Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/rW3RC9j3xLSRBr3vTeMGjQLCGhg.roa
File:                     rW3RC9j3xLSRBr3vTeMGjQLCGhg.roa (raw, json)
Hash identifier:          ZiYvXDbcykE48mSdkrvWhkZk0mCC8eUy1QT8+IAv8Kg=
Subject key identifier:   AD:6D:D1:0B:D8:F7:C4:B4:91:06:BD:EF:4D:E3:06:8D:02:C2:1A:18
Certificate issuer:       /CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
Certificate serial:       0317847E
Authority key identifier: 9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/rW3RC9j3xLSRBr3vTeMGjQLCGhg.roa
Signing time:             Sat 01 Jan 2022 01:59:54 +0000
ROA not before:           Sat 01 Jan 2022 01:59:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        185.234.113.0/24 maxlen: 24
                          2a10:e080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51872894 (0x317847e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
        Validity
            Not Before: Jan  1 01:59:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad6dd10bd8f7c4b49106bdef4de3068d02c21a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:c3:74:f2:c7:39:2c:40:82:7a:02:c7:46:
                    78:61:b7:80:5f:46:c9:95:b5:cd:c9:36:f0:88:05:
                    03:61:6f:34:78:5c:e8:0f:35:81:7f:04:6f:d2:25:
                    cf:27:2e:c2:23:92:b8:a3:e6:06:21:24:bf:e3:9d:
                    c8:71:06:4c:b1:06:a8:96:ce:8f:19:83:b1:2d:7e:
                    a7:c6:6a:a2:db:ad:5e:16:c7:1b:b5:95:b8:23:26:
                    9e:25:d7:ba:15:ca:a7:0e:d6:3c:78:21:60:be:31:
                    ea:a7:fd:4d:b8:98:a5:68:5f:b8:45:f6:c5:2b:39:
                    df:3b:74:9b:4c:ce:c0:e6:f2:61:3e:0e:37:91:c6:
                    5f:b0:5a:f4:65:dc:1b:6a:45:d8:e0:54:85:1e:6d:
                    e2:f7:62:bf:f7:a9:46:47:9a:94:46:a8:7d:e5:bb:
                    bc:22:50:4a:fe:97:0f:66:b6:58:e6:9d:8d:bc:8e:
                    87:a6:8b:a6:6a:d2:a7:96:ea:7e:65:28:46:48:9b:
                    5c:be:da:5f:75:96:68:b7:49:be:13:42:c3:0b:67:
                    80:d0:07:7a:62:1b:50:97:d2:8a:17:49:51:32:68:
                    5e:a8:5d:c6:05:6b:e3:db:49:c9:d3:a0:39:c7:db:
                    e5:af:ad:94:d8:a3:31:b6:46:b4:65:dd:9f:42:7b:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:D1:0B:D8:F7:C4:B4:91:06:BD:EF:4D:E3:06:8D:02:C2:1A:18
            X509v3 Authority Key Identifier:
                keyid:9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/rW3RC9j3xLSRBr3vTeMGjQLCGhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.113.0/24
                IPv6:
                  2a10:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:dd:75:16:c3:6b:35:51:68:af:8b:dd:bb:bd:93:12:43:52:
         3f:ef:de:70:50:63:5e:7c:50:eb:db:4a:c8:40:9d:96:ff:2f:
         d7:3b:ba:e5:c7:ec:ee:66:e0:12:c7:5b:88:5c:e5:22:8d:07:
         7a:67:2f:f1:ed:51:db:c6:16:a6:f9:c3:8f:7d:b8:8a:a9:be:
         84:30:46:35:1c:a5:df:72:f6:58:03:26:46:ba:db:13:58:e1:
         24:e5:a7:41:ab:cf:c9:70:ee:0d:3b:b6:6c:6b:19:38:91:fd:
         69:88:7b:2a:e2:2c:92:32:ef:40:0f:57:d4:86:76:b8:b3:d0:
         3f:1e:70:cc:e6:d8:bf:e1:a6:a3:c2:7a:d5:43:45:bc:25:f9:
         61:3d:cd:3b:6c:95:32:87:94:9a:71:4a:76:b0:ef:bd:e4:86:
         46:2b:c2:c2:ae:2b:be:d3:74:51:36:da:49:a7:0a:4a:b5:ff:
         a7:14:6e:3a:c0:c1:ed:12:53:4d:b6:e1:f4:95:3d:8e:7b:d5:
         bd:3d:84:4c:52:f7:10:3d:35:ee:33:b2:08:91:60:48:42:13:
         aa:1c:3a:b3:f9:cf:b6:5f:38:c8:a3:3b:e9:41:af:74:13:e4:
         c1:77:f4:94:a6:82:e5:f5:10:2d:5f:37:48:58:6a:b5:8f:b5:
         0d:20:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----