Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/mUK6a48cJQ8_rvfGf5tDrQa5WrI.roa
File:                     mUK6a48cJQ8_rvfGf5tDrQa5WrI.roa (raw, json)
Hash identifier:          /xUy526e4zR5z4Suw4u02RBh56p5OXHhROdYO3Z8a0c=
Subject key identifier:   99:42:BA:6B:8F:1C:25:0F:3F:AE:F7:C6:7F:9B:43:AD:06:B9:5A:B2
Certificate issuer:       /CN=4a4faf981f5b8a3764b609ab4f49c9b9718922a2
Certificate serial:       0226C7DC
Authority key identifier: 4A:4F:AF:98:1F:5B:8A:37:64:B6:09:AB:4F:49:C9:B9:71:89:22:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sk-vmB9bijdktgmrT0nJuXGJIqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/mUK6a48cJQ8_rvfGf5tDrQa5WrI.roa
Signing time:             Sat 01 Jan 2022 04:01:08 +0000
ROA not before:           Sat 01 Jan 2022 04:01:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        176.53.156.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36095964 (0x226c7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4faf981f5b8a3764b609ab4f49c9b9718922a2
        Validity
            Not Before: Jan  1 04:01:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9942ba6b8f1c250f3faef7c67f9b43ad06b95ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:51:73:dc:c0:39:d1:4d:1a:43:89:88:de:
                    6c:91:d9:86:29:8b:3a:39:95:b3:4d:e1:93:26:d4:
                    f3:6b:ce:59:f7:da:0f:51:76:8d:98:9c:d2:66:08:
                    ec:5d:e5:1d:4a:62:31:bc:f3:18:17:47:10:9f:04:
                    f0:34:2c:cc:a3:a6:a3:ff:ee:eb:03:a1:7a:14:0c:
                    97:61:06:fd:0a:0d:7d:f3:b0:1b:8b:c4:68:9d:90:
                    7b:5d:a5:8c:bc:f1:06:56:25:7c:12:ca:0f:2e:31:
                    74:1e:0d:62:02:da:05:18:ef:31:7a:d0:25:3e:35:
                    10:47:e5:63:c3:2e:a0:73:cc:a2:80:65:86:62:e0:
                    14:b9:05:6a:f7:63:a9:fc:c1:57:54:ab:96:65:65:
                    1f:90:85:8e:8f:de:93:d1:9b:28:7f:25:ed:1d:d1:
                    a7:23:24:7b:f1:ab:0f:1f:35:42:41:3d:ba:01:e5:
                    e2:aa:66:88:ab:2f:a7:cc:80:e8:2e:99:aa:37:1b:
                    e8:5e:4f:07:0c:d0:82:fa:e9:ca:66:9b:96:93:d2:
                    ac:5b:e3:a9:51:bc:d0:b8:86:57:de:ca:51:6d:46:
                    88:ba:91:bd:47:c4:d1:b3:a3:04:18:99:93:e5:91:
                    60:e6:a0:44:aa:7b:26:90:fa:fe:9b:98:f0:76:df:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:BA:6B:8F:1C:25:0F:3F:AE:F7:C6:7F:9B:43:AD:06:B9:5A:B2
            X509v3 Authority Key Identifier:
                keyid:4A:4F:AF:98:1F:5B:8A:37:64:B6:09:AB:4F:49:C9:B9:71:89:22:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk-vmB9bijdktgmrT0nJuXGJIqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/mUK6a48cJQ8_rvfGf5tDrQa5WrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/Sk-vmB9bijdktgmrT0nJuXGJIqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:37:80:29:11:52:bc:e5:0e:ec:6f:e3:7c:dd:89:59:ec:a2:
         73:88:2f:23:e3:75:74:f1:72:08:58:d2:f2:1b:dd:bf:0b:28:
         db:bc:5f:ea:6d:c8:ff:2a:fc:bb:9a:d0:d7:8d:c3:08:61:62:
         9c:a9:f4:06:85:81:cc:e2:e9:99:0c:b8:91:24:ef:d8:62:f9:
         e5:fe:df:37:78:36:2f:3b:3d:e3:1d:66:ed:68:f5:fc:f1:da:
         0e:f1:dc:09:c0:5f:03:65:bb:a6:9c:53:be:8c:de:76:49:53:
         77:d4:36:b3:6a:96:ea:5c:1f:e5:e2:cb:9f:23:ad:f1:b1:ec:
         4f:4a:bd:9f:c8:a4:65:66:de:12:1c:f1:02:8c:d5:ce:1a:7a:
         af:be:f2:d1:86:ec:6c:6b:65:34:4f:5a:20:a0:00:0e:87:8b:
         e8:4c:08:15:ff:90:ae:2c:93:fa:6c:d5:48:76:94:f1:8c:88:
         62:b8:64:d9:b6:76:e9:fe:de:fb:d2:c2:b0:df:d6:5b:d1:10:
         6f:35:a3:ca:f6:f8:01:33:cb:d8:c8:5e:d5:fe:7e:35:fc:2a:
         e6:52:63:c0:55:a4:db:0f:29:53:45:39:29:78:94:11:4b:76:
         36:91:28:ac:54:4f:4e:a9:4d:aa:59:4d:8d:e4:65:ff:51:df:
         5c:45:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----