFDxJyhTZJQeNu6v4FRHvc/++HxzReNYCToT
lQ4F2grgBNwlCqA5wRXIU0finFFeqZXorYkxhThXcfY12EM2hi3SMySSrEmd5eYD
bwlXJscpVArbICcCobJOeTJK76xtqJokYZPa8vtn2ePjlaVXBu89gRYpPLqwF1vM
-----END CERTIFICATE-----