Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/aLILKjFSLNoHFm0HCFulhy_lc74.roa
File:                     aLILKjFSLNoHFm0HCFulhy_lc74.roa (raw, json)
Hash identifier:          D83c1mJ3MUcMDnsCgkRJGqfyeX2FXLq7gDGVzUhLSS4=
Subject key identifier:   68:B2:0B:2A:31:52:2C:DA:07:16:6D:07:08:5B:A5:87:2F:E5:73:BE
Certificate issuer:       /CN=a3835ebc11f9ffc9d2fcd5cd57b2c7aec60a776e
Certificate serial:       02D7C621
Authority key identifier: A3:83:5E:BC:11:F9:FF:C9:D2:FC:D5:CD:57:B2:C7:AE:C6:0A:77:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4NevBH5_8nS_NXNV7LHrsYKd24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/aLILKjFSLNoHFm0HCFulhy_lc74.roa
Signing time:             Sat 01 Jan 2022 11:01:20 +0000
ROA not before:           Sat 01 Jan 2022 11:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205718
IP address blocks:        185.228.124.0/22 maxlen: 22
                          2a09:eac0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47695393 (0x2d7c621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3835ebc11f9ffc9d2fcd5cd57b2c7aec60a776e
        Validity
            Not Before: Jan  1 11:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68b20b2a31522cda07166d07085ba5872fe573be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:db:7f:38:55:53:4f:9a:d8:f1:7b:01:0c:
                    6a:db:38:8a:d1:a0:67:77:59:b2:7a:05:2a:99:7a:
                    6c:9e:1d:55:f9:e9:ed:e3:23:79:5f:8c:8a:b5:7e:
                    64:54:d3:e9:52:62:71:39:6d:4d:9c:7b:95:af:44:
                    e2:2f:2c:3a:09:d0:97:56:7c:a0:34:58:5a:b3:48:
                    26:cd:c0:b6:f6:cd:42:22:51:7b:b6:a3:68:94:97:
                    94:36:cf:a9:01:32:06:d5:a4:e9:07:9a:1b:19:ab:
                    0c:5a:9c:26:93:ef:8b:d4:39:3b:60:d1:d9:0a:fc:
                    f4:f3:24:6d:dc:1d:ee:49:9e:99:65:6c:04:72:bd:
                    fd:47:64:98:12:3e:a7:20:35:15:4f:71:61:4e:03:
                    f3:89:87:0e:91:6c:4e:7e:cb:da:9c:38:47:ab:ce:
                    a8:d8:ac:ad:65:1d:e7:8a:2c:71:31:ae:e5:86:75:
                    4c:5c:c1:25:24:39:be:ba:7b:e1:aa:98:d1:0b:47:
                    bd:45:a9:f0:32:e7:4b:3c:1e:90:0d:91:bd:08:61:
                    07:a1:b1:c5:09:9d:da:a1:e4:1b:33:db:ba:8b:ff:
                    dd:43:f0:ed:21:df:ce:42:e3:80:3c:1e:68:3d:1d:
                    c5:07:16:4c:1d:3d:7e:f6:37:81:13:74:64:35:68:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B2:0B:2A:31:52:2C:DA:07:16:6D:07:08:5B:A5:87:2F:E5:73:BE
            X509v3 Authority Key Identifier:
                keyid:A3:83:5E:BC:11:F9:FF:C9:D2:FC:D5:CD:57:B2:C7:AE:C6:0A:77:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4NevBH5_8nS_NXNV7LHrsYKd24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/aLILKjFSLNoHFm0HCFulhy_lc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/o4NevBH5_8nS_NXNV7LHrsYKd24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.124.0/22
