Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/wh5hHrL3HBhqFuOAUuCuGy4I5aM.roa
File:                     wh5hHrL3HBhqFuOAUuCuGy4I5aM.roa (raw, json)
Hash identifier:          NV90OI7qqqxl5x+iSmWeTn/brEkfDg9I1TXSPDcda9k=
Subject key identifier:   C2:1E:61:1E:B2:F7:1C:18:6A:16:E3:80:52:E0:AE:1B:2E:08:E5:A3
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       05B98FB8
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/wh5hHrL3HBhqFuOAUuCuGy4I5aM.roa
Signing time:             Sat 01 Jan 2022 02:57:39 +0000
ROA not before:           Sat 01 Jan 2022 02:57:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     444000
IP address blocks:        185.207.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96047032 (0x5b98fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Jan  1 02:57:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c21e611eb2f71c186a16e38052e0ae1b2e08e5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:ce:ac:44:a9:07:3a:cd:b9:84:1b:2a:4d:
                    b1:23:fb:08:d1:d1:59:00:fc:7b:29:1b:db:4e:e7:
                    62:23:43:bd:13:ae:bd:d1:bd:98:23:c6:80:b8:6c:
                    3e:16:4d:8d:e0:62:fc:4f:f4:c3:5a:ad:8f:ce:80:
                    08:cd:b6:69:5d:09:97:88:b9:55:5b:b3:63:fc:5f:
                    bc:c1:d9:c7:b8:28:a0:dd:9a:88:bd:9a:4d:1b:95:
                    0b:60:c9:b3:30:6e:e0:07:29:91:be:75:28:f4:58:
                    c9:f6:91:a0:4d:3b:67:c3:d3:d0:ae:f0:70:f2:81:
                    61:61:dc:f3:b5:98:99:67:43:e4:fc:22:b4:11:a1:
                    3d:2d:06:df:f1:fc:bd:35:cb:91:56:27:5d:76:e9:
                    98:13:61:14:cd:3c:84:89:92:a2:05:2d:5d:e2:31:
                    23:c3:7f:e7:dd:5a:e8:4e:c8:2c:de:72:c7:b7:a1:
                    51:0a:ac:0d:0e:6f:0c:65:3b:2a:28:51:12:ad:b4:
                    e6:32:5c:64:af:2f:49:1a:f1:ce:84:d9:77:95:a8:
                    6f:79:17:0e:d1:eb:5d:3a:77:19:17:30:95:86:1a:
                    06:f6:80:d5:25:d3:3e:41:75:91:b6:0d:b8:75:22:
                    22:7d:a9:fc:5f:49:bd:a4:93:08:ea:dd:f0:95:d8:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1E:61:1E:B2:F7:1C:18:6A:16:E3:80:52:E0:AE:1B:2E:08:E5:A3
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/wh5hHrL3HBhqFuOAUuCuGy4I5aM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:72:6b:d4:f2:75:80:4c:81:39:be:ea:af:3f:61:08:2d:c8:
         b1:a4:1d:fe:f4:bf:f1:b8:a8:a6:7b:72:78:8e:7e:f5:5b:f8:
         30:d6:a5:f7:52:fb:af:fe:eb:19:a3:29:d5:04:15:33:83:e6:
         30:d4:a2:db:af:8a:17:b7:c1:19:e9:ca:11:5c:33:c1:b3:fc:
         38:88:b5:89:0d:ef:8f:20:83:e7:a5:f3:91:a3:35:58:b1:6f:
         9d:35:e5:70:2c:34:10:16:72:5b:cd:73:87:f5:42:e9:94:bd:
         dd:a7:79:10:a8:b5:37:80:93:f2:33:d8:d6:e3:36:c8:e4:a1:
         fa:d6:de:8b:62:a1:45:2a:c0:e1:b7:f6:62:76:0e:1e:b2:5a:
         b0:5e:11:2f:48:bd:38:c3:00:77:06:07:5c:12:8d:03:d8:99:
         04:54:11:61:06:8a:9c:c9:eb:e7:d7:65:eb:8b:8c:4a:e7:7b:
         54:d0:b3:30:ee:4c:a6:16:7d:ee:2d:24:8d:05:45:7a:92:88:
         f5:6d:90:87:48:d0:54:2d:93:d2:65:fb:5c:d9:ae:f3:82:fc:
         5e:00:c0:77:ea:fa:d9:4d:ce:06:9d:a9:cf:94:cc:dd:c3:1a:
         0f:8b:5a:a5:b5:a4:48:43:ec:70:ed:cd:44:61:62:ad:c7:53:
         4c:90:aa:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbmPuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDEw
MTAyNTczOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzIxZTYxMWViMmY3
MWMxODZhMTZlMzgwNTJlMGFlMWIyZTA4ZTVhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUZzqxEqQc6zbmEGypNsSP7CNHRWQD8eykb207nYiNDvROu
vdG9mCPGgLhsPhZNjeBi/E/0w1qtj86ACM22aV0Jl4i5VVuzY/xfvMHZx7gooN2a
iL2aTRuVC2DJszBu4Acpkb51KPRYyfaRoE07Z8PT0K7wcPKBYWHc87WYmWdD5Pwi
tBGhPS0G3/H8vTXLkVYnXXbpmBNhFM08hImSogUtXeIxI8N/591a6E7ILN5yx7eh
UQqsDQ5vDGU7KihREq205jJcZK8vSRrxzoTZd5Wob3kXDtHrXTp3GRcwlYYaBvaA
1SXTPkF1kbYNuHUiIn2p/F9JvaSTCOrd8JXY6HECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCHmEesvccGGoW44BS4K4bLgjlozAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L3doNWhIckwzSEJocUZ1T0FVdUN1R3k0STVhTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnPBDANBgkqhkiG9w0BAQsFAAOC
AQEAgXJr1PJ1gEyBOb7qrz9hCC3IsaQd/vS/8biopntyeI5+9Vv4MNal91L7r/7r
GaMp1QQVM4PmMNSi26+KF7fBGenKEVwzwbP8OIi1iQ3vjyCD56XzkaM1WLFvnTXl
cCw0EBZyW81zh/VC6ZS93ad5EKi1N4CT8jPY1uM2yOSh+tbei2KhRSrA4bf2YnYO
HrJasF4RL0i9OMMAdwYHXBKNA9iZBFQRYQaKnMnr59dl64uMSud7VNCzMO5MphZ9
7i0kjQVFepKI9W2Qh0jQVC2T0mX7XNmu84L8XgDAd+r62U3OBp2pz5TM3cMaD4ta
pbWkSEPscO3NRGFircdTTJCqNw==
-----END CERTIFICATE-----