Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/0Q_oa8XUuJTGpTwEMG76qWEJ58M.roa
File:                     0Q_oa8XUuJTGpTwEMG76qWEJ58M.roa (raw, json)
Hash identifier:          RntT0DDlJ4SCjmPAK4CzXCHfgivfqYCApCLpxxoqBUg=
Subject key identifier:   D1:0F:E8:6B:C5:D4:B8:94:C6:A5:3C:04:30:6E:FA:A9:61:09:E7:C3
Certificate issuer:       /CN=daa24a894a27cbae61c0af8d4f31f75e8aaeffec
Certificate serial:       E2D6
Authority key identifier: DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qJKiUony65hwK-NTzH3Xoqu_-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/0Q_oa8XUuJTGpTwEMG76qWEJ58M.roa
Signing time:             Sat 12 Feb 2022 11:16:18 +0000
ROA not before:           Sat 12 Feb 2022 11:16:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206766
IP address blocks:        195.158.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58070 (0xe2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa24a894a27cbae61c0af8d4f31f75e8aaeffec
        Validity
            Not Before: Feb 12 11:16:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d10fe86bc5d4b894c6a53c04306efaa96109e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:58:ab:9c:86:6f:0c:6d:a6:07:df:76:c8:
                    bc:c7:76:ce:f9:7b:99:95:7c:2c:e8:08:f9:d1:60:
                    ab:45:63:0c:8e:24:ec:56:22:87:48:ab:89:83:c3:
                    9f:ce:38:9a:ef:4e:4c:6a:5b:d4:1e:31:85:c0:66:
                    14:7e:ea:23:de:74:60:db:13:f2:5a:36:9f:ef:5f:
                    0d:c3:2c:05:d9:17:c9:61:0d:26:12:5f:76:9d:d6:
                    9d:3b:8e:70:be:96:41:89:a8:e5:a7:dd:33:a1:17:
                    f7:33:d4:f9:2e:08:b5:cb:d4:cd:92:08:2e:8a:4a:
                    97:5e:d4:ed:ff:65:01:b8:5c:fc:5f:6a:07:88:ee:
                    eb:21:71:f1:f5:46:f1:24:d4:4b:9b:89:31:5a:e9:
                    f3:53:2f:d8:97:ae:09:8e:f1:ee:25:c7:dd:3f:84:
                    23:aa:5d:61:f5:0f:1b:3e:23:6a:0b:0b:87:7b:ac:
                    d4:a0:7a:95:43:cd:5b:18:8d:54:07:66:3c:68:d2:
                    be:e1:cc:9a:03:f3:01:da:3e:07:ea:01:cd:15:22:
                    c3:f8:a8:8f:40:f9:a5:02:cd:80:76:73:92:12:be:
                    7c:f1:f9:60:b8:f2:6d:54:2f:0f:c0:2c:2f:af:e8:
                    ae:49:5d:57:fd:af:1b:88:53:5c:4e:7d:f7:42:56:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:E8:6B:C5:D4:B8:94:C6:A5:3C:04:30:6E:FA:A9:61:09:E7:C3
            X509v3 Authority Key Identifier:
                keyid:DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qJKiUony65hwK-NTzH3Xoqu_-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/0Q_oa8XUuJTGpTwEMG76qWEJ58M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.158.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:db:df:da:fd:5b:cd:6c:f1:17:87:21:aa:af:88:07:e3:ae:
         aa:c4:c5:5a:05:6c:eb:39:e5:9b:8c:4a:9c:ff:69:f8:22:f6:
         92:77:1d:7f:50:50:78:64:00:5e:f2:18:1c:46:ab:9f:19:59:
         d5:2a:7b:34:cc:01:2e:a4:d4:7f:01:24:dc:6c:f5:bb:0c:fd:
         f3:f8:1e:65:e0:7d:ca:b9:3c:a8:01:96:4c:e4:ee:4c:e8:40:
         84:10:5b:15:4a:3e:cf:39:12:45:e0:d5:39:66:37:b6:80:28:
         29:1b:1e:14:b8:f8:75:c0:e5:5d:0e:a5:1d:b6:ae:c2:85:b3:
         4c:6f:65:8e:c4:fc:c2:a1:33:b5:68:90:2d:46:fb:44:b8:7e:
         3c:fe:60:75:69:94:d9:1e:c4:e4:ba:ab:6f:8a:62:22:a9:d9:
         e2:18:9a:a7:25:c9:b2:cb:c7:27:11:bc:10:09:ad:2e:c7:42:
         68:92:b7:c7:dd:4c:8f:60:85:a1:9a:c3:9f:09:a4:d8:e0:ff:
         bb:82:6b:c3:fb:2f:c4:0f:c2:23:ff:a9:2b:79:70:66:cd:54:
         45:c9:e3:8e:eb:d6:64:68:8e:e7:72:b7:6c:c7:1e:9a:6f:ea:
         7f:6b:a2:3b:4b:11:fd:7a:a5:11:7a:6c:ad:69:d8:17:ad:00:
         ba:67:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----