Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/6uafaBqLecYq-DCMb29L-TNtAHE.roa
File:                     6uafaBqLecYq-DCMb29L-TNtAHE.roa (raw, json)
Hash identifier:          0aj3aIf1S2PMWVqYCZ6/iknz8c/a/o49Kzzd8UBjg3w=
Subject key identifier:   EA:E6:9F:68:1A:8B:79:C6:2A:F8:30:8C:6F:6F:4B:F9:33:6D:00:71
Certificate issuer:       /CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Certificate serial:       37C7A259
Authority key identifier: E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/6uafaBqLecYq-DCMb29L-TNtAHE.roa
Signing time:             Sat 01 Jan 2022 00:56:59 +0000
ROA not before:           Sat 01 Jan 2022 00:56:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     28859
IP address blocks:        212.94.32.0/20 maxlen: 24
                          212.94.32.0/19 maxlen: 24
                          212.94.56.0/21 maxlen: 24
                          2a02:368::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935830105 (0x37c7a259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28d01e984236c8118c546381cd9a0f9201c73d8
        Validity
            Not Before: Jan  1 00:56:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eae69f681a8b79c62af8308c6f6f4bf9336d0071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:2d:0f:a6:b2:0a:0a:93:a5:ea:51:2b:95:
                    8a:44:a9:49:db:34:d5:15:44:76:03:f3:76:ed:ec:
                    69:e7:89:14:c5:fa:f4:56:c0:ab:62:89:97:a2:08:
                    a2:f0:24:76:84:e3:92:e7:91:d8:b9:16:e7:de:5c:
                    dc:db:55:a9:a5:dd:d4:4b:d0:19:ab:86:b0:02:04:
                    a5:2d:2d:3a:15:f3:9f:dc:31:bb:0b:a2:72:21:0a:
                    f7:47:c0:b4:e1:7d:8d:13:18:4c:36:98:c2:59:51:
                    e9:09:70:57:99:25:bf:83:2f:fb:a6:94:b9:c5:da:
                    a7:7e:e6:31:c3:19:45:ec:51:db:c0:90:e3:01:e1:
                    6e:87:7b:d4:4d:c2:68:fd:b2:6f:49:4a:f5:31:a8:
                    27:b4:09:0d:f6:f0:c7:00:32:81:d8:8d:87:3e:3a:
                    fc:fe:26:b2:b5:5c:2f:ff:12:17:ad:13:2e:4a:89:
                    42:98:b6:b2:56:19:43:e9:6b:29:8d:e3:49:c6:20:
                    b7:2f:4a:11:6c:de:2f:5d:fc:be:4a:2c:26:39:6d:
                    39:a0:97:a8:38:0d:11:e8:00:1c:bc:2c:04:90:b0:
                    91:9a:3d:ad:c0:7a:de:18:62:b3:ca:21:be:67:96:
                    ad:92:3d:49:13:bc:75:eb:20:e4:e4:5c:79:97:0e:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:9F:68:1A:8B:79:C6:2A:F8:30:8C:6F:6F:4B:F9:33:6D:00:71
            X509v3 Authority Key Identifier:
                keyid:E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/6uafaBqLecYq-DCMb29L-TNtAHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.32.0/19
                IPv6:
                  2a02:368::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:a2:e3:3b:b5:64:f2:2a:91:0c:c1:8d:d3:34:c5:d7:93:
         54:50:f6:f6:f9:aa:64:43:94:3f:90:c9:ad:16:8d:73:3b:02:
         eb:d6:0a:02:56:7b:54:58:44:5e:07:f9:74:01:bc:54:c8:dc:
         9c:8b:9a:c4:4a:44:d5:99:d9:9a:24:15:91:cb:b1:a8:6a:2c:
         b3:87:3c:64:7b:2b:27:d7:68:ed:6c:67:b6:43:17:cd:41:00:
         78:fa:0c:50:a5:28:95:97:3a:15:15:a8:17:9e:df:c4:6f:75:
         7b:a2:5a:4e:5b:12:3f:ee:e9:4f:98:f5:fe:73:96:aa:93:5c:
         93:c4:d2:4a:7b:c7:dd:a7:f3:17:6e:f3:6e:46:e6:fd:a7:d2:
         e9:5a:80:12:90:ed:d9:ad:f7:e2:e7:4c:88:b9:d9:47:bc:49:
         0c:0a:60:d5:ba:74:95:b6:3a:bf:ac:a7:a6:45:93:27:e9:c1:
         fb:8a:a8:f6:bf:ac:91:00:c3:07:be:26:ae:ea:13:05:2e:0f:
         b0:8a:b6:94:25:51:a3:04:97:76:d9:e8:b7:94:36:ef:fa:c6:
         29:0b:48:84:75:c3:df:d5:ab:e8:23:ba:8b:d9:18:d8:2b:f6:
         4e:23:55:79:bb:81:00:ee:4f:32:86:41:22:c6:5b:f9:ef:ca:
         7c:d9:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----