Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/4ZYjbtfpN6Tkm16Xm5qPdcKIM00.roa
File:                     4ZYjbtfpN6Tkm16Xm5qPdcKIM00.roa (raw, json)
Hash identifier:          uifb6Z+k/mTAbGpTQ8lYf+98gTerj3loXXJz0nbbH2w=
Subject key identifier:   E1:96:23:6E:D7:E9:37:A4:E4:9B:5E:97:9B:9A:8F:75:C2:88:33:4D
Certificate issuer:       /CN=615fea39cea84e99359ca9d040161fa510179265
Certificate serial:       0185704287D3D376569558D205F22EE8D225
Authority key identifier: 61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/4ZYjbtfpN6Tkm16Xm5qPdcKIM00.roa
Signing time:             Mon 02 Jan 2023 02:14:46 +0000
ROA not before:           Mon 02 Jan 2023 02:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9085
IP address blocks:        185.83.232.0/24 maxlen: 24
                          2a03:6e60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:87:d3:d3:76:56:95:58:d2:05:f2:2e:e8:d2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fea39cea84e99359ca9d040161fa510179265
        Validity
            Not Before: Jan  2 02:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e196236ed7e937a4e49b5e979b9a8f75c288334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:ec:13:83:5a:b6:f2:63:2d:9d:d9:e3:d4:
                    0f:80:34:5c:b5:da:51:c4:85:46:69:c3:e9:9f:1b:
                    0f:2e:f5:ad:12:4d:70:b8:7c:01:d6:51:55:2b:ac:
                    23:1a:6f:05:ba:87:b5:b4:b4:7f:58:1c:3b:c7:ff:
                    8a:52:82:85:bc:6e:0f:f6:27:0f:81:53:30:63:2d:
                    46:ff:b5:5b:41:7a:73:71:4c:95:94:9d:02:f0:f0:
                    dc:c3:ed:66:49:4d:2d:8a:1d:50:9e:08:8c:77:2f:
                    6f:00:28:b0:ba:aa:89:69:5b:0e:75:39:65:b7:d6:
                    42:93:88:f7:b1:93:3f:02:95:fb:4c:8e:e0:07:48:
                    00:4a:85:50:6c:d6:4e:a7:dd:e5:fc:da:2e:26:59:
                    62:9c:61:6d:c7:5c:cb:9b:ee:00:92:31:30:31:45:
                    db:ef:ff:67:88:51:a6:84:e6:55:9f:68:bd:bd:47:
                    7d:cb:fc:8d:02:71:e6:f5:97:f4:cd:4b:0c:5e:a4:
                    72:9c:fb:24:f9:f0:56:cf:b0:95:25:6a:f0:71:4d:
                    c0:33:2c:55:4b:59:a6:c1:b5:0c:4a:c5:80:fc:ac:
                    08:6e:c8:68:d8:cf:c2:bb:d4:47:fd:8b:96:9a:61:
                    28:3c:9b:07:f2:9f:8b:75:12:b4:30:94:06:a7:73:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:96:23:6E:D7:E9:37:A4:E4:9B:5E:97:9B:9A:8F:75:C2:88:33:4D
            X509v3 Authority Key Identifier:
                keyid:61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/4ZYjbtfpN6Tkm16Xm5qPdcKIM00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/YV_qOc6oTpk1nKnQQBYfpRAXkmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.232.0/24
                IPv6:
                  2a03:6e60::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:72:ce:f4:a0:17:5c:6a:3d:56:c1:3d:2f:a3:cc:c8:56:
         7d:c1:c4:cf:e0:83:01:4b:c0:33:76:54:4d:dd:34:08:f3:3c:
         dc:07:61:85:2b:d5:23:d3:98:5c:51:6a:f0:5d:03:86:93:97:
         ad:b7:91:5e:95:76:ed:7d:4d:a6:1c:47:2b:69:10:8e:3f:95:
         6e:75:5a:a8:f5:19:ea:79:72:55:2f:a1:38:67:c0:cd:f3:d0:
         29:0e:7a:7a:3e:bf:7a:ae:01:87:b6:09:58:3d:2e:95:4a:3d:
         f1:7f:1c:61:b0:df:7d:26:c2:a2:72:3f:52:a9:17:34:7d:a9:
         a8:57:ab:a5:95:e1:c5:03:8e:cc:94:8e:ff:4a:f8:a0:bb:c4:
         41:55:45:b5:7b:16:ac:dc:13:f8:3b:a5:fb:3f:14:10:12:39:
         1a:29:d8:1a:b1:29:93:83:0c:8d:5f:88:86:30:29:3b:4d:2a:
         24:ab:53:b1:53:8c:8e:94:f2:e1:46:e8:a6:34:13:4d:b3:41:
         27:15:f6:a2:cf:33:0f:1e:f4:1d:90:d4:e0:d2:4a:3d:3c:ed:
         b1:b2:40:96:f6:4e:53:2d:b0:0e:27:9f:41:99:ea:a6:18:2e:
         73:48:9d:7f:b3:09:2f:a9:0d:45:f6:ff:55:f4:16:06:6b:7e:
         37:01:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----