Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/5Cq9yYWC4pjEqll3B4e8Ac4SN4o.roa
File:                     5Cq9yYWC4pjEqll3B4e8Ac4SN4o.roa (raw, json)
Hash identifier:          e4ufhhSzaXJvrzIegFq+Q3gEsNCpSDaqd4UGampfaZA=
Subject key identifier:   E4:2A:BD:C9:85:82:E2:98:C4:AA:59:77:07:87:BC:01:CE:12:37:8A
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       0185EE4F7C1D8C583672816C57E905D2D0F7
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/5Cq9yYWC4pjEqll3B4e8Ac4SN4o.roa
Signing time:             Thu 26 Jan 2023 13:41:04 +0000
ROA not before:           Thu 26 Jan 2023 13:41:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50391
IP address blocks:        213.5.132.0/24 maxlen: 24
                          2a11:29c0::/44 maxlen: 48
                          2a11:29c0:10::/48 maxlen: 48
                          2a11:29c0:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ee:4f:7c:1d:8c:58:36:72:81:6c:57:e9:05:d2:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan 26 13:41:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e42abdc98582e298c4aa59770787bc01ce12378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:9e:ac:b8:5f:72:c5:a8:b7:2b:74:92:0a:
                    c6:0f:5e:58:c1:5f:df:ae:41:a7:2a:ce:af:b3:0c:
                    36:e1:12:f2:78:16:e6:68:4d:44:27:54:ea:66:dd:
                    7a:e3:b0:ba:9e:48:87:2c:67:42:d2:59:9f:24:0d:
                    b4:82:7c:5e:5f:15:fa:f2:72:b8:ff:11:83:fd:35:
                    84:b2:d6:64:de:05:f0:97:8e:c0:0c:8b:ef:7b:75:
                    a6:50:70:61:0f:70:2d:5d:60:07:89:dd:b8:c4:33:
                    fc:26:a4:6b:73:04:00:5a:86:f4:92:11:3f:f0:ca:
                    f2:87:7e:02:81:97:85:fa:a4:17:a7:62:f8:81:00:
                    38:13:f1:1d:f2:a3:8d:bd:aa:38:11:9a:cc:f5:2b:
                    ca:97:04:56:09:2b:0a:62:92:db:a5:be:b2:7e:b9:
                    97:f6:6a:29:72:21:06:ac:45:bb:51:71:d0:f0:9e:
                    37:3f:7b:61:8e:b2:0c:9f:2a:fd:9e:34:92:51:2c:
                    b9:00:98:fa:86:67:d4:00:dd:ca:bc:10:a7:61:ad:
                    b5:30:b1:1f:e6:af:18:5c:d6:82:94:97:60:60:4f:
                    78:14:73:d2:38:bd:c4:32:f7:fe:68:f8:dc:80:c7:
                    2e:5f:63:85:74:e6:e7:64:ab:81:07:5f:bb:99:36:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:BD:C9:85:82:E2:98:C4:AA:59:77:07:87:BC:01:CE:12:37:8A
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/5Cq9yYWC4pjEqll3B4e8Ac4SN4o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.5.132.0/24
                IPv6:
                  2a11:29c0::-2a11:29c0:11:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         16:04:0a:8b:b4:07:c2:e9:28:aa:27:0f:37:1a:6b:d7:bf:26:
         29:88:59:a4:28:47:b6:03:84:31:fe:14:bc:8d:12:f6:03:e6:
         5c:14:a1:2c:84:84:74:c7:f1:6a:32:2e:9b:0a:51:a0:d1:e5:
         9f:b8:71:22:ba:03:7e:44:91:ad:a2:ce:e2:d1:68:bd:57:c9:
         07:53:36:f5:e2:6b:b0:d2:b4:94:94:25:87:20:63:f9:4f:db:
         27:e9:ca:7e:84:49:18:30:eb:2b:d5:81:9f:2e:f9:0e:5f:89:
         5a:91:2b:ff:21:0d:69:10:20:a0:74:c4:90:08:c6:9e:e4:9d:
         d8:a0:ff:e0:5c:a4:b6:f5:7e:b7:f0:a4:09:fc:65:ed:ac:2b:
         cb:e3:95:8c:f0:8a:e7:8c:bc:8b:83:e7:23:b7:3a:1e:2c:fb:
         6d:fd:ae:07:60:9c:08:3c:6c:c6:37:35:56:94:6e:b4:be:ae:
         44:b4:93:fb:06:f9:44:8d:05:4c:3d:69:6c:04:6d:4a:6c:67:
         81:03:32:cd:c1:3c:8d:50:d9:ff:42:43:6f:64:01:31:21:3d:
         c3:be:6e:58:de:7e:ee:d9:bb:69:fc:d9:52:4a:47:4f:9c:9f:
         e9:42:09:97:69:f1:b1:96:a3:e6:da:55:85:dc:29:cf:15:2c:
         40:be:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----