Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/pwCecYv5y0pjUYjmUZyD80OaAjg.roa
File:                     pwCecYv5y0pjUYjmUZyD80OaAjg.roa (raw, json)
Hash identifier:          lZlS6ifJNZXvQixln/ECh6vO2Blpsu0inwIChUSSyXI=
Subject key identifier:   A7:00:9E:71:8B:F9:CB:4A:63:51:88:E6:51:9C:83:F3:43:9A:02:38
Certificate issuer:       /CN=4456921693e31d6c96f671bea7341d0d58dfffe9
Certificate serial:       01842D6877B11120AAD7834FC20924DC7708
Authority key identifier: 44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/pwCecYv5y0pjUYjmUZyD80OaAjg.roa
Signing time:             Mon 31 Oct 2022 09:38:51 +0000
ROA not before:           Mon 31 Oct 2022 09:38:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51679
IP address blocks:        185.253.53.0/24 maxlen: 24
                          2a10:b740::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2d:68:77:b1:11:20:aa:d7:83:4f:c2:09:24:dc:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456921693e31d6c96f671bea7341d0d58dfffe9
        Validity
            Not Before: Oct 31 09:38:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7009e718bf9cb4a635188e6519c83f3439a0238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:8c:60:c2:4b:92:c9:4e:fb:03:04:ce:70:
                    2f:96:c5:11:49:44:f4:c0:63:5b:74:a9:63:90:47:
                    c8:f7:71:46:15:e8:90:8c:57:5a:1c:1e:f5:d3:86:
                    12:c6:cb:94:bc:5b:1f:38:f0:76:01:47:a3:d9:bc:
                    b2:46:f5:ba:37:5a:70:35:75:40:6d:4a:fc:11:b7:
                    1f:79:32:7b:b3:d2:68:8e:40:ef:97:fd:11:eb:96:
                    20:cc:1d:36:ad:a8:2c:9c:7f:df:6b:f0:a6:ff:1c:
                    8c:df:b8:97:45:81:77:47:7a:86:a3:50:4b:83:50:
                    b5:f9:a5:37:21:04:a2:d0:b1:2f:1b:45:f0:b0:2b:
                    f2:2c:51:e3:f0:46:a7:c2:01:3a:67:a7:dd:97:8c:
                    49:56:19:d7:e0:13:9b:fb:4e:47:9f:aa:02:81:33:
                    0d:25:99:4a:29:6d:fd:b4:c8:42:19:8e:a1:82:45:
                    d2:47:f1:95:06:68:fb:da:6a:da:8b:a2:e6:53:4d:
                    6d:f1:ea:46:b8:14:7a:2c:80:7d:6b:b6:21:93:c5:
                    3b:56:2e:fa:5c:63:c1:b0:2d:90:fc:27:72:2d:de:
                    03:98:94:9e:c9:1a:a7:e1:c2:c3:ce:7c:1c:63:c0:
                    77:24:58:77:9d:75:15:e0:82:a5:4e:2f:3d:3c:9b:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:9E:71:8B:F9:CB:4A:63:51:88:E6:51:9C:83:F3:43:9A:02:38
            X509v3 Authority Key Identifier:
                keyid:44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/pwCecYv5y0pjUYjmUZyD80OaAjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/RFaSFpPjHWyW9nG-pzQdDVjf_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.53.0/24
                IPv6:
                  2a10:b740::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:2a:ce:88:85:2d:74:3f:2c:ac:4a:b6:66:f4:2b:97:45:
         66:41:41:55:0d:a8:a3:da:ce:38:29:a0:ec:0b:61:12:a1:d6:
         52:b1:74:18:4f:16:43:0d:05:58:e7:ad:9b:3e:ca:38:dc:15:
         97:e1:bc:38:d0:f9:ea:8d:1b:48:d0:d2:bb:6c:cd:11:40:18:
         eb:a1:fe:19:55:5c:52:ec:c6:fe:19:ef:98:a6:4f:db:83:b5:
         bc:6d:28:2a:9d:39:15:13:02:09:cf:61:f9:ce:11:16:84:cd:
         87:4b:6a:f2:cc:bb:89:4c:82:2a:92:b4:81:0c:e0:1a:9e:cf:
         c0:3f:2c:dd:78:98:86:f9:59:9b:32:99:72:c8:23:3f:f6:e7:
         00:e7:ee:ff:28:36:80:e5:79:58:4e:c6:cb:6e:ae:64:bb:3f:
         a2:33:a9:53:ce:dc:02:6d:6e:65:4a:9b:a0:7c:8b:32:39:46:
         99:d3:1b:e7:a9:d7:9f:46:9a:2a:e4:c5:ce:7c:3a:62:dd:43:
         90:5b:57:e9:b0:10:f6:f5:73:91:49:72:ce:a3:61:eb:c7:c1:
         0b:e2:28:a7:1f:27:87:87:f6:6d:4c:2f:75:45:b9:63:5e:56:
         19:c8:e6:98:b3:66:01:95:f3:7b:21:28:ca:8d:d8:23:32:d0:
         b5:35:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----