Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6c8e8d-3023-4cbf-a0fe-5fc96388b662/1/X3ZlgAgkCohKM7Vqi_wN8HcaVxI.roa
File:                     X3ZlgAgkCohKM7Vqi_wN8HcaVxI.roa (raw, json)
Hash identifier:          7WL51Z5CuLN/x3qgtmXN3gRZdooisxw62cgm6lidN6U=
Subject key identifier:   5F:76:65:80:08:24:0A:88:4A:33:B5:6A:8B:FC:0D:F0:77:1A:57:12
Certificate issuer:       /CN=fb568661cc17bcc74c8dc4946ea5ace291e13d06
Certificate serial:       01F6E0A4
Authority key identifier: FB:56:86:61:CC:17:BC:C7:4C:8D:C4:94:6E:A5:AC:E2:91:E1:3D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1aGYcwXvMdMjcSUbqWs4pHhPQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6c8e8d-3023-4cbf-a0fe-5fc96388b662/1/X3ZlgAgkCohKM7Vqi_wN8HcaVxI.roa
Signing time:             Sat 01 Jan 2022 03:55:25 +0000
ROA not before:           Sat 01 Jan 2022 03:55:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        193.38.44.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32956580 (0x1f6e0a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb568661cc17bcc74c8dc4946ea5ace291e13d06
        Validity
            Not Before: Jan  1 03:55:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f76658008240a884a33b56a8bfc0df0771a5712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:80:b4:60:f1:98:43:81:6a:4e:20:42:32:
                    85:b0:c3:45:06:08:d5:0d:59:9e:cb:93:38:71:e3:
                    de:28:c5:00:97:2b:9c:90:09:1c:60:b0:32:b3:31:
                    7b:5d:5e:54:27:f9:57:33:48:64:28:b1:42:47:23:
                    96:cc:d1:81:22:15:fb:04:0c:79:e7:8c:7c:3f:71:
                    dc:5e:47:3e:c3:3f:70:31:87:f8:36:67:94:fd:94:
                    e8:ea:f2:1c:79:ee:0a:49:2c:10:f2:d7:86:04:ba:
                    37:d2:55:5e:46:40:0b:87:68:7b:f0:5a:d7:6b:7f:
                    d1:ad:d9:d8:dc:38:99:cb:91:d6:c0:da:de:39:0b:
                    36:52:4f:bb:fd:78:96:80:e6:38:1b:ee:6c:37:44:
                    1b:e2:84:74:33:76:99:aa:27:a0:a2:ff:8d:68:18:
                    ff:f2:98:09:0c:78:e1:3b:b3:4a:91:a7:96:10:67:
                    19:fa:b5:98:ba:a7:60:0a:75:92:d9:de:6d:66:e3:
                    13:e7:e2:61:9e:90:5d:03:95:7f:97:44:3d:e9:eb:
                    e2:32:d0:a5:27:f1:fb:25:18:a8:6b:65:17:88:05:
                    76:a0:f2:3f:60:37:03:59:5a:cf:53:60:4b:9f:db:
                    17:ed:88:84:7f:33:a2:47:9e:fb:89:c9:4c:e2:b7:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:65:80:08:24:0A:88:4A:33:B5:6A:8B:FC:0D:F0:77:1A:57:12
            X509v3 Authority Key Identifier:
                keyid:FB:56:86:61:CC:17:BC:C7:4C:8D:C4:94:6E:A5:AC:E2:91:E1:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1aGYcwXvMdMjcSUbqWs4pHhPQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6c8e8d-3023-4cbf-a0fe-5fc96388b662/1/X3ZlgAgkCohKM7Vqi_wN8HcaVxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6c8e8d-3023-4cbf-a0fe-5fc96388b662/1/1-1aGYcwXvMdMjcSUbqWs4pHhPQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:33:a5:a9:51:d3:42:6b:58:c8:e6:1c:2a:37:89:6a:0b:23:
         10:58:17:a5:d2:f2:df:6d:ff:a3:d2:b6:75:42:96:b2:20:95:
         a4:ce:c4:ac:2c:c1:6a:34:ba:b8:7e:e8:ab:03:a0:f1:68:cb:
         bb:74:0c:8a:e3:c1:08:9a:3b:a4:fe:ec:ad:d0:80:d8:d5:fd:
         83:74:fa:0f:de:5f:26:66:ac:40:04:06:10:e4:06:e6:d0:a0:
         7b:31:03:3a:54:b9:57:0b:ff:21:ac:12:c7:90:e8:05:e9:ac:
         bb:cd:ff:09:cd:cc:67:db:76:27:26:49:fa:1e:0f:34:9e:5b:
         48:4f:c5:c6:41:7d:79:e0:d9:ad:33:b4:27:53:01:6d:4b:15:
         6b:36:1d:7c:25:3e:42:4e:72:75:e0:41:4e:53:93:2d:51:56:
         19:2e:ef:26:6c:18:93:10:96:2e:ed:ec:ae:19:1a:cf:4d:72:
         e7:96:60:13:fa:d9:e2:4f:88:5f:17:12:b0:bd:33:b5:5b:81:
         56:f4:47:1b:fa:dd:69:21:20:96:da:eb:fd:45:eb:a1:b7:76:
         3b:f6:61:ed:2f:4b:4f:ef:ad:f7:41:01:92:02:33:39:dc:b5:
         ae:10:0d:b6:cb:81:18:0a:a4:f6:f5:8e:8d:37:fb:20:f8:16:
         33:37:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----