Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/6qNoa271-RSxtwF4NX42FhFio9w.roa
File:                     6qNoa271-RSxtwF4NX42FhFio9w.roa (raw, json)
Hash identifier:          5q0MJI+F9rSCuKk6FOcedM9M7nBSAqj9cntuzqJE7B4=
Subject key identifier:   EA:A3:68:6B:6E:F5:F9:14:B1:B7:01:78:35:7E:36:16:11:62:A3:DC
Certificate issuer:       /CN=92decb505e2a4e21092e40ba3ba2e8b61cdddae4
Certificate serial:       32ACD63A
Authority key identifier: 92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/6qNoa271-RSxtwF4NX42FhFio9w.roa
Signing time:             Sat 01 Jan 2022 13:54:35 +0000
ROA not before:           Sat 01 Jan 2022 13:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199115
IP address blocks:        5.100.176.0/20 maxlen: 20
                          2a01:97c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850187834 (0x32acd63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92decb505e2a4e21092e40ba3ba2e8b61cdddae4
        Validity
            Not Before: Jan  1 13:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eaa3686b6ef5f914b1b70178357e36161162a3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:32:2a:59:9c:f0:5a:06:94:49:9f:a4:95:
                    7f:81:a8:15:a0:bd:14:d1:28:e7:f9:af:2e:54:43:
                    ea:c9:90:28:37:b9:46:4c:24:31:ec:95:73:15:c5:
                    dd:ae:bf:e6:d3:2e:97:a6:93:f8:8a:84:b7:35:60:
                    cc:a2:0b:aa:05:a2:8b:f0:74:ba:5d:f6:a6:8a:e9:
                    ae:cd:af:78:53:99:f2:fb:34:f8:8b:51:b6:39:3d:
                    1a:9d:6a:ec:a0:5d:e1:29:22:19:9f:4f:35:31:3d:
                    db:a0:b5:cf:20:d9:70:61:59:4c:b6:43:c8:3c:e7:
                    f4:94:9f:21:b3:e4:bb:c8:0b:19:b9:0f:02:b8:a0:
                    ce:95:88:1c:8a:b8:1d:22:37:b8:1a:f5:51:77:09:
                    7b:72:cb:4e:d8:a0:5b:f1:1b:53:34:e1:70:78:11:
                    bf:01:6d:58:f0:71:9e:83:b3:78:13:95:3e:96:0b:
                    1c:6e:94:99:d4:45:47:bc:99:3a:a7:b4:a1:5d:59:
                    62:77:cf:33:fa:56:95:51:8d:d0:b7:26:3a:08:2e:
                    9c:ee:18:fd:cf:df:14:68:de:fa:ca:08:7c:ac:48:
                    90:a3:f2:62:93:b8:67:a1:6a:a5:4c:3e:55:d2:0a:
                    89:4f:0d:50:61:69:63:c7:5c:69:f1:71:c4:8e:0a:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A3:68:6B:6E:F5:F9:14:B1:B7:01:78:35:7E:36:16:11:62:A3:DC
            X509v3 Authority Key Identifier:
                keyid:92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/6qNoa271-RSxtwF4NX42FhFio9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.100.176.0/20
                IPv6:
                  2a01:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:65:25:be:41:48:0e:b0:72:34:e9:fa:57:3c:bd:20:2c:
         d8:19:3a:da:4b:ae:96:d0:27:7e:b6:ab:de:59:41:de:e3:31:
         39:d3:92:36:a2:2f:a5:da:3d:f1:71:6a:7b:04:49:f3:51:96:
         37:b4:52:86:58:26:6c:47:78:8c:d3:e4:57:5c:0e:d3:67:2f:
         4b:3e:09:8d:97:ae:be:7f:1a:21:91:3b:4d:4d:06:9a:c8:7b:
         4d:7f:80:88:6d:56:df:1e:69:aa:e6:87:48:86:36:4a:a4:97:
         23:bc:9b:d7:98:ce:84:fd:90:5f:f8:71:49:07:30:14:84:c0:
         a0:20:68:62:fa:5c:1a:a7:a2:8a:fc:a1:92:5a:e4:ba:de:30:
         6c:5b:02:ca:32:73:b6:4d:22:a2:0b:a9:3f:52:3a:76:1f:69:
         1c:b0:2e:f9:47:10:a7:ef:9d:08:ef:b2:13:b6:04:d2:89:cb:
         e7:bd:ea:ac:82:03:64:fc:fe:d3:05:77:43:47:0f:87:1d:a3:
         ef:29:ce:3b:d2:d7:eb:9a:50:49:a9:0b:3b:8f:84:5f:3d:b6:
         a5:ec:c2:2b:0f:35:58:6a:02:57:75:70:15:60:4f:be:ed:8f:
         79:7a:f2:ae:83:0f:49:90:ef:c3:9b:ed:3e:90:f3:dd:c5:28:
         99:2d:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----