Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/4ioT2YFM2cnXZ6Hh3ObItcn-N1Q.roa
File:                     4ioT2YFM2cnXZ6Hh3ObItcn-N1Q.roa (raw, json)
Hash identifier:          EtJqdUQ2QBHYD+fapgC2J31NdWWTp3BSV0Z3P0X0B74=
Subject key identifier:   E2:2A:13:D9:81:4C:D9:C9:D7:67:A1:E1:DC:E6:C8:B5:C9:FE:37:54
Certificate issuer:       /CN=8dde397de8fedec69abb5d74648e771c08b34198
Certificate serial:       022ADF36
Authority key identifier: 8D:DE:39:7D:E8:FE:DE:C6:9A:BB:5D:74:64:8E:77:1C:08:B3:41:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jd45fej-3saau110ZI53HAizQZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/4ioT2YFM2cnXZ6Hh3ObItcn-N1Q.roa
Signing time:             Tue 18 Jan 2022 11:10:48 +0000
ROA not before:           Tue 18 Jan 2022 11:10:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50258
IP address blocks:        91.199.153.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36364086 (0x22adf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dde397de8fedec69abb5d74648e771c08b34198
        Validity
            Not Before: Jan 18 11:10:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e22a13d9814cd9c9d767a1e1dce6c8b5c9fe3754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:a8:0b:81:49:32:d3:8f:5b:0c:c7:e0:04:
                    0d:f2:7d:63:f2:a8:d2:46:1c:23:dd:82:06:bb:aa:
                    42:42:1c:d0:29:42:5f:13:64:81:00:07:32:cb:f3:
                    08:04:2f:b8:dc:24:be:de:ae:2b:19:55:09:3f:01:
                    2f:4c:fc:fc:cc:4f:50:d4:ea:e3:a1:6f:c1:f0:32:
                    93:68:af:ee:c7:8a:9a:93:3d:99:82:18:fd:41:3c:
                    aa:78:6d:8c:5b:5e:ea:7c:07:a7:5f:66:40:c5:4c:
                    fd:ab:02:4b:a2:83:19:01:66:45:36:ec:0c:ae:fe:
                    af:04:04:f4:9c:d8:04:9a:c9:7d:cd:d9:f1:2d:30:
                    a3:fa:49:a6:24:ee:b9:3d:9f:65:70:9f:ad:80:92:
                    f5:e1:ae:dd:62:0d:1a:c2:e9:5a:15:f8:db:ce:38:
                    18:23:67:97:c3:46:67:1a:47:4c:32:46:dc:2c:d3:
                    91:b1:ce:eb:41:0f:1f:7a:73:c6:25:23:45:4c:45:
                    f9:61:c9:6a:5a:fe:64:ce:21:3b:8f:f7:6e:4a:f5:
                    77:47:af:97:95:13:05:4e:8e:d6:d4:a2:62:59:de:
                    9b:87:a2:fb:1e:91:9e:61:41:2c:1a:72:e4:70:83:
                    2b:6f:26:64:d0:9c:78:f1:58:7f:ab:83:0a:9b:ea:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:13:D9:81:4C:D9:C9:D7:67:A1:E1:DC:E6:C8:B5:C9:FE:37:54
            X509v3 Authority Key Identifier:
                keyid:8D:DE:39:7D:E8:FE:DE:C6:9A:BB:5D:74:64:8E:77:1C:08:B3:41:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jd45fej-3saau110ZI53HAizQZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/4ioT2YFM2cnXZ6Hh3ObItcn-N1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/jd45fej-3saau110ZI53HAizQZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:bc:ed:81:68:f3:fb:ac:94:01:22:1a:1d:47:56:cc:ad:
         19:39:a9:64:ef:07:db:3d:c1:c7:ba:c3:e1:a5:05:ac:b1:fa:
         52:78:75:c4:10:87:a7:10:72:52:66:85:50:d5:48:ca:76:f1:
         ea:59:62:08:af:50:de:32:5a:44:05:63:80:59:59:4f:5c:ec:
         c6:9f:a6:b1:26:12:31:75:a3:77:c4:38:c3:b5:09:20:ca:fd:
         ca:f3:0a:18:96:e2:33:56:a8:cf:65:f5:84:36:d0:99:e4:43:
         50:ef:b9:77:7c:41:e2:00:33:de:32:03:4a:7b:0a:a8:ea:7c:
         52:4e:13:ef:8b:75:ac:c1:d3:a8:ad:28:55:b8:36:d2:4f:2d:
         a2:4a:d2:4c:cc:08:d2:b6:63:83:fc:f5:0d:86:e1:6e:df:ee:
         1b:90:10:f4:e2:ae:85:9d:52:80:d6:40:ae:64:2b:5b:46:7e:
         67:2e:c2:fc:6a:03:7b:3f:9e:e4:df:31:9b:cd:47:7b:cf:52:
         2d:cf:de:97:fd:6c:99:1a:34:d1:e2:73:90:fc:5b:da:6c:49:
         37:cb:0b:92:b1:33:08:84:07:49:d5:08:89:ad:79:16:be:26:
         4f:1e:15:8a:62:5b:e0:8e:22:08:5b:e3:a8:c6:b4:7d:98:b8:
         0f:c6:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----