Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa
File:                     wEnGyKeJL3bLWqEmy7caM3f-kgM.roa (raw, json)
Hash identifier:          zsCGyJ2aoKw5IERACWEJwWMryp1O46pyZD9T1GY1JPs=
Subject key identifier:   C0:49:C6:C8:A7:89:2F:76:CB:5A:A1:26:CB:B7:1A:33:77:FE:92:03
Certificate issuer:       /CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
Certificate serial:       11668BA5
Authority key identifier: E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa
Signing time:             Sat 01 Jan 2022 03:55:34 +0000
ROA not before:           Sat 01 Jan 2022 03:55:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9022
IP address blocks:        185.160.204.0/22 maxlen: 22
                          2a07:bfc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291933093 (0x11668ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
        Validity
            Not Before: Jan  1 03:55:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c049c6c8a7892f76cb5aa126cbb71a3377fe9203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:e7:e6:be:2e:a6:f1:b3:0b:a3:df:05:c8:
                    25:98:b4:43:f9:13:92:0f:91:13:f8:1d:6b:ac:6b:
                    6b:d1:b4:f8:08:69:78:1f:de:fc:e8:32:21:d6:b3:
                    f8:e4:1c:61:d4:6e:57:e3:ec:0a:68:21:55:f7:0c:
                    41:e4:19:0e:a3:a7:85:dd:b4:28:b1:8d:0c:f4:35:
                    57:c9:f9:15:12:d1:7f:55:41:2e:57:60:9b:7a:fa:
                    38:92:20:3b:27:68:2c:5b:fc:e9:3b:72:f2:b4:b7:
                    15:b9:c1:2b:5d:2c:36:c2:41:19:f0:76:21:95:0c:
                    9d:a4:f5:f6:fb:92:6e:e3:a3:85:92:13:2f:7b:a8:
                    c0:de:ac:2f:19:c1:7b:f9:5a:84:e4:ad:96:7f:d6:
                    e6:02:e7:bb:4a:e5:72:a9:89:13:1f:14:12:97:74:
                    cd:6c:6e:66:ae:e4:b1:0d:05:a2:32:51:ca:9f:04:
                    16:b8:05:36:38:13:ce:7c:f4:70:17:b6:3b:e1:f1:
                    c5:8d:e2:04:b6:cc:ff:d7:69:b7:d8:dd:b0:bd:a7:
                    ea:ba:7a:84:30:a7:8b:bd:45:24:3a:4a:af:59:42:
                    63:1b:06:de:8e:b1:b4:41:aa:5c:6d:3e:5b:5d:52:
                    57:35:59:64:84:74:71:fb:f8:cf:18:16:d1:8b:23:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:C6:C8:A7:89:2F:76:CB:5A:A1:26:CB:B7:1A:33:77:FE:92:03
            X509v3 Authority Key Identifier:
                keyid:E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.204.0/22
                IPv6:
                  2a07:bfc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:03:e0:29:dd:3f:65:11:9c:2b:77:d4:7b:d9:4c:84:67:
         62:b9:9d:c2:17:ed:c8:21:13:33:39:cc:ef:cd:ee:7f:de:cf:
         fb:fd:f2:da:73:8a:45:ce:b2:49:b5:37:64:41:1b:e6:ba:11:
         73:64:87:89:b2:a3:ea:01:b1:07:e0:bc:74:be:b6:62:0d:89:
         71:fb:2d:82:ad:26:1d:03:2d:0a:7c:8a:56:60:ec:10:23:a3:
         dd:5f:78:76:1b:9a:93:b7:ef:1c:99:31:ea:4a:1e:d7:1d:1f:
         4e:d5:e9:3a:3a:fd:88:f8:6e:1e:07:b7:07:04:25:2f:65:d7:
         df:d6:e6:ed:92:89:d9:70:03:cf:ce:1b:3b:b6:d0:9e:f6:3a:
         de:67:d7:9c:63:df:76:7c:33:04:8e:ed:0d:3c:f8:3f:66:bc:
         04:af:29:cc:02:37:f3:de:8b:70:47:8d:06:97:cc:08:a0:5f:
         70:59:4f:f3:85:fd:0c:be:66:92:48:98:e9:b4:52:95:c0:e9:
         56:0b:53:ea:81:cb:8b:a5:e3:6a:5c:b7:62:1c:62:ff:d0:ca:
         80:6e:25:6b:cc:0f:49:38:2e:e5:06:01:66:4d:09:3b:a6:37:
         09:30:5f:e6:2e:74:12:f1:6a:80:ae:7b:57:63:53:4c:e1:26:
         10:08:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----