Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa
File:                     zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa (raw, json)
Hash identifier:          Sjr+lts/NYtFDCyPAuJtXvgiw8roi7CT9iWlsop++Lk=
Subject key identifier:   CC:64:A5:79:C7:FE:31:BD:8B:AF:41:0B:51:90:6D:E1:7F:6C:24:56
Certificate issuer:       /CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Certificate serial:       1510C629
Authority key identifier: B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa
Signing time:             Sat 01 Jan 2022 07:52:29 +0000
ROA not before:           Sat 01 Jan 2022 07:52:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206894
IP address blocks:        185.102.44.0/22 maxlen: 22
                          2a00:d220::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353420841 (0x1510c629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
        Validity
            Not Before: Jan  1 07:52:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc64a579c7fe31bd8baf410b51906de17f6c2456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:56:30:a5:be:c5:6c:92:10:62:09:0a:5b:
                    0f:1f:14:ae:96:a4:53:7b:1e:3c:44:eb:20:bd:0f:
                    4d:bb:71:86:2c:ef:be:6e:02:71:b1:f0:9b:09:dc:
                    1d:98:02:bd:43:48:02:bf:7b:61:73:c3:65:f2:44:
                    f1:fd:2d:0c:7d:22:7c:e4:c0:74:8d:48:7f:5f:ff:
                    f1:77:ed:14:4c:d8:91:c8:83:c6:6c:74:ac:63:40:
                    ec:89:a6:a9:60:29:fa:4c:51:ec:a3:58:02:70:a8:
                    c6:71:1a:f1:aa:46:6f:bf:c2:c1:51:89:04:be:73:
                    6a:40:e1:6b:92:89:68:d1:de:17:60:01:41:12:a6:
                    02:0d:63:66:7b:73:86:0c:a6:fa:3c:96:25:6f:bf:
                    2d:e4:9b:f6:14:29:fa:29:0c:a5:1e:5b:02:55:5b:
                    5a:7c:61:9d:15:63:18:4c:28:b9:7e:de:63:b7:20:
                    5f:0d:09:8a:d3:d7:8a:a6:41:ca:b3:0f:83:e1:ae:
                    b8:c9:32:b4:a1:8c:34:d8:ef:58:d8:17:4d:b0:e2:
                    58:2a:94:33:c2:b1:b0:98:0c:d1:0f:f4:f3:c8:ff:
                    aa:fc:e7:89:4b:98:cc:da:46:ba:61:0c:61:b6:27:
                    9c:6b:ed:5a:8c:0f:76:43:26:2c:e8:ae:b9:85:95:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:64:A5:79:C7:FE:31:BD:8B:AF:41:0B:51:90:6D:E1:7F:6C:24:56
            X509v3 Authority Key Identifier:
                keyid:B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.44.0/22
                IPv6:
                  2a00:d220::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:ea:3b:5c:19:6f:63:50:44:1d:fa:06:fb:fc:d4:94:23:
         3d:79:0b:b4:fe:7c:27:02:de:7b:90:d6:2a:56:07:a0:d7:b0:
         0f:c7:b3:1b:3b:3a:8b:df:b8:a8:9d:ee:cf:2a:e0:bd:59:eb:
         8f:d1:e8:f1:ae:ae:46:43:9c:d5:3d:b0:de:db:5e:62:46:b4:
         d7:5c:b1:8c:88:c8:52:14:88:33:dc:64:9d:7b:e3:d4:db:d9:
         c0:f0:15:4e:cd:a4:fd:36:dc:aa:60:07:d7:88:14:bc:4d:86:
         aa:7d:af:5a:bd:de:8b:72:21:1b:f3:ce:42:41:34:22:88:ad:
         62:13:ad:e7:e3:31:a1:4f:58:06:d2:78:0c:e5:5d:21:32:3f:
         c9:a1:47:08:6f:73:bb:f0:de:ac:2c:e2:ee:c7:b1:fe:df:99:
         e5:6b:71:1b:4b:f2:78:03:d9:44:06:7e:b2:8b:a5:b8:a2:d9:
         aa:63:69:b8:50:66:68:ae:48:fa:ef:bf:e2:8e:a5:ff:52:9d:
         5c:5a:6e:50:41:fd:0f:a3:50:eb:67:bc:fa:60:ec:1f:73:99:
         6e:0b:9c:44:04:78:03:0e:9e:e1:a6:0b:4c:c5:b9:f4:55:cf:
         85:8a:91:2e:f3:25:28:25:a1:47:61:dd:9c:6f:1a:0e:1b:d7:
         96:32:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----