Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/3UmOBXU5ujhiNS55TW0tbd8ZkQs.roa
File:                     3UmOBXU5ujhiNS55TW0tbd8ZkQs.roa (raw, json)
Hash identifier:          1Yc22kFd65QDv/XYvd40WoZ84KeWN2D8+wSosWMcxyQ=
Subject key identifier:   DD:49:8E:05:75:39:BA:38:62:35:2E:79:4D:6D:2D:6D:DF:19:91:0B
Certificate issuer:       /CN=51dfa98887f456827a36f665657f550c425e38f9
Certificate serial:       018296FC201EB249FB6497F3729513FC1E99
Authority key identifier: 51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/3UmOBXU5ujhiNS55TW0tbd8ZkQs.roa
Signing time:             Sat 13 Aug 2022 11:34:41 +0000
ROA not before:           Sat 13 Aug 2022 11:34:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        194.93.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:96:fc:20:1e:b2:49:fb:64:97:f3:72:95:13:fc:1e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dfa98887f456827a36f665657f550c425e38f9
        Validity
            Not Before: Aug 13 11:34:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dd498e057539ba3862352e794d6d2d6ddf19910b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:0e:09:8c:ed:ff:30:c1:b1:17:9f:e9:76:
                    36:1f:0e:c3:f3:ac:f4:89:b4:5c:b2:2b:35:09:ae:
                    12:77:4e:10:c4:e0:f5:d4:58:4b:8d:31:2b:5b:63:
                    2b:01:8f:b4:94:33:2f:bd:29:83:80:1c:ee:1d:ac:
                    48:7c:b5:74:4c:50:59:ef:ab:02:71:96:3e:7b:62:
                    de:1e:90:93:c9:7c:d6:2c:3b:a1:0f:85:c3:e2:9e:
                    8d:3a:bc:e5:23:a3:1a:89:8e:06:f6:89:81:9c:66:
                    dd:01:40:a3:d3:ac:42:e4:05:49:4e:16:52:ea:2c:
                    d7:e3:12:74:5d:91:24:22:c8:6c:0d:b7:1c:e1:18:
                    4c:77:39:f6:ce:a1:7d:41:0e:eb:88:7e:70:b9:db:
                    33:5e:b0:d6:c7:c5:49:de:c2:b8:f9:95:5a:c9:94:
                    16:4f:5c:bc:08:3f:4e:cf:41:0b:93:8b:c0:ba:68:
                    be:40:b7:86:28:0e:33:57:02:71:a1:ce:e1:0c:f6:
                    3e:e0:c5:8c:96:9a:66:de:f4:ef:2f:22:a3:24:a7:
                    c3:6f:97:fa:72:de:4d:60:a3:ef:d7:c8:a0:b5:28:
                    83:6d:25:32:16:23:f4:f0:fe:5f:bf:c3:c5:60:77:
                    e6:f4:0d:64:88:67:9e:62:71:50:65:9b:b4:cd:06:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:8E:05:75:39:BA:38:62:35:2E:79:4D:6D:2D:6D:DF:19:91:0B
            X509v3 Authority Key Identifier:
                keyid:51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/3UmOBXU5ujhiNS55TW0tbd8ZkQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:e5:35:c2:69:5d:c4:4e:43:a2:32:4a:db:d1:9c:da:50:
         c2:ed:66:b0:0f:b3:95:77:f0:bb:ca:e4:0f:34:b0:39:92:6e:
         e5:90:16:bf:2b:32:4e:d2:00:7c:dc:e6:64:1f:3a:2c:25:a8:
         bf:0f:3f:83:bf:cf:70:e0:5b:ef:6a:7b:59:d6:10:6a:d0:52:
         0a:f6:2e:97:a7:9b:8e:fd:02:2d:fa:7c:f8:73:69:2f:fc:f2:
         b1:af:9c:a3:bc:53:81:61:58:4c:77:f5:e2:ef:b2:5b:84:ea:
         26:d6:ed:c8:ca:3f:35:37:a7:c8:14:a9:94:9b:b1:4e:be:9a:
         31:34:6f:32:53:54:2b:6d:52:a1:90:a5:17:53:6a:cf:f2:5d:
         d4:98:48:bf:d0:10:75:3d:e6:ca:fb:3d:0a:45:58:4c:4d:b6:
         57:c7:e9:58:fa:cb:e2:45:d4:76:bf:61:e7:6b:ab:a0:bf:12:
         c5:bb:78:52:8c:6f:ab:84:12:e0:c6:c7:e7:ab:34:54:e5:60:
         3e:08:ae:80:13:0b:af:f1:f0:c1:f5:e2:fe:94:ee:37:1e:b6:
         a2:6f:9f:ca:20:a7:d3:cf:a1:8a:a0:56:87:26:11:ef:6c:f4:
         67:0f:c8:4d:ce:d1:f9:e4:f0:cf:88:cb:42:7c:8c:ff:e0:bc:
         50:93:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----