Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/0sw4kmFlk8DBz5XV6fajAmMVa0c.roa
File:                     0sw4kmFlk8DBz5XV6fajAmMVa0c.roa (raw, json)
Hash identifier:          AgFbIl/sRE92rnDKcCq7wGwzvXv3WaZ7DNEBo8KiU8k=
Subject key identifier:   D2:CC:38:92:61:65:93:C0:C1:CF:95:D5:E9:F6:A3:02:63:15:6B:47
Certificate issuer:       /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial:       081B5136
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/0sw4kmFlk8DBz5XV6fajAmMVa0c.roa
Signing time:             Sat 01 Jan 2022 15:58:34 +0000
ROA not before:           Sat 01 Jan 2022 15:58:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35196
IP address blocks:        185.233.83.26/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136007990 (0x81b5136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
        Validity
            Not Before: Jan  1 15:58:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2cc3892616593c0c1cf95d5e9f6a30263156b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:91:24:2d:71:d3:25:a5:9f:84:5d:a4:c1:
                    58:87:4d:c2:e8:c5:65:a4:50:12:9c:13:27:14:82:
                    c7:f4:c8:43:e2:d4:f4:e5:0e:88:ad:1b:3e:70:6b:
                    c6:d6:06:5e:38:96:80:be:26:54:e3:41:49:a1:6b:
                    06:14:8c:b4:c6:44:37:33:a9:69:e2:c9:3d:ef:e3:
                    62:ef:f4:90:92:43:97:e7:00:a1:90:65:bc:a2:0d:
                    21:59:b3:e7:88:1b:f8:07:a8:e5:75:10:9f:f6:2e:
                    ab:30:4d:23:e0:73:f4:d1:d2:41:44:b7:8a:b7:04:
                    12:36:b2:ee:43:09:14:cf:e3:33:35:da:5c:eb:93:
                    84:1a:3c:8f:2c:ca:81:d0:0e:7e:83:50:cc:b3:2f:
                    db:d6:ff:3e:64:f6:4d:0c:de:1b:10:4b:27:a5:d6:
                    ba:7d:7c:6d:22:60:c6:17:57:e2:57:06:a7:57:58:
                    45:03:17:14:2e:be:09:c4:5d:51:68:96:3e:0b:5f:
                    c7:40:55:c2:c9:9d:88:88:99:08:66:03:dc:90:9c:
                    52:71:90:23:c5:85:7c:bb:1f:16:af:2a:db:b3:79:
                    bf:6f:b9:01:2f:00:1d:cd:5d:b0:76:c2:8b:53:85:
                    3c:8c:60:19:89:46:2a:cf:9a:f7:fc:6a:5b:7b:8a:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:38:92:61:65:93:C0:C1:CF:95:D5:E9:F6:A3:02:63:15:6B:47
            X509v3 Authority Key Identifier:
                keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/0sw4kmFlk8DBz5XV6fajAmMVa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.83.26/32

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:c0:0f:7e:d8:85:70:13:18:8f:ca:4a:e5:ba:34:e1:60:
         3b:2c:c3:86:ce:b8:8b:dc:8a:00:2b:6a:f1:db:3a:1f:67:82:
         e0:a2:98:99:29:2a:3b:27:26:ac:c3:fa:a0:29:12:91:89:53:
         4f:3b:84:2e:e9:d0:c9:1c:5b:cf:1f:28:92:cb:6c:5e:a8:f7:
         7a:5d:5e:a6:22:0a:ef:17:f6:64:65:8f:c4:2d:ce:24:f5:2f:
         57:9c:64:57:01:c1:f4:f2:52:76:ae:a5:82:21:d0:ca:6e:79:
         c0:1d:a4:49:d7:70:6d:a7:82:8d:94:c1:3c:3c:c9:1e:16:6f:
         25:91:fc:b9:bc:7c:50:8d:83:2b:c2:ad:68:77:be:f0:1b:06:
         b6:c6:7c:f2:c8:03:10:94:39:20:e1:37:5d:14:ce:7b:7c:cb:
         df:64:9b:e3:48:3e:32:39:90:04:c1:18:60:db:63:9d:fc:25:
         20:a5:54:72:32:03:a0:9e:7b:49:b5:dc:de:03:fb:4c:6f:f6:
         3e:10:8f:92:44:a7:a5:78:dd:85:f7:18:6f:a8:cc:75:52:21:
         47:1c:a2:5c:e2:84:5b:3c:7b:eb:50:81:09:e8:52:e5:a0:74:
         4d:5d:c3:2a:79:a2:c7:a7:9a:8a:b3:e7:8a:d1:9d:71:7c:0e:
         e0:b8:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----