Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/uWNpjf3I_dcj9Na6mvokFFxFnzA.roa
File:                     uWNpjf3I_dcj9Na6mvokFFxFnzA.roa (raw, json)
Hash identifier:          RCz+84eydFHDFuUMQXJgRoPGXHhGHrSi+EWFjFiZRTY=
Subject key identifier:   B9:63:69:8D:FD:C8:FD:D7:23:F4:D6:BA:9A:FA:24:14:5C:45:9F:30
Certificate issuer:       /CN=1a349707197c73e414bf642c6042c7bfad600e54
Certificate serial:       01856D7890AB44FDEAE56C8D193E4481EDFC
Authority key identifier: 1A:34:97:07:19:7C:73:E4:14:BF:64:2C:60:42:C7:BF:AD:60:0E:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjSXBxl8c-QUv2QsYELHv61gDlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/uWNpjf3I_dcj9Na6mvokFFxFnzA.roa
Signing time:             Sun 01 Jan 2023 13:14:55 +0000
ROA not before:           Sun 01 Jan 2023 13:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206488
IP address blocks:        185.185.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:90:ab:44:fd:ea:e5:6c:8d:19:3e:44:81:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a349707197c73e414bf642c6042c7bfad600e54
        Validity
            Not Before: Jan  1 13:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b963698dfdc8fdd723f4d6ba9afa24145c459f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:c9:3b:22:72:58:28:7f:fe:ee:b0:b1:07:
                    2d:ab:2f:29:73:29:08:92:9c:ed:57:cc:fc:5c:a7:
                    db:92:19:8d:62:d3:54:88:bb:c1:54:70:01:55:e3:
                    ec:8b:f0:5d:6a:51:b0:53:47:4d:28:d6:99:49:a0:
                    f4:9c:d2:1a:cb:ab:12:15:54:59:4f:2c:df:07:bf:
                    d5:2a:b5:39:60:ed:e0:91:de:91:05:76:b5:9c:6d:
                    2c:c2:98:85:32:0a:3b:ac:c4:55:9a:79:78:02:9b:
                    e3:ac:72:fc:90:62:7d:43:24:e7:0d:67:3a:5a:5d:
                    a6:8c:6a:72:22:bb:03:b4:31:34:9b:e1:be:61:90:
                    00:e6:ad:79:9c:01:c9:df:cc:75:a6:91:07:56:f4:
                    57:11:3a:e2:16:6d:54:34:b1:f5:9f:22:27:79:76:
                    4f:b3:21:41:ba:46:fc:04:0f:fb:f0:90:00:63:20:
                    fe:67:95:46:9b:f1:d0:0a:3c:bf:43:bf:d2:ed:5a:
                    97:b5:08:01:f2:f1:c9:18:e8:dd:ff:83:bf:ae:ec:
                    40:65:51:e8:c8:8c:d5:ce:d1:fe:b9:7a:11:86:d7:
                    52:fb:b7:36:8c:85:dc:1e:2b:ac:ab:b0:6d:bd:62:
                    8c:d0:2b:ca:63:af:c0:69:d6:93:e8:60:2f:c2:0a:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:63:69:8D:FD:C8:FD:D7:23:F4:D6:BA:9A:FA:24:14:5C:45:9F:30
            X509v3 Authority Key Identifier:
                keyid:1A:34:97:07:19:7C:73:E4:14:BF:64:2C:60:42:C7:BF:AD:60:0E:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjSXBxl8c-QUv2QsYELHv61gDlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/uWNpjf3I_dcj9Na6mvokFFxFnzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/GjSXBxl8c-QUv2QsYELHv61gDlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:59:87:11:5b:bb:14:28:0d:8b:41:a0:1b:ba:83:91:fe:23:
         81:30:f6:eb:fe:11:95:f5:e3:20:4c:f8:40:5e:aa:c0:72:ce:
         86:aa:5e:2f:bc:4e:97:4a:08:39:ca:50:bb:61:a8:06:e7:1a:
         57:c1:72:cb:5f:f9:6b:4e:f7:d3:96:21:da:f8:11:cf:ae:ee:
         24:e2:2d:38:e6:20:dc:ec:76:5f:78:ec:81:86:e0:91:c4:5e:
         23:6f:66:3e:f9:b2:54:58:7f:c2:35:a8:38:ba:53:38:29:12:
         6d:ed:7e:68:b9:96:b6:7c:b0:2e:a6:8b:46:41:1a:1a:81:ea:
         1e:34:a8:23:62:8a:72:86:3a:ce:3d:6e:5e:64:a7:a8:c4:94:
         bf:e6:20:ea:17:07:31:66:cc:4e:d5:e8:67:a1:9c:aa:4b:df:
         99:48:71:31:2e:53:73:76:fe:a3:7f:b9:06:10:11:79:16:98:
         8a:0a:e5:f2:63:92:c3:46:25:93:e3:01:c7:05:b8:e9:3a:95:
         fc:2c:1c:82:a9:0e:6d:26:45:e1:df:6c:2d:86:6b:3a:35:07:
         49:bf:79:e7:e8:17:2e:a9:90:d9:f4:17:89:60:cf:e9:27:84:
         6a:00:37:e9:2c:a4:9b:21:44:06:9d:b6:14:4d:be:4c:7e:92:
         a1:48:41:0b
-----BEGIN CERTIFICATE-----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