Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/eT6sw3Y9HGdcOSsSM23v3SxpGXE.roa
File:                     eT6sw3Y9HGdcOSsSM23v3SxpGXE.roa (raw, json)
Hash identifier:          umZ76rAdoCfYbsWU+aD+vJbGU4zUNk6L6FzTg9QYP88=
Subject key identifier:   79:3E:AC:C3:76:3D:1C:67:5C:39:2B:12:33:6D:EF:DD:2C:69:19:71
Certificate issuer:       /CN=615fea39cea84e99359ca9d040161fa510179265
Certificate serial:       0184AFDC735DA33D9D74A8BD3F3849B1D521
Authority key identifier: 61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/eT6sw3Y9HGdcOSsSM23v3SxpGXE.roa
Signing time:             Fri 25 Nov 2022 17:36:10 +0000
ROA not before:           Fri 25 Nov 2022 17:36:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9085
IP address blocks:        185.83.232.0/24 maxlen: 24
                          2a03:6e60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:af:dc:73:5d:a3:3d:9d:74:a8:bd:3f:38:49:b1:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fea39cea84e99359ca9d040161fa510179265
        Validity
            Not Before: Nov 25 17:36:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=793eacc3763d1c675c392b12336defdd2c691971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:3c:81:fc:53:66:d9:ee:1f:a7:b1:cd:76:
                    42:f6:6a:38:55:fe:30:9c:fd:1e:12:ee:d2:57:47:
                    cc:6d:47:6c:0d:ea:a5:66:9e:25:af:38:a5:71:63:
                    21:45:5c:c9:65:2d:98:0d:6f:91:7a:15:ae:bb:fb:
                    3f:19:6d:e0:cd:b8:0a:8d:db:a2:75:ea:34:a3:35:
                    00:a1:3c:96:73:35:23:7d:69:53:11:c9:e5:2a:f5:
                    d8:8d:e1:1e:ed:f8:43:a8:a6:84:b1:a8:8f:87:4d:
                    98:e1:21:91:a4:71:02:be:04:2f:57:b1:13:a8:af:
                    6a:40:a1:d1:66:4d:10:de:f7:2d:34:7f:0c:b5:3f:
                    56:c6:c2:e0:1f:4c:a5:98:ea:a6:c3:76:22:ae:ca:
                    47:1b:24:5f:da:87:b0:a3:08:6e:60:3b:6d:13:43:
                    9b:e6:61:d6:b9:61:9a:3a:48:85:79:7c:22:98:64:
                    95:ee:f7:8b:f6:44:83:85:10:97:64:dc:bb:be:55:
                    e6:2e:00:77:55:5f:e1:9c:61:17:3c:d9:e4:d4:a7:
                    8f:75:1c:65:5d:b4:4e:58:e4:81:a4:ea:77:78:e1:
                    ea:e1:18:ff:5a:dd:d0:28:35:93:24:7e:52:b9:57:
                    96:a9:09:95:13:41:31:ba:aa:94:07:74:83:c2:8c:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:AC:C3:76:3D:1C:67:5C:39:2B:12:33:6D:EF:DD:2C:69:19:71
            X509v3 Authority Key Identifier:
                keyid:61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/eT6sw3Y9HGdcOSsSM23v3SxpGXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/YV_qOc6oTpk1nKnQQBYfpRAXkmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.232.0/24
                IPv6:
                  2a03:6e60::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:30:f6:bd:bd:d0:9c:4a:5f:ca:84:32:f2:d8:13:39:57:
         08:23:a8:10:71:8c:a7:33:73:e2:1f:24:aa:97:5c:65:4d:13:
         d9:76:13:af:7e:3e:26:9b:50:95:fe:c2:1a:a3:7e:a8:d0:80:
         d3:96:fa:e7:6d:81:1e:07:d2:8e:89:bb:b3:93:e1:2f:66:74:
         a4:28:41:03:16:85:23:83:30:0b:6b:3e:6b:d0:cb:76:83:78:
         82:4c:27:09:3d:2f:93:0f:eb:10:86:cf:3f:83:0e:ed:f3:97:
         ca:6c:1e:d2:2c:8a:59:a5:0a:5a:ca:8d:d5:ef:88:a1:6c:c0:
         cd:6a:c2:54:d5:3a:99:2f:80:69:af:0d:a6:bc:ca:cb:b9:b5:
         0a:87:08:76:c7:d4:09:64:8e:82:a0:cf:8c:08:8a:9c:98:d3:
         2e:01:27:a9:d9:98:c9:46:40:26:5b:ef:2b:04:45:a7:48:cc:
         68:3b:ad:5c:36:bf:be:65:b3:21:2b:69:18:8a:71:a8:ea:82:
         1b:08:e1:8a:bc:d0:e5:71:00:ea:dd:6a:28:25:75:63:22:a5:
         12:f5:18:53:99:4e:34:96:15:ab:2b:dd:ac:ac:be:6f:dc:b6:
         7a:ee:cd:5e:41:28:f9:67:e7:0b:46:31:47:3e:0d:eb:59:90:
         18:13:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----