Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/n8GZZP77VcSme2IaHrSLLTy3uzA.roa
File:                     n8GZZP77VcSme2IaHrSLLTy3uzA.roa (raw, json)
Hash identifier:          c+KdW49c6zpFhDT82b3nfXqNmo+tZatLUxHgDVsZyLY=
Subject key identifier:   9F:C1:99:64:FE:FB:55:C4:A6:7B:62:1A:1E:B4:8B:2D:3C:B7:BB:30
Certificate issuer:       /CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Certificate serial:       06A1D9FA
Authority key identifier: 61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/n8GZZP77VcSme2IaHrSLLTy3uzA.roa
Signing time:             Sat 01 Jan 2022 11:54:52 +0000
ROA not before:           Sat 01 Jan 2022 11:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48362
IP address blocks:        185.243.205.0/24 maxlen: 24
                          2a0c:1a40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111270394 (0x6a1d9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612102634204bfc1aa7ce81d70187f6b764ab10d
        Validity
            Not Before: Jan  1 11:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fc19964fefb55c4a67b621a1eb48b2d3cb7bb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:d4:d6:48:43:de:5e:b3:2f:f1:54:05:3c:
                    46:1c:54:14:75:7b:80:a1:dd:e5:9f:11:8a:d0:b3:
                    6a:8d:a3:e1:5e:00:77:29:a1:82:52:56:7a:70:5c:
                    0e:c2:19:f2:84:ef:d9:f4:22:07:05:56:da:a0:79:
                    a6:2c:ce:0b:6f:35:d9:09:31:42:20:13:10:03:88:
                    eb:85:3e:c0:1f:ff:93:70:59:51:e1:0e:75:19:04:
                    c0:dd:8a:59:e3:02:98:e0:32:6a:76:9f:73:b1:2a:
                    bc:cf:ed:9d:89:7a:f1:f6:55:f5:1a:61:26:ec:0f:
                    ac:f1:da:23:62:bd:20:01:58:95:a1:28:f2:b5:53:
                    6e:d8:d9:f1:f6:ef:f7:d0:f3:9a:90:95:08:c6:e4:
                    e1:d9:7c:17:a5:00:be:27:41:d4:54:4c:07:bc:d7:
                    fc:d5:e2:17:62:7b:c9:53:14:4e:5b:9e:3b:29:35:
                    7f:5b:ae:e6:10:50:9c:5a:42:e0:a0:15:f1:61:07:
                    06:b8:df:44:58:83:0f:fc:02:60:cc:b6:ff:47:0f:
                    af:55:c0:1c:1a:7d:0d:27:11:f8:e0:77:2c:c5:e2:
                    a2:7b:77:ee:4f:03:9f:be:1e:26:d5:46:58:d2:d5:
                    33:6e:46:f3:6a:e5:53:c1:ac:52:0e:81:f7:2d:15:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:99:64:FE:FB:55:C4:A6:7B:62:1A:1E:B4:8B:2D:3C:B7:BB:30
            X509v3 Authority Key Identifier:
                keyid:61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/n8GZZP77VcSme2IaHrSLLTy3uzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.205.0/24
                IPv6:
                  2a0c:1a40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:79:ee:00:7e:d9:41:a9:1c:f8:d0:e4:d1:2d:e9:81:6e:
         2f:21:60:49:49:d5:b4:0b:84:f2:ab:95:6d:53:6a:a1:d3:fe:
         97:77:7c:c4:ed:9a:a5:de:a0:da:0b:02:cc:7a:db:cf:3b:70:
         9e:ed:a7:0d:46:11:27:d2:89:f0:88:bd:54:3b:3e:10:fb:a8:
         7c:4e:cb:f9:b0:7c:24:0e:ab:79:01:3a:dd:82:ac:d7:84:05:
         2d:96:fa:6c:85:91:a1:fa:57:43:bc:b6:17:0f:ad:f2:f9:2d:
         1f:f0:9e:11:d8:d0:67:db:f0:1b:a1:d8:7e:06:2d:9e:72:11:
         d9:d5:70:79:65:73:c4:ea:b0:e0:ff:f9:d7:77:c1:91:95:e0:
         b2:e5:c4:50:26:2e:66:75:c3:90:63:7c:a0:ab:3c:0a:23:1a:
         dc:4d:da:31:6a:9f:b7:6f:e8:87:e4:58:73:0f:9b:a4:16:12:
         24:87:15:44:3f:fc:2a:08:f7:7a:31:1c:26:b9:fc:c7:41:1c:
         b1:a9:93:a9:da:9f:f4:e8:d3:48:72:fc:d2:7d:0d:db:f7:39:
         f1:98:a7:45:9f:09:3a:67:28:e4:ea:31:d2:43:57:97:76:6d:
         05:a9:06:46:fb:24:aa:ae:3d:93:c2:70:44:1e:12:36:c5:5f:
         88:0d:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----