Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/gai_1_YTddM879rmHkdM_NCRDw0.roa
File:                     gai_1_YTddM879rmHkdM_NCRDw0.roa (raw, json)
Hash identifier:          OqopCSv70ojfBOhgdsNVDI0zvcR/1aEI5uAnPfvoIo8=
Subject key identifier:   81:A8:BF:D7:F6:13:75:D3:3C:EF:DA:E6:1E:47:4C:FC:D0:91:0F:0D
Certificate issuer:       /CN=abcf18a113a3659ce89362cdc53085958f5ae113
Certificate serial:       0184AA41D4F0280F8B8A71054F9745B32EC2
Authority key identifier: AB:CF:18:A1:13:A3:65:9C:E8:93:62:CD:C5:30:85:95:8F:5A:E1:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q88YoROjZZzok2LNxTCFlY9a4RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/gai_1_YTddM879rmHkdM_NCRDw0.roa
Signing time:             Thu 24 Nov 2022 15:29:11 +0000
ROA not before:           Thu 24 Nov 2022 15:29:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202827
IP address blocks:        185.1.148.0/24 maxlen: 24
                          2001:7f8:140::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:aa:41:d4:f0:28:0f:8b:8a:71:05:4f:97:45:b3:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abcf18a113a3659ce89362cdc53085958f5ae113
        Validity
            Not Before: Nov 24 15:29:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81a8bfd7f61375d33cefdae61e474cfcd0910f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:c0:8a:a4:e4:a7:a8:3f:17:ca:13:7d:27:
                    de:eb:a6:2e:e5:f7:06:d1:64:6e:c3:92:ef:9f:31:
                    d9:74:2e:53:b2:e8:8c:b3:00:b3:63:a3:cd:37:fc:
                    b6:c3:1b:61:e7:6b:92:b3:64:39:2c:90:a0:a6:d2:
                    6c:f0:73:a7:5d:5e:80:1c:02:63:94:d4:24:fd:af:
                    f1:29:34:4f:a9:ee:4e:c7:82:3b:e8:eb:3b:84:70:
                    4f:64:91:38:49:ed:c5:3c:ec:8e:79:bf:7e:6a:17:
                    d4:3a:55:2f:ae:cf:73:e9:a3:43:d7:73:8f:f3:c1:
                    a7:e7:c8:93:0e:35:9d:8b:d0:ec:4a:69:ee:42:09:
                    0b:bc:4d:dc:2d:fa:58:ea:d5:db:5c:e5:f3:be:fc:
                    45:9a:6b:1f:9d:aa:c2:07:8a:27:76:4b:d4:65:d1:
                    db:f7:c7:15:b7:29:0d:6f:91:91:46:c5:1c:03:47:
                    29:c3:e9:b5:9e:c7:91:22:dc:bc:26:94:23:2d:4e:
                    68:77:95:4f:1a:9b:d9:c9:cd:bd:1f:ac:aa:1d:d7:
                    10:bc:6d:d9:09:0f:08:17:d8:6e:eb:2b:2f:10:33:
                    68:4a:33:ae:7c:88:67:61:dd:a9:0f:5c:ea:98:49:
                    b8:e8:b1:f9:61:24:41:51:9b:c3:44:51:5f:0c:5d:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A8:BF:D7:F6:13:75:D3:3C:EF:DA:E6:1E:47:4C:FC:D0:91:0F:0D
            X509v3 Authority Key Identifier:
                keyid:AB:CF:18:A1:13:A3:65:9C:E8:93:62:CD:C5:30:85:95:8F:5A:E1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q88YoROjZZzok2LNxTCFlY9a4RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/gai_1_YTddM879rmHkdM_NCRDw0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/q88YoROjZZzok2LNxTCFlY9a4RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.148.0/24
                IPv6:
                  2001:7f8:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:07:cb:51:5b:2f:10:7d:6e:91:83:bc:7e:41:95:f5:5e:
         df:bc:e4:6a:c9:aa:37:1a:f4:50:89:27:70:24:c0:b7:4e:f5:
         85:f7:6c:be:9d:d4:23:70:01:61:9b:7b:88:34:e3:98:1d:e4:
         f4:7f:04:b7:c9:35:6b:2c:ba:e0:c0:1c:a3:50:9e:b7:cd:2e:
         81:87:08:29:e2:45:00:f9:9f:ea:0a:a9:7a:f6:4e:fa:78:6a:
         87:e3:4f:72:88:df:34:fc:c2:62:c4:da:7a:ee:b8:16:ef:14:
         3d:1e:7c:9c:43:24:22:66:0a:6b:78:0c:df:40:99:79:a7:8c:
         7f:2e:42:39:52:7f:43:6e:7a:52:ca:fa:5b:17:9f:c0:69:0a:
         8b:f9:e4:8e:da:1c:50:4d:35:29:08:62:82:0a:c5:18:df:f7:
         a1:47:a9:d8:39:b8:0f:b3:93:fb:b6:1f:8e:38:d2:ee:c7:5a:
         e7:93:64:c5:ea:88:ce:b3:cb:2c:36:18:59:e2:8f:39:36:94:
         75:27:bc:4a:4b:f2:c3:6e:c0:5e:13:71:35:4e:84:05:fe:1a:
         06:54:5e:b9:bc:f5:87:50:d2:1d:c4:52:cb:62:d1:1e:13:76:
         71:e4:f1:83:28:40:1b:51:e3:b6:53:c6:ea:bb:a6:fd:f4:e4:
         8d:9b:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----