Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/53a97a-8338-4af0-8eeb-7e5f01afd4c5/1/KWriCKb5-fGwi46rZ6LnK-bjhkI.roa
File:                     KWriCKb5-fGwi46rZ6LnK-bjhkI.roa (raw, json)
Hash identifier:          VrQmeU9T7UpR/Vj3vW1shVKi4/WzEBcq9NxW2mksAco=
Subject key identifier:   29:6A:E2:08:A6:F9:F9:F1:B0:8B:8E:AB:67:A2:E7:2B:E6:E3:86:42
Certificate issuer:       /CN=8e53b1d8ae2a8aff23483378716b753673bb79c0
Certificate serial:       024DFEA3
Authority key identifier: 8E:53:B1:D8:AE:2A:8A:FF:23:48:33:78:71:6B:75:36:73:BB:79:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlOx2K4qiv8jSDN4cWt1NnO7ecA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/53a97a-8338-4af0-8eeb-7e5f01afd4c5/1/KWriCKb5-fGwi46rZ6LnK-bjhkI.roa
Signing time:             Sat 01 Jan 2022 09:01:59 +0000
ROA not before:           Sat 01 Jan 2022 09:01:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.187.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38665891 (0x24dfea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e53b1d8ae2a8aff23483378716b753673bb79c0
        Validity
            Not Before: Jan  1 09:01:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=296ae208a6f9f9f1b08b8eab67a2e72be6e38642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:e3:8e:2a:06:d2:74:f3:31:5f:7a:e3:32:
                    2e:4c:27:4b:3c:8b:ff:75:2b:d3:ad:79:2c:b1:5c:
                    2c:34:0e:e9:d1:29:e4:bf:d6:ad:1a:cc:21:79:e4:
                    45:b8:05:4b:be:ce:f0:e3:e3:bf:40:0c:63:0b:32:
                    01:df:e7:59:98:1f:55:43:4c:fe:e8:21:5f:4c:6f:
                    00:98:6d:42:6f:64:2f:47:b1:65:ab:ab:98:c0:76:
                    35:cb:31:8c:50:87:3d:09:91:d1:89:4f:dc:79:5c:
                    b1:19:85:d8:fd:b0:57:6a:7c:66:f1:27:4f:ad:9f:
                    6a:a7:42:dd:bc:6a:2a:62:31:86:64:4b:76:f1:26:
                    4e:b9:89:af:c0:89:54:54:d7:93:7a:15:7b:9f:81:
                    b8:7f:22:cc:1b:f8:79:9b:42:17:f7:fe:95:13:b4:
                    cf:9d:43:e4:e3:d2:12:0f:3f:6c:8c:85:c6:c5:6d:
                    6b:7e:2d:32:16:79:13:41:fe:5d:bf:3f:3e:1b:5c:
                    28:1d:8b:71:a5:9d:a3:9e:c6:b6:97:d2:8f:01:10:
                    f4:b3:c8:38:3c:8e:d7:84:9b:9f:c5:29:54:5b:e8:
                    ce:a2:8f:7b:72:e1:3b:65:dc:e7:4b:9d:46:d9:b3:
                    03:b7:4a:03:d3:fb:f0:56:29:9f:86:2b:36:0e:db:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:E2:08:A6:F9:F9:F1:B0:8B:8E:AB:67:A2:E7:2B:E6:E3:86:42
            X509v3 Authority Key Identifier:
                keyid:8E:53:B1:D8:AE:2A:8A:FF:23:48:33:78:71:6B:75:36:73:BB:79:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlOx2K4qiv8jSDN4cWt1NnO7ecA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/53a97a-8338-4af0-8eeb-7e5f01afd4c5/1/KWriCKb5-fGwi46rZ6LnK-bjhkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/53a97a-8338-4af0-8eeb-7e5f01afd4c5/1/jlOx2K4qiv8jSDN4cWt1NnO7ecA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:4a:00:36:b1:66:8d:06:69:7a:46:57:74:1e:1b:b1:d8:
         76:c1:ba:b7:ae:1d:4c:17:4f:d9:7d:3a:f3:6e:c6:d7:dc:77:
         dc:7f:86:f3:96:d5:80:5f:95:ae:4b:ac:59:8a:58:1d:bb:db:
         30:2b:55:2c:8f:bc:b1:7f:ee:c0:01:d5:3d:c6:6f:30:dd:67:
         2d:ab:9d:02:b4:5a:f7:97:80:ba:eb:db:a8:ee:de:2b:22:e9:
         b5:2b:61:91:6f:43:d6:23:f1:a2:7a:09:dd:95:be:fb:92:b8:
         ff:68:ad:bb:94:74:fe:e3:60:0e:a1:d5:cc:3a:0d:5e:ce:6b:
         3c:e6:6a:a6:13:8c:d5:59:95:c0:c6:09:b0:8c:5a:ae:a3:5a:
         cf:5f:56:cc:c1:fe:39:b5:93:e0:d0:88:35:73:ae:80:9f:78:
         02:38:ea:4d:ab:6f:b0:df:47:96:6e:20:2a:de:d8:63:fa:6c:
         ef:07:71:24:d3:ee:e1:9d:e1:1c:83:8a:e2:b0:7a:9e:4c:6c:
         af:64:86:2d:19:2e:94:79:ec:af:38:d4:74:1b:19:b5:17:75:
         96:0c:96:1a:f4:a1:1d:28:5e:b1:60:f5:7a:36:42:ef:69:c4:
         a8:97:a0:c0:71:40:c0:2d:e5:82:63:68:3f:27:75:84:d0:25:
         0c:a2:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----