Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/FC3CrfNJc-8MOuvxpLx6cH8y5c0.roa
File:                     FC3CrfNJc-8MOuvxpLx6cH8y5c0.roa (raw, json)
Hash identifier:          lms5LzRCR+Pjx4uWa3F0/13KzgYB2wZyXVt3ZTClKvs=
Subject key identifier:   14:2D:C2:AD:F3:49:73:EF:0C:3A:EB:F1:A4:BC:7A:70:7F:32:E5:CD
Certificate issuer:       /CN=e013e78538ccc59d1c58d8a0c7e050853916c5e8
Certificate serial:       036C7E47
Authority key identifier: E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/FC3CrfNJc-8MOuvxpLx6cH8y5c0.roa
Signing time:             Sat 01 Jan 2022 12:04:21 +0000
ROA not before:           Sat 01 Jan 2022 12:04:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9208
IP address blocks:        193.219.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57441863 (0x36c7e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e013e78538ccc59d1c58d8a0c7e050853916c5e8
        Validity
            Not Before: Jan  1 12:04:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=142dc2adf34973ef0c3aebf1a4bc7a707f32e5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:9f:42:b4:c7:2a:bf:c7:9a:40:4f:46:92:
                    9d:35:4f:19:77:f7:c0:7f:23:0a:8c:43:b3:50:de:
                    14:a8:ba:30:1a:a2:33:0f:04:f3:e3:76:c5:b7:5c:
                    d5:5d:3f:1e:7c:c8:5b:2f:f2:3e:50:45:0e:d3:18:
                    86:f2:bb:52:a8:45:22:c6:63:b0:c4:92:0f:2d:29:
                    41:e6:3c:e9:c3:39:d8:b0:05:da:4c:9a:f3:c0:a5:
                    5e:5b:88:47:bf:86:98:a3:d1:88:ac:30:e1:5a:27:
                    43:7b:2c:73:b1:e7:71:91:11:d6:1e:63:5d:3b:99:
                    5f:51:3a:f9:9a:60:61:f1:4d:d8:99:7c:ef:11:50:
                    09:54:4d:3c:a8:7d:c2:78:ff:00:0a:c9:80:fd:ea:
                    1b:bf:da:6c:48:46:f0:25:5d:4c:28:c6:42:df:2c:
                    63:da:86:68:31:18:a1:49:93:06:7e:b8:ae:ad:96:
                    49:1b:e1:75:e6:aa:1c:c1:42:48:58:7f:1b:2b:a9:
                    ee:5b:2f:1f:a6:02:de:53:c1:17:ff:1e:44:e7:f0:
                    ea:99:ff:bc:5a:90:1a:9c:7f:a0:56:ac:76:e0:89:
                    17:aa:bb:9b:a1:8c:23:1c:33:f2:2f:08:4c:b3:00:
                    1c:6d:c6:ed:c9:bb:55:d2:40:d1:ad:5c:e4:58:64:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:C2:AD:F3:49:73:EF:0C:3A:EB:F1:A4:BC:7A:70:7F:32:E5:CD
            X509v3 Authority Key Identifier:
                keyid:E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/FC3CrfNJc-8MOuvxpLx6cH8y5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:ce:8a:dd:b1:1e:20:7d:61:cf:6a:9d:59:ca:c7:ff:5f:
         11:e1:9c:3d:94:e6:87:82:ec:7b:43:13:c3:97:7f:f0:de:04:
         55:99:77:3b:8d:60:a6:e1:f9:ba:9b:c6:38:2d:11:16:00:70:
         a3:7e:31:8c:7c:cf:b0:cc:3c:15:35:9b:ac:44:96:a8:91:1d:
         8a:c7:4a:c5:94:b5:64:20:2d:7a:ec:15:71:7b:9d:96:6a:88:
         8d:e2:c9:88:1c:f2:4a:ce:2b:2b:95:d2:58:90:a0:54:25:6e:
         74:7e:59:40:66:8e:22:1d:2a:b3:ea:d9:a0:80:1e:d7:9b:57:
         5d:2c:5d:8c:62:bb:83:00:bd:da:e4:ba:3f:59:34:29:e3:7f:
         8c:ff:1d:6c:60:b4:fd:6e:e9:ba:f8:8c:f4:a4:e3:79:90:f8:
         13:03:d1:31:25:88:e7:5c:45:cc:97:7e:67:1f:a7:73:fb:d4:
         83:33:9b:88:5e:56:0e:23:14:76:7d:73:f4:1e:d8:5e:2a:eb:
         65:ae:a0:28:62:a1:2b:a1:82:d4:09:93:52:5e:fb:7a:55:2b:
         43:a8:ab:2c:88:fa:8f:93:1e:b2:4e:bc:61:67:c7:1a:8a:f0:
         5c:cd:73:cf:34:30:9d:c9:7f:a7:43:15:96:f6:a2:a9:49:6c:
         f1:fa:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----