Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/6HTHy9wpGUG7jfgEgD6DqfqUaq8.roa
File:                     6HTHy9wpGUG7jfgEgD6DqfqUaq8.roa (raw, json)
Hash identifier:          XqQd2kkM8PK7nP71zCQa2la9e8ekiHZWClD0mloszbk=
Subject key identifier:   E8:74:C7:CB:DC:29:19:41:BB:8D:F8:04:80:3E:83:A9:FA:94:6A:AF
Certificate issuer:       /CN=4a62e2f36d5f74c481c088ccaae7051febecfec5
Certificate serial:       16F885A3
Authority key identifier: 4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmLi821fdMSBwIjMqucFH-vs_sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/6HTHy9wpGUG7jfgEgD6DqfqUaq8.roa
Signing time:             Sat 01 Jan 2022 06:56:29 +0000
ROA not before:           Sat 01 Jan 2022 06:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5408
IP address blocks:        193.218.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385385891 (0x16f885a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a62e2f36d5f74c481c088ccaae7051febecfec5
        Validity
            Not Before: Jan  1 06:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e874c7cbdc291941bb8df804803e83a9fa946aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:df:b3:ee:b5:1a:f0:1f:25:f6:2d:4e:58:
                    62:ac:06:44:24:29:50:b3:62:0b:b0:ee:9a:86:4a:
                    5d:06:3e:df:5b:f8:70:7d:f6:e6:df:36:c5:65:97:
                    55:e2:f4:07:26:f3:b7:83:9b:03:75:18:2d:9c:c1:
                    e2:c7:a1:25:4b:03:ff:f6:2a:7f:fd:c7:7c:93:fa:
                    c6:ed:83:d4:2a:78:8f:01:7a:07:b2:44:1f:02:97:
                    f7:bc:a9:b2:de:cf:df:e3:40:5a:47:6e:7e:46:c6:
                    4b:bf:fc:2c:64:b9:60:8f:5d:68:40:f7:a8:d5:40:
                    9d:21:fa:b0:11:78:55:1b:44:e9:0d:cf:09:12:00:
                    e9:1e:4c:be:5c:4c:4a:de:94:76:82:f5:1f:ca:9c:
                    78:48:d3:ac:c1:85:41:9f:cd:73:c5:a4:5c:33:dd:
                    94:f2:8a:54:3a:98:9a:b9:25:5b:7f:5f:66:ad:24:
                    16:32:b8:ea:6e:4c:e9:72:91:0a:fb:91:ac:9e:da:
                    57:0e:f9:1b:c5:1b:51:d4:47:16:47:42:d5:23:61:
                    31:49:05:c0:29:c4:8c:9b:54:5c:06:9d:85:19:f1:
                    7d:c0:4a:05:26:e2:a5:8b:0a:23:71:17:5e:35:ab:
                    0f:0d:65:a3:d7:48:85:88:69:eb:98:3a:b4:3f:b3:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:C7:CB:DC:29:19:41:BB:8D:F8:04:80:3E:83:A9:FA:94:6A:AF
            X509v3 Authority Key Identifier:
                keyid:4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmLi821fdMSBwIjMqucFH-vs_sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/6HTHy9wpGUG7jfgEgD6DqfqUaq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:46:54:8a:af:0a:c4:76:4b:e7:39:00:a6:94:88:cd:7a:
         7b:9d:52:b5:56:6a:30:eb:0b:e9:10:51:49:31:4e:0e:20:38:
         ee:eb:1b:39:25:54:16:77:d2:5a:0e:6a:00:47:02:4b:18:f8:
         1a:b4:4e:d5:83:dc:93:89:98:a3:21:5f:87:a7:b1:a7:72:8b:
         a3:7d:a1:27:0f:37:f2:9b:8a:0b:cb:14:4b:06:9e:86:5b:f5:
         6f:f2:ee:23:91:7c:92:f7:a4:ce:17:4e:d8:82:e3:92:61:5a:
         27:96:dc:c2:2e:76:9f:3c:33:9b:ec:72:88:95:a9:09:6b:dc:
         59:0f:e6:7e:68:c8:6f:e2:6c:ec:b6:b2:63:83:0d:19:b9:22:
         83:ee:b2:11:db:b7:c8:0f:82:2d:b1:3d:67:b6:7d:a7:e5:3d:
         fe:10:88:05:20:d7:b2:59:cb:14:d3:93:84:d9:8e:ca:a1:f9:
         09:17:b6:b9:9a:37:9b:79:a6:fd:69:90:4e:58:4e:bc:29:06:
         7e:f1:5c:c9:ff:1c:c1:06:5a:24:67:67:db:ef:8f:e0:d3:97:
         c0:82:c1:d2:76:90:e4:4e:f7:57:00:c5:80:98:43:95:85:e1:
         33:8a:92:d0:a5:b0:b7:91:92:c1:ba:6e:b7:3c:cf:b3:03:e7:
         5d:d5:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----