Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/tjtlSvSo4LOR6TNeC4eMIfEp51E.roa
File:                     tjtlSvSo4LOR6TNeC4eMIfEp51E.roa (raw, json)
Hash identifier:          JirPRlTk8+Q3ONq23pKVYd/jCwrBAsdz4wfeSxhhQaY=
Subject key identifier:   B6:3B:65:4A:F4:A8:E0:B3:91:E9:33:5E:0B:87:8C:21:F1:29:E7:51
Certificate issuer:       /CN=efc42ac4e0a2a02cced4d17d4449766b67b6a3e5
Certificate serial:       02224B
Authority key identifier: EF:C4:2A:C4:E0:A2:A0:2C:CE:D4:D1:7D:44:49:76:6B:67:B6:A3:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78QqxOCioCzO1NF9REl2a2e2o-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/tjtlSvSo4LOR6TNeC4eMIfEp51E.roa
Signing time:             Mon 17 Jan 2022 11:38:15 +0000
ROA not before:           Mon 17 Jan 2022 11:38:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206592
IP address blocks:        176.118.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139851 (0x2224b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc42ac4e0a2a02cced4d17d4449766b67b6a3e5
        Validity
            Not Before: Jan 17 11:38:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b63b654af4a8e0b391e9335e0b878c21f129e751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:1d:9f:94:0a:5b:1f:ac:22:d5:d5:d4:61:
                    47:75:bf:eb:ee:63:58:57:e3:e3:80:b2:4f:bf:8e:
                    6f:57:7b:30:1f:01:41:2f:0c:6c:22:ba:47:8b:79:
                    ed:3e:a8:86:69:87:f0:2b:ae:b9:92:b0:66:96:be:
                    56:d7:b3:59:d0:29:c1:f0:fd:85:47:06:04:18:c2:
                    89:b2:8b:13:99:63:f3:e4:fd:b6:f3:b0:cf:ea:f4:
                    2b:78:ec:ed:4e:7b:c0:dc:2b:b9:4f:34:e2:70:06:
                    a9:5f:ac:7b:0e:de:05:6e:6e:5e:08:9e:77:c3:03:
                    19:b5:bf:46:a1:5e:99:e7:07:f4:17:71:29:92:41:
                    b7:6d:33:a9:d4:6e:bf:1c:7b:6d:8b:14:1b:1a:f8:
                    0f:9c:0a:cd:a3:3b:a6:d4:30:d7:63:1f:04:be:27:
                    a2:61:f7:3b:98:51:cc:47:12:85:78:cf:d8:d7:de:
                    61:c7:58:f8:13:99:2f:12:1b:af:59:8b:3d:21:5f:
                    0c:91:7f:b5:cf:8f:db:7c:b3:4b:bb:91:e5:bf:bb:
                    0e:fd:6f:4b:3f:fc:6b:4f:f3:ca:27:9a:4e:5d:ee:
                    0e:28:8e:78:0f:30:d8:5a:54:2d:b2:3f:80:0a:0d:
                    b0:99:86:0a:9b:be:9a:e1:58:64:24:95:59:a2:1d:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:65:4A:F4:A8:E0:B3:91:E9:33:5E:0B:87:8C:21:F1:29:E7:51
            X509v3 Authority Key Identifier:
                keyid:EF:C4:2A:C4:E0:A2:A0:2C:CE:D4:D1:7D:44:49:76:6B:67:B6:A3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78QqxOCioCzO1NF9REl2a2e2o-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/tjtlSvSo4LOR6TNeC4eMIfEp51E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/78QqxOCioCzO1NF9REl2a2e2o-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:24:6e:fe:4f:78:6b:4f:9d:23:95:95:05:eb:80:98:b2:
         92:41:d1:5a:a2:32:a0:9c:90:2a:c3:0e:1d:d3:a0:cb:6c:11:
         dc:9e:7b:d0:bd:37:16:f3:84:34:78:4a:9a:da:25:d8:39:e1:
         de:08:10:4b:a1:0a:c4:44:4c:44:5e:b4:39:8d:ed:19:c6:b1:
         dc:3a:d2:c2:f6:33:34:6d:5d:5d:fe:c8:72:8c:0d:c5:fa:24:
         cb:8b:19:e4:0e:f8:8e:a5:92:ea:1e:97:bc:24:17:2d:39:7c:
         8c:3b:8f:41:63:0f:c4:5f:9f:14:51:0f:f1:44:68:0a:b8:ea:
         4e:4d:47:3d:d0:cf:55:43:14:c2:8f:d8:81:37:e3:ef:45:f5:
         b0:26:87:ca:c1:5c:6b:04:98:34:37:c1:fc:d5:b5:71:1f:17:
         37:5e:b1:b5:98:3d:da:8e:be:6b:af:ae:c1:f4:c7:33:ed:2c:
         5a:a5:37:8f:6a:de:7e:fb:fc:77:ea:0d:5c:2a:cd:ef:af:b3:
         7f:97:62:bc:89:74:14:b2:2d:ca:da:0c:48:af:3a:0d:dd:05:
         ba:46:4f:9d:9e:ea:78:29:3c:56:00:32:18:68:41:41:0c:e3:
         53:ef:86:37:9f:cf:ea:4c:cf:7b:2e:49:b2:1c:33:5d:f9:b6:
         e5:f7:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----