Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/1-EGrs_xcIoZ-tIMFNhxR8sTVAlk.roa
File:                     1-EGrs_xcIoZ-tIMFNhxR8sTVAlk.roa (raw, json)
Hash identifier:          d2O/hmDQyIjvVcR9mHA/1jNqJ3lZIlJfcVUNXPCv568=
Subject key identifier:   F8:41:AB:B3:FC:5C:22:86:7E:B4:83:05:36:1C:51:F2:C4:D5:02:59
Certificate issuer:       /CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
Certificate serial:       01856D93E025FA5ABE600C85677F84BA936F
Authority key identifier: 9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/1-EGrs_xcIoZ-tIMFNhxR8sTVAlk.roa
Signing time:             Sun 01 Jan 2023 13:44:45 +0000
ROA not before:           Sun 01 Jan 2023 13:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        185.234.113.0/24 maxlen: 24
                          2a10:e080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:93:e0:25:fa:5a:be:60:0c:85:67:7f:84:ba:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
        Validity
            Not Before: Jan  1 13:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f841abb3fc5c22867eb48305361c51f2c4d50259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:0f:80:a2:ab:2f:d4:ec:d6:fa:44:42:49:
                    70:47:c9:8e:3b:cd:9d:db:6a:a1:df:44:12:42:ec:
                    a2:23:0e:3f:49:5a:c8:56:14:8e:42:44:e9:41:d8:
                    47:99:73:cf:d7:21:19:3d:a3:f5:5d:f1:f9:d6:d8:
                    65:57:3f:ec:74:bd:cc:80:3d:75:15:2d:34:1d:1e:
                    de:cf:4e:f2:59:33:61:e1:a4:4c:2d:56:69:03:55:
                    7f:c2:9c:52:7e:3b:e6:04:d3:fb:99:77:c0:7f:20:
                    33:86:22:03:e6:ee:87:50:81:08:ea:b8:61:cc:b2:
                    fd:88:0f:3f:1f:8e:b5:c4:35:01:44:dd:b2:a7:cc:
                    90:da:fd:57:da:0c:e8:dc:08:4d:26:c3:1f:fc:bb:
                    e9:57:b4:e2:c4:10:ec:f5:0c:94:04:b6:56:46:c6:
                    f3:9e:b5:59:4d:df:ae:d8:c2:00:0b:bf:52:a0:c6:
                    34:61:aa:80:e8:54:81:60:dc:01:b0:6a:1a:8b:b2:
                    a1:4d:05:c2:eb:37:7c:ad:ce:39:e4:62:61:03:cd:
                    8c:86:21:3f:a6:c5:d1:0d:44:95:33:b2:9a:9b:ef:
                    55:9e:e2:13:e3:b8:59:3d:b8:85:b3:ee:05:b9:74:
                    e2:a7:52:de:ca:6b:d4:b5:aa:1b:a0:fa:54:be:3e:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:AB:B3:FC:5C:22:86:7E:B4:83:05:36:1C:51:F2:C4:D5:02:59
            X509v3 Authority Key Identifier:
                keyid:9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/1-EGrs_xcIoZ-tIMFNhxR8sTVAlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.113.0/24
                IPv6:
                  2a10:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:89:c6:98:1d:17:29:ef:30:00:6a:bf:32:10:26:3b:13:
         1f:e8:ae:49:88:ef:57:af:54:b2:90:86:87:08:9e:8b:72:6b:
         d1:e8:d6:aa:15:14:45:1d:aa:18:44:af:fc:d2:4b:14:0f:9a:
         4c:c8:09:fc:d2:1b:da:da:93:07:62:42:51:38:2e:a6:4e:51:
         92:e7:6a:a8:ae:22:e4:d8:72:e1:90:6b:94:21:29:1b:f0:01:
         aa:99:fd:a0:4a:e6:e3:2f:18:75:5a:dc:49:20:e0:c6:dc:e2:
         22:03:0d:2e:bd:8d:e5:24:5e:99:25:e7:10:58:6c:c5:77:5e:
         0e:c3:50:b2:7b:92:b5:c1:7d:79:5b:56:88:12:41:6f:36:b1:
         0e:a8:d9:9e:d5:2b:a9:86:ff:4f:e8:3f:cb:8b:fd:99:be:a5:
         11:2a:38:7b:89:33:a0:9d:c5:c9:6f:ab:bf:fe:85:c9:80:89:
         c9:cf:d9:39:2f:de:ec:61:9d:a9:6a:02:09:d0:ca:c5:f8:7a:
         4f:f1:e5:22:4c:d2:51:d7:42:f6:95:cf:28:60:cd:6f:16:c4:
         5c:e3:aa:7e:5c:ab:a9:8e:ad:77:f6:15:0b:31:e5:8d:c8:0e:
         d4:83:50:12:90:d8:49:69:b4:e9:0b:c6:46:74:d0:a4:aa:98:
         d1:4d:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----