Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/FeDBIY3_0timujRTIUyepcngaXM.roa
File:                     FeDBIY3_0timujRTIUyepcngaXM.roa (raw, json)
Hash identifier:          ZtOEW2bB9cUW8wEP8rBimidtG9I65YJ7S3tfWuLXXpU=
Subject key identifier:   15:E0:C1:21:8D:FF:D2:D8:A6:BA:34:53:21:4C:9E:A5:C9:E0:69:73
Certificate issuer:       /CN=0af378cf73de8f0e272a55f75db0098036ec5680
Certificate serial:       069B2B7A
Authority key identifier: 0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/FeDBIY3_0timujRTIUyepcngaXM.roa
Signing time:             Fri 01 Jul 2022 11:42:25 +0000
ROA not before:           Fri 01 Jul 2022 11:42:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209810
IP address blocks:        176.118.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110832506 (0x69b2b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af378cf73de8f0e272a55f75db0098036ec5680
        Validity
            Not Before: Jul  1 11:42:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15e0c1218dffd2d8a6ba3453214c9ea5c9e06973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:27:f8:26:9a:e2:66:fc:6a:cf:f2:ab:16:
                    1a:c5:56:01:5a:c9:f9:18:37:a9:f1:32:d5:8b:4c:
                    3c:63:49:43:42:33:bc:77:cd:23:6f:05:7c:ef:52:
                    49:6e:1a:2a:69:ef:8a:34:9e:24:e9:c3:78:ad:8f:
                    f9:44:95:f0:da:06:d5:26:b1:79:c2:58:b4:89:ac:
                    2f:af:55:f1:9f:1e:ad:11:8d:5c:48:88:a4:fe:41:
                    20:af:72:d3:ec:87:0b:3b:02:d1:75:bc:5c:35:fe:
                    96:0c:66:4e:ed:99:ef:63:ef:c7:09:d9:26:67:5f:
                    77:5b:f6:eb:f5:e6:90:43:0d:f0:87:45:af:31:65:
                    ab:44:b1:ab:bf:5b:dc:e7:c1:5e:19:65:ca:fa:7b:
                    d8:a1:2f:5a:02:0b:2d:9d:c1:6d:c2:05:0d:ad:d9:
                    54:fd:22:6d:18:3f:4a:b0:ce:1d:42:91:af:9e:51:
                    7f:a1:67:e7:73:3f:44:e8:8d:80:b1:ba:d1:07:6c:
                    54:d3:80:02:ec:4d:68:3f:8b:17:24:d2:6f:27:08:
                    56:99:f7:6a:67:15:38:69:71:80:6