Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/topBgY5W5nJXgXqZNRjbmc5WDH0.roa
File:                     topBgY5W5nJXgXqZNRjbmc5WDH0.roa (raw, json)
Hash identifier:          IAoMH+AGYZ9IAQx+dJD+ZVlqCajJ5nI1FxogdO5/FCU=
Subject key identifier:   B6:8A:41:81:8E:56:E6:72:57:81:7A:99:35:18:DB:99:CE:56:0C:7D
Certificate issuer:       /CN=723c0eb427bacd977b5bb48707be48722e4da06d
Certificate serial:       0317E44B
Authority key identifier: 72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/topBgY5W5nJXgXqZNRjbmc5WDH0.roa
Signing time:             Mon 28 Mar 2022 11:31:54 +0000
ROA not before:           Mon 28 Mar 2022 11:31:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        193.131.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51897419 (0x317e44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723c0eb427bacd977b5bb48707be48722e4da06d
        Validity
            Not Before: Mar 28 11:31:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b68a41818e56e67257817a993518db99ce560c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:ef:bd:d7:d6:56:26:bf:24:b0:93:e1:db:
                    7a:82:25:fa:bd:e1:c8:92:4e:f7:70:b8:09:90:01:
                    1a:29:a2:06:e1:76:00:9b:72:0b:30:b8:c7:5e:ac:
                    d2:2c:e6:62:a4:f0:5e:a7:1d:01:82:0d:ee:cc:76:
                    e7:a0:eb:f1:8f:67:d2:5a:d4:20:6e:e1:46:03:b5:
                    60:c8:1a:d1:d1:26:06:56:67:b9:21:f9:84:c9:c5:
                    f1:7d:1d:b8:d1:f3:49:30:3f:36:b8:ef:d0:0b:23:
                    6c:64:b3:aa:62:ea:e4:e5:c1:33:d6:39:ad:26:8c:
                    ea:8a:67:fc:06:c5:a7:d4:c4:39:82:09:8a:fb:82:
                    1b:03:2a:59:85:60:b7:39:7f:7a:37:84:aa:11:0e:
                    b5:64:9d:f5:ad:a2:0b:6d:81:08:a7:8a:9e:9c:9d:
                    67:56:cb:43:f7:30:0e:62:67:d9:79:f6:cc:94:1a:
                    f3:b4:4b:f8:52:2d:96:3e:50:b7:f2:ab:ce:1d:c4:
                    80:2c:01:92:59:63:34:70:b6:bd:37:09:73:d0:32:
                    8d:39:c4:a4:85:17:75:e7:2c:9b:e0:5f:6e:f8:f6:
                    ac:6a:bc:ae:0a:d0:aa:07:8d:e1:1c:d1:bf:78:5f:
                    3b:55:5f:cb:c9:55:6b:94:97:38:f2:81:3d:bc:2b:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:41:81:8E:56:E6:72:57:81:7A:99:35:18:DB:99:CE:56:0C:7D
            X509v3 Authority Key Identifier:
                keyid:72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/topBgY5W5nJXgXqZNRjbmc5WDH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/cjwOtCe6zZd7W7SHB75Ici5NoG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.131.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:79:40:0d:85:b1:2b:63:cc:8d:7f:fe:34:c5:f9:18:dc:45:
         71:ca:d8:8a:f1:dd:d8:a3:27:c9:f6:9c:85:6a:66:0f:d3:70:
         97:44:ab:9d:a3:26:80:c6:df:a2:01:85:8f:e8:11:a4:fa:d0:
         2b:97:28:2b:b0:61:68:d8:b0:70:21:b8:6f:7c:b8:9e:3c:8a:
         50:2a:7a:83:35:82:14:86:c3:b6:44:81:87:ec:6d:f7:c2:4a:
         c1:16:45:1b:5b:87:bc:e0:f9:9c:14:91:c3:b7:24:be:76:1e:
         0d:f2:86:8c:f2:d6:29:9c:20:68:c2:57:b1:d9:0a:81:b6:4a:
         ce:79:3d:51:cb:63:37:3f:43:d3:15:73:50:7d:6e:4e:54:43:
         9b:61:da:db:1a:e2:02:79:52:83:9f:6f:f5:c6:58:1d:17:e2:
         95:e0:60:72:36:e2:a6:03:3f:dc:e3:dc:d1:8e:a2:0c:a7:ad:
         de:43:93:3f:16:7e:f8:1c:d1:07:bc:4c:3e:11:d9:24:3c:05:
         98:04:b6:cf:a2:5a:89:b4:e3:bf:5e:7f:85:c6:51:5f:98:b0:
         ac:23:56:60:27:90:44:ad:2a:f9:bf:0d:3d:7b:a8:6c:9a:e2:
         eb:2f:a4:c0:1a:57:08:56:98:de:2f:7c:2b:a3:e3:20:60:fa:
         d6:cb:32:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxfkSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjNjMGViNDI3YmFjZDk3N2I1YmI0ODcwN2JlNDg3MjJlNGRhMDZkMB4XDTIyMDMy
ODExMzE1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjY4YTQxODE4ZTU2
ZTY3MjU3ODE3YTk5MzUxOGRiOTljZTU2MGM3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJjK773X1lYmvySwk+HbeoIl+r3hyJJO93C4CZABGimiBuF2
AJtyCzC4x16s0izmYqTwXqcdAYIN7sx256Dr8Y9n0lrUIG7hRgO1YMga0dEmBlZn
uSH5hMnF8X0duNHzSTA/Nrjv0AsjbGSzqmLq5OXBM9Y5rSaM6opn/AbFp9TEOYIJ
ivuCGwMqWYVgtzl/ejeEqhEOtWSd9a2iC22BCKeKnpydZ1bLQ/cwDmJn2Xn2zJQa
87RL+FItlj5Qt/Krzh3EgCwBklljNHC2vTcJc9AyjTnEpIUXdecsm+Bfbvj2rGq8
rgrQqgeN4RzRv3hfO1Vfy8lVa5SXOPKBPbwr+fUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2ikGBjlbmcleBepk1GNuZzlYMfTAfBgNVHSMEGDAWgBRyPA60J7rNl3tb
tIcHvkhyLk2gbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Nqd090Q2U2elpkN1c3U0hCNzVJY2k1Tm9HMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvMTE0ZWY0LTE2MjYtNGFiNC1hOWM0LTJiMzExZGFjNGFjNy8x
L3RvcEJnWTVXNW5KWGdYcVpOUmpibWM1V0RIMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
MTE0ZWY0LTE2MjYtNGFiNC1hOWM0LTJiMzExZGFjNGFjNy8xL2Nqd090Q2U2elpk
N1c3U0hCNzVJY2k1Tm9HMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcGDcjANBgkqhkiG9w0BAQsFAAOC
AQEAAXlADYWxK2PMjX/+NMX5GNxFccrYivHd2KMnyfachWpmD9Nwl0SrnaMmgMbf
ogGFj+gRpPrQK5coK7BhaNiwcCG4b3y4njyKUCp6gzWCFIbDtkSBh+xt98JKwRZF
G1uHvOD5nBSRw7ckvnYeDfKGjPLWKZwgaMJXsdkKgbZKznk9UctjNz9D0xVzUH1u
TlRDm2Ha2xriAnlSg59v9cZYHRfileBgcjbipgM/3OPc0Y6iDKet3kOTPxZ++BzR
B7xMPhHZJDwFmAS2z6JaibTjv15/hcZRX5iwrCNWYCeQRK0q+b8NPXuobJri6y+k
wBpXCFaY3i98K6PjIGD61ssyIQ==
-----END CERTIFICATE-----