Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa
File:                     7dvoKp0Q5-OuuylRONSGIsnrgi8.roa (raw, json)
Hash identifier:          OyeHzMPNA87JUYUqqpJramWxgWv7gfmI/c4/NgCDUyw=
Subject key identifier:   ED:DB:E8:2A:9D:10:E7:E3:AE:BB:29:51:38:D4:86:22:C9:EB:82:2F
Certificate issuer:       /CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
Certificate serial:       04D8BC7B
Authority key identifier: 03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa
Signing time:             Sat 01 Jan 2022 01:56:11 +0000
ROA not before:           Sat 01 Jan 2022 01:56:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41230
IP address blocks:        176.119.145.0/24 maxlen: 24
                          2a10:d00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81312891 (0x4d8bc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
        Validity
            Not Before: Jan  1 01:56:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eddbe82a9d10e7e3aebb295138d48622c9eb822f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:19:bb:6b:50:72:eb:08:db:54:69:91:39:
                    6b:fe:51:aa:ee:0d:1f:34:93:ce:36:7d:03:b7:cf:
                    59:c4:2b:12:d4:e1:a8:f1:e5:ee:f9:99:89:5d:dd:
                    1f:8d:5c:09:eb:0e:7e:45:c2:38:6e:e0:a1:9b:95:
                    1d:a8:46:f9:ff:dc:62:43:21:eb:43:9f:cd:1e:22:
                    65:0c:fe:d0:c7:a4:c0:7a:96:1d:73:4d:52:7c:8d:
                    92:a2:fb:c0:76:67:95:c2:6a:30:af:2d:b9:08:54:
                    a7:2d:c2:4d:b7:73:b5:06:02:01:cc:85:2b:15:03:
                    a5:57:86:7c:69:8e:85:a6:06:e1:02:58:4e:d8:22:
                    1d:9f:be:76:81:c3:f6:f5:47:28:f9:1f:8d:01:fe:
                    95:ed:31:28:fe:75:1a:e0:3b:17:60:44:13:ae:d7:
                    3d:ef:42:08:4a:fe:78:f5:44:3b:e8:5e:60:82:38:
                    8f:74:88:9b:37:9b:42:6c:96:4d:bc:49:4e:22:4c:
                    bb:66:4b:dd:e2:94:4c:5f:a0:ef:0c:39:2a:64:9a:
                    d6:ec:e2:c6:47:ef:62:65:5b:16:bf:e9:bc:1f:38:
                    5b:e0:28:5c:f7:4d:5a:a3:19:bf:b1:b4:43:4a:09:
                    1e:7c:57:70:0f:c4:8d:4b:83:ee:81:2d:c5:63:bd:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:E8:2A:9D:10:E7:E3:AE:BB:29:51:38:D4:86:22:C9:EB:82:2F
            X509v3 Authority Key Identifier:
                keyid:03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.145.0/24
                IPv6:
                  2a10:d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:c6:9c:5a:df:22:28:e1:d0:8a:fe:98:c8:17:30:eb:56:
         42:8c:93:d1:cc:8e:14:92:9d:b7:d6:83:62:f4:18:a3:52:53:
         4e:a3:a8:3c:25:93:0b:eb:1f:eb:f6:2a:1c:6f:7b:f8:d9:44:
         f0:dc:5e:f4:89:cd:b8:e9:ff:b5:0d:8e:c9:f3:e9:8c:5e:b0:
         94:f1:ab:c1:37:c4:6e:c8:6c:27:cd:a0:0d:84:d6:1d:5e:1a:
         fb:73:b9:7a:eb:40:d2:e9:ba:af:77:26:a5:02:09:27:82:36:
         a4:fe:7a:50:df:61:f3:1d:3d:78:f9:32:a4:7c:2e:00:6d:16:
         86:5b:ef:97:d3:e7:ff:34:42:98:3e:1f:fc:06:a6:a0:dc:dc:
         51:de:bb:39:86:32:a8:ec:ef:47:b0:2a:74:af:79:80:74:16:
         2f:62:fe:fa:9c:37:55:83:ce:57:f2:29:6f:c2:e8:52:61:50:
         c4:3e:85:d9:4e:9d:df:57:80:f2:b4:fa:7f:dd:c1:52:15:00:
         f4:e4:18:25:9e:20:00:8a:fb:a7:16:92:a1:04:b0:7d:18:31:
         38:b2:1f:d9:27:b6:03:74:7c:49:5b:59:10:f6:eb:32:a3:c0:
         68:a9:70:42:ad:44:7b:36:b9:7e:6f:a2:80:5c:72:c0:7c:0a:
         6d:f4:5b:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBNi8ezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
M2NmNmJmYTM4OWI1ZWE0M2MwZDI3ODJmZWU2ZjA0NDQ0MjA0NzZiMB4XDTIyMDEw
MTAxNTYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRkYmU4MmE5ZDEw
ZTdlM2FlYmIyOTUxMzhkNDg2MjJjOWViODIyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJoGbtrUHLrCNtUaZE5a/5Rqu4NHzSTzjZ9A7fPWcQrEtTh
qPHl7vmZiV3dH41cCesOfkXCOG7goZuVHahG+f/cYkMh60OfzR4iZQz+0MekwHqW
HXNNUnyNkqL7wHZnlcJqMK8tuQhUpy3CTbdztQYCAcyFKxUDpVeGfGmOhaYG4QJY
TtgiHZ++doHD9vVHKPkfjQH+le0xKP51GuA7F2BEE67XPe9CCEr+ePVEO+heYII4
j3SImzebQmyWTbxJTiJMu2ZL3eKUTF+g7ww5KmSa1uzixkfvYmVbFr/pvB84W+Ao
XPdNWqMZv7G0Q0oJHnxXcA/EjUuD7oEtxWO9U+8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTt2+gqnRDn4667KVE41IYiyeuCLzAfBgNVHSMEGDAWgBQDz2v6OJtepDwN
J4L+5vBERCBHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E4OXItamliWHFROERTZUNfdWJ3UkVRZ1Iycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2YvY2Y3ZDFhLWE5NjItNDZiYi1hNDY4LWE4NzFlMDI1NjdhYy8x
Lzdkdm9LcDBRNS1PdXV5bFJPTlNHSXNucmdpOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Yv
Y2Y3ZDFhLWE5NjItNDZiYi1hNDY4LWE4NzFlMDI1NjdhYy8xL0E4OXItamliWHFR
OERTZUNfdWJ3UkVRZ1Iycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALB3kTANBAIAAjAHAwUDKhANADAN
BgkqhkiG9w0BAQsFAAOCAQEAJg7GnFrfIijh0Ir+mMgXMOtWQoyT0cyOFJKdt9aD
YvQYo1JTTqOoPCWTC+sf6/YqHG97+NlE8Nxe9InNuOn/tQ2OyfPpjF6wlPGrwTfE
bshsJ82gDYTWHV4a+3O5eutA0um6r3cmpQIJJ4I2pP56UN9h8x09ePkypHwuAG0W
hlvvl9Pn/zRCmD4f/AamoNzcUd67OYYyqOzvR7AqdK95gHQWL2L++pw3VYPOV/Ip
b8LoUmFQxD6F2U6d31eA8rT6f93BUhUA9OQYJZ4gAIr7pxaSoQSwfRgxOLIf2Se2
A3R8SVtZEPbrMqPAaKlwQq1Eeza5fm+igFxywHwKbfRb5w==
-----END CERTIFICATE-----