Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/YFo2wMWPT-rm8tk8LU-iqtw7Kao.roa
File:                     YFo2wMWPT-rm8tk8LU-iqtw7Kao.roa (raw, json)
Hash identifier:          +w9A8zRyh5TN3R84X2LKK8DCmjO/Z/rOT/MtdfSPTDw=
Subject key identifier:   60:5A:36:C0:C5:8F:4F:EA:E6:F2:D9:3C:2D:4F:A2:AA:DC:3B:29:AA
Certificate issuer:       /CN=827d76d044270471fedfa5211857f78d1854e868
Certificate serial:       018571A7A7DD34FFCE3746CBC406CDD0F3AE
Authority key identifier: 82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/YFo2wMWPT-rm8tk8LU-iqtw7Kao.roa
Signing time:             Mon 02 Jan 2023 08:44:50 +0000
ROA not before:           Mon 02 Jan 2023 08:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56867
IP address blocks:        185.112.24.0/22 maxlen: 22
                          188.94.216.0/21 maxlen: 21
                          2a01:6f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:a7:dd:34:ff:ce:37:46:cb:c4:06:cd:d0:f3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827d76d044270471fedfa5211857f78d1854e868
        Validity
            Not Before: Jan  2 08:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=605a36c0c58f4feae6f2d93c2d4fa2aadc3b29aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:5d:2d:b4:31:c8:aa:b9:89:46:23:15:31:
                    59:b2:ae:a7:e0:23:ac:1d:db:f0:10:9c:db:84:67:
                    0d:c2:8f:22:80:8f:b0:b0:df:1a:87:b0:ae:51:04:
                    d0:8f:d1:a4:d6:f4:f8:58:1c:3d:92:41:00:f6:b0:
                    c5:5e:c9:27:18:24:6a:cb:0a:43:ab:eb:e6:e8:6c:
                    1d:1c:1f:47:ba:84:36:3e:44:23:a5:c4:51:65:6e:
                    28:80:1e:4e:c7:0c:78:6b:48:2d:49:83:8b:c8:a3:
                    a8:18:d3:71:e9:47:95:78:3f:ac:e8:8c:d8:ab:94:
                    7d:e9:1f:a2:28:9b:c2:72:b9:c0:38:ba:e4:83:a9:
                    f8:6c:36:aa:2e:05:bf:8d:19:22:e1:33:f5:c4:7f:
                    a8:9e:d0:f2:28:fb:24:ef:d7:e8:62:89:6a:2e:85:
                    ee:71:9b:64:1f:ef:75:e4:32:c7:6d:6a:99:b7:f0:
                    54:59:b2:18:bb:5d:45:6f:d6:88:92:12:87:8b:61:
                    df:76:11:4e:51:5b:12:2d:f9:1e:e1:6b:76:b3:bb:
                    12:f5:c3:f0:53:7e:df:b9:80:91:c4:42:4d:4c:c5:
                    60:1b:40:e5:35:c3:80:1b:bc:31:2a:90:14:34:fa:
                    d6:e6:ce:77:85:95:dc:9f:b6:a9:d9:e0:b9:e5:95:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:36:C0:C5:8F:4F:EA:E6:F2:D9:3C:2D:4F:A2:AA:DC:3B:29:AA
            X509v3 Authority Key Identifier:
                keyid:82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/YFo2wMWPT-rm8tk8LU-iqtw7Kao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.24.0/22
                  188.94.216.0/21
                IPv6:
                  2a01:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:00:ff:bb:11:d7:f5:e4:8b:ae:87:d6:75:7e:bc:fe:30:3b:
         9c:36:31:78:f7:93:bc:86:18:a4:b8:20:74:8c:3b:c1:02:a9:
         b3:58:d0:00:c0:47:c5:af:7d:7e:a1:18:4c:fe:d8:00:75:63:
         40:3f:f7:59:93:30:40:de:1c:71:5e:05:fb:62:66:b8:14:58:
         4c:f8:94:3a:cc:9e:fb:16:eb:db:95:c2:85:bb:df:da:b3:77:
         62:96:fe:4d:86:d7:a9:6b:d5:6d:93:c5:c8:5f:0c:b0:ba:45:
         af:b3:63:87:89:2c:bc:66:eb:33:56:f2:c3:3b:68:06:3d:e2:
         34:2b:aa:b2:ac:d6:95:c6:90:4f:ee:27:b4:d1:cc:bb:e7:5a:
         1e:07:92:59:65:dd:2f:c5:8a:24:fd:8e:e1:70:90:01:30:7f:
         04:11:36:0e:cd:3f:3c:75:2a:d2:09:82:46:b1:98:05:b2:e7:
         b6:33:ee:9d:b8:21:17:60:7b:94:2b:91:5d:aa:7b:78:94:52:
         ba:2f:9d:a8:67:7d:0f:46:04:b2:c2:05:b9:b5:3a:3c:88:3e:
         3a:06:cc:42:df:3f:36:f6:8d:89:be:e8:5c:92:55:a6:62:cb:
         b0:67:d8:d6:a6:1e:59:34:e2:2d:bd:ea:8b:20:0e:c9:2e:68:
         13:0e:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----