Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/DtVeuyoBHXEoTc39cOlimsv2_Ck.roa
File:                     DtVeuyoBHXEoTc39cOlimsv2_Ck.roa (raw, json)
Hash identifier:          r+IubRYaGj6lwCQsZRAljzjd0ZaArzcD17HSuywV58g=
Subject key identifier:   0E:D5:5E:BB:2A:01:1D:71:28:4D:CD:FD:70:E9:62:9A:CB:F6:FC:29
Certificate issuer:       /CN=723c0eb427bacd977b5bb48707be48722e4da06d
Certificate serial:       025B27F8
Authority key identifier: 72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/DtVeuyoBHXEoTc39cOlimsv2_Ck.roa
Signing time:             Sat 01 Jan 2022 00:57:50 +0000
ROA not before:           Sat 01 Jan 2022 00:57:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        193.131.114.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39528440 (0x25b27f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723c0eb427bacd977b5bb48707be48722e4da06d
        Validity
            Not Before: Jan  1 00:57:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ed55ebb2a011d71284dcdfd70e9629acbf6fc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:05:8e:a3:ff:9e:17:eb:59:88:a6:f1:42:
                    0e:8d:bf:fd:09:15:91:1d:9d:64:19:7b:94:7f:5f:
                    39:97:99:78:e3:c9:e9:9a:e7:2a:a2:40:0d:1d:09:
                    26:e8:63:44:05:81:ff:b8:91:27:43:3f:3b:5b:3c:
                    a6:6b:97:11:8c:91:03:c7:5c:7f:2b:63:7b:fa:b6:
                    f9:10:20:98:6c:5a:bf:5d:ef:84:4f:8a:92:c5:40:
                    ec:a9:d5:d4:ec:63:6c:d0:cf:d3:52:26:8d:cc:39:
                    07:96:8d:f0:60:e6:5a:26:a3:a0:3e:eb:aa:0c:16:
                    cd:3d:02:1d:e4:d4:6a:f9:43:13:62:55:02:de:5a:
                    bb:63:ad:11:6b:08:76:29:12:19:47:0d:8b:e0:b7:
                    a2:78:be:d7:05:1a:3d:4d:64:4e:6c:90:20:23:0d:
                    31:e6:a8:67:60:40:f8:87:b2:85:6b:cb:d9:43:ad:
                    0f:35:a8:5e:09:19:32:91:ad:cc:1c:11:06:db:a4:
                    80:18:6c:05:63:e0:90:7e:40:cc:6c:5c:90:50:25:
                    9b:9c:71:f9:e3:8c:84:e5:84:8c:12:b0:a3:4c:d8:
                    c6:83:54:75:8f:ef:e6:78:96:28:7f:68:31:da:31:
                    58:36:fb:b3:9d:2b:fe:b1:19:54:0f:a9:1c:f3:74:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:5E:BB:2A:01:1D:71:28:4D:CD:FD:70:E9:62:9A:CB:F6:FC:29
            X509v3 Authority Key Identifier:
                keyid:72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/DtVeuyoBHXEoTc39cOlimsv2_Ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/cjwOtCe6zZd7W7SHB75Ici5NoG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.131.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:7c:58:ad:5c:9a:c2:e6:d9:33:bd:1f:3f:70:6b:c4:fb:
         fd:41:bf:c6:bf:06:45:53:6a:7b:e3:1a:91:2f:4e:68:65:1c:
         45:d3:6c:55:19:d1:7f:f8:9e:43:68:90:bb:99:d1:ca:70:88:
         90:7e:f1:bc:3c:c4:6f:23:4b:5f:b4:69:8a:a7:15:5d:5e:a3:
         83:4c:f2:29:db:56:5a:21:5e:88:eb:c1:59:5b:2a:43:6f:3d:
         39:8f:de:2e:d6:6b:1b:6b:5f:b0:2c:ba:95:ed:ff:07:77:d1:
         80:51:0b:d6:7c:ca:c8:f4:9d:e7:5f:fe:7d:06:46:a2:e5:3a:
         cc:1e:3d:2f:7f:d0:cd:bb:12:d3:18:59:52:f9:d9:bb:31:8d:
         93:99:72:ae:83:9b:f1:88:67:d5:a9:b4:43:47:8c:16:6f:6f:
         a9:9a:4b:0e:ed:74:9a:66:fc:0f:c5:95:6e:cd:2b:27:ac:34:
         59:45:d3:6b:25:20:08:39:e6:fe:42:af:8d:16:cd:64:dd:08:
         10:bd:33:ab:49:db:1b:91:6f:b6:c7:a0:36:c7:b1:a4:fd:d4:
         99:04:7d:8a:1d:b8:23:4e:96:fc:50:97:b9:d1:f1:cf:b9:52:
         cb:df:44:b4:19:4d:c4:9b:f5:ef:4b:3f:bf:56:e3:d2:8d:ad:
         11:7a:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----