                IPv6:
                  2a09:eac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:d2:9a:a2:1e:f3:ea:24:15:d3:9c:be:2b:44:25:b8:ae:
         e2:8e:12:d8:13:1f:64:e5:86:df:e8:8e:63:01:21:0c:f6:bc:
         33:52:a8:76:b8:3e:e3:25:0a:f8:f9:fa:f2:ef:47:ac:d5:c8:
         fb:ce:46:38:36:32:72:5e:0a:72:b7:b6:29:49:bb:57:7e:d7:
         a0:67:1f:25:e6:79:19:33:c4:1a:97:c9:49:1d:47:d1:57:e2:
         09:b0:eb:67:db:d4:8f:cc:ed:61:27:a6:66:d2:cc:12:c4:c4:
         af:a0:10:55:4f:87:55:dc:5c:96:7d:1b:97:22:59:2a:b6:c2:
         b3:84:1b:a8:11:3e:c3:a3:1f:79:ca:1e:d4:38:dd:2f:8e:65:
         04:9f:06:41:3b:46:d9:53:0a:53:a9:c9:e9:27:4a:89:0c:31:
         8e:95:8d:c6:c0:3e:cc:7b:95:4a:d7:c8:40:28:14:5c:f3:dc:
         00:9a:f4:50:e5:97:20:f0:94:ab:86:75:ef:da:19:84:14:fe:
         69:37:c0:d6:7e:1e:44:c7:61:b8:08:e8:25:f7:65:d7:2d:cf:
         ba:09:e8:75:2a:74:ae:24:00:75:79:9f:bb:7b:0c:3c:11:c4:
         8b:91:25:25:bd:f4:20:7e:11:e9:7e:aa:e9:fa:a7:5b:6f:43:
         a4:e1:d5:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAtfGITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MzgzNWViYzExZjlmZmM5ZDJmY2Q1Y2Q1N2IyYzdhZWM2MGE3NzZlMB4XDTIyMDEw
MTExMDEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhiMjBiMmEzMTUy
MmNkYTA3MTY2ZDA3MDg1YmE1ODcyZmU1NzNiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKn92384VVNPmtjxewEMats4itGgZ3dZsnoFKpl6bJ4dVfnp
7eMjeV+MirV+ZFTT6VJicTltTZx7la9E4i8sOgnQl1Z8oDRYWrNIJs3AtvbNQiJR
e7ajaJSXlDbPqQEyBtWk6QeaGxmrDFqcJpPvi9Q5O2DR2Qr89PMkbdwd7kmemWVs
BHK9/UdkmBI+pyA1FU9xYU4D84mHDpFsTn7L2pw4R6vOqNisrWUd54oscTGu5YZ1
TFzBJSQ5vrp74aqY0QtHvUWp8DLnSzwekA2RvQhhB6GxxQmd2qHkGzPbuov/3UPw
7SHfzkLjgDweaD0dxQcWTB09fvY3gRN0ZDVoD30CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRosgsqMVIs2gcWbQcIW6WHL+VzvjAfBgNVHSMEGDAWgBSjg168Efn/ydL8
1c1Xsseuxgp3bjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L280TmV2Qkg1XzhuU19OWE5WN0xIcnNZS2QyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvYTA4ZWEzLWU4MDEtNGFkYS1hZjhlLTc0OTc4Y2IxNGYwOC8x
L2FMSUxLakZTTE5vSEZtMEhDRnVsaHlfbGM3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
YTA4ZWEzLWU4MDEtNGFkYS1hZjhlLTc0OTc4Y2IxNGYwOC8xL280TmV2Qkg1Xzhu
U19OWE5WN0xIcnNZS2QyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnkfDANBAIAAjAHAwUAKgnqwDAN
BgkqhkiG9w0BAQsFAAOCAQEAK1nSmqIe8+okFdOcvitEJbiu4o4S2BMfZOWG3+iO
YwEhDPa8M1Kodrg+4yUK+Pn68u9HrNXI+85GODYycl4Kcre2KUm7V37XoGcfJeZ5
GTPEGpfJSR1H0VfiCbDrZ9vUj8ztYSemZtLMEsTEr6AQVU+HVdxcln0blyJZKrbC
s4QbqBE+w6Mfecoe1DjdL45lBJ8GQTtG2VMKU6nJ6SdKiQwxjpWNxsA+zHuVStfI
QCgUXPPcAJr0UOWXIPCUq4Z179oZhBT+aTfA1n4eRMdhuAjoJfdl1y3PugnodSp0
riQAdXmfu3sMPBHEi5ElJb30IH4R6X6q6fqnW29DpOHVRQ==
-----END CERTIFICATE-----