Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/qV4AmtmnV2ALlvB5K8R9qkAX28k.roa
File:                     qV4AmtmnV2ALlvB5K8R9qkAX28k.roa (raw, json)
Hash identifier:          /ZtJuhgrJLmwSqUmwb+sSXhbzgLGQSY7kBnWzOK2dMI=
Subject key identifier:   A9:5E:00:9A:D9:A7:57:60:0B:96:F0:79:2B:C4:7D:AA:40:17:DB:C9
Certificate issuer:       /CN=36b59523fd549f1b4b653d3c1040ff516db6e999
Certificate serial:       01852E4536FAD9ECA57CCFFB15D39D90FD1D
Authority key identifier: 36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/qV4AmtmnV2ALlvB5K8R9qkAX28k.roa
Signing time:             Tue 20 Dec 2022 06:42:46 +0000
ROA not before:           Tue 20 Dec 2022 06:42:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        185.161.121.0/24 maxlen: 24
                          2a11:9600::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:45:36:fa:d9:ec:a5:7c:cf:fb:15:d3:9d:90:fd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b59523fd549f1b4b653d3c1040ff516db6e999
        Validity
            Not Before: Dec 20 06:42:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a95e009ad9a757600b96f0792bc47daa4017dbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:bc:3c:6a:a0:11:89:95:9a:34:24:50:ad:
                    42:1c:6c:50:9a:e7:38:03:84:ad:4c:dd:76:e0:25:
                    25:c4:d7:e2:6b:8d:ff:a5:4d:ef:ae:59:c7:7e:19:
                    a3:99:5a:04:1e:1c:81:2a:91:b3:72:a2:82:b8:49:
                    1a:e1:b7:1d:b8:f7:da:25:59:2c:d0:ae:e2:10:44:
                    41:c5:95:65:80:0b:10:51:5a:dc:21:f0:94:e9:1b:
                    33:64:4c:27:c5:b3:be:21:e9:e0:d7:9a:f4:a8:1e:
                    6e:fa:9a:16:c3:9d:e0:5f:4f:0d:2c:3d:5f:d5:dd:
                    b1:de:88:c5:4d:4c:80:f2:64:03:32:5e:54:34:ff:
                    d1:70:a6:c3:d4:4b:da:87:18:20:9c:0d:79:bb:2c:
                    fa:96:69:c4:b0:36:8f:fd:4e:b7:a3:81:ab:b5:7f:
                    2a:33:88:54:84:82:d2:04:e0:7f:ab:1a:a1:9f:70:
                    bc:c2:d2:38:65:9e:fb:cb:23:ba:76:d2:47:ba:07:
                    ea:6c:fc:5e:f2:97:8e:29:63:15:75:87:eb:86:db:
                    9e:0e:88:67:d0:34:b8:0b:80:5b:6e:74:6c:b2:1c:
                    39:d9:b0:e7:27:17:9f:16:c9:2e:7b:92:61:e2:9a:
                    37:ea:77:be:a9:eb:4a:e4:63:75:4f:2b:af:36:ad:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:00:9A:D9:A7:57:60:0B:96:F0:79:2B:C4:7D:AA:40:17:DB:C9
            X509v3 Authority Key Identifier:
                keyid:36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/qV4AmtmnV2ALlvB5K8R9qkAX28k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/NrWVI_1UnxtLZT08EED_UW226Zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.121.0/24
                IPv6:
                  2a11:9600::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:f0:a0:4b:d0:64:64:58:40:fd:53:71:01:95:e8:68:78:
         59:f3:ee:ac:90:b1:fc:c6:79:87:2c:2d:49:b5:80:c8:c9:a8:
         43:32:c2:f3:0c:18:19:c8:1f:c6:ef:0b:85:6b:d7:da:db:17:
         a5:de:1f:7e:43:73:7e:dd:18:f6:62:c2:0c:d6:b6:85:2e:92:
         b9:f5:82:96:9d:be:26:0f:44:d8:7b:43:c8:0f:40:ea:8c:f2:
         8d:28:17:f0:7a:f9:95:97:85:a3:c9:1a:1e:c8:19:d6:28:85:
         34:41:35:40:c4:c6:7d:0d:a7:71:12:ea:7e:da:7b:5d:ef:c6:
         7e:bc:95:f1:1b:8d:29:62:25:a9:66:0a:07:df:4c:f2:dd:5a:
         82:25:fb:13:58:b0:1c:df:98:32:d7:45:d8:9f:91:75:5d:1b:
         a4:b4:3b:fe:65:18:c3:49:0b:21:9e:10:50:3f:f5:64:65:cc:
         92:af:62:0d:88:9d:2a:b7:75:02:d6:60:91:f3:0a:b3:80:ef:
         27:92:3e:ae:aa:b4:18:52:cc:67:3d:0a:65:9d:d4:53:ab:e9:
         17:87:33:7a:7b:a6:02:04:75:c8:80:28:71:ef:f9:0a:c1:17:
         a3:e5:8d:39:89:0a:87:3c:b4:75:ea:fb:d5:63:ed:ff:34:da:
         a0:25:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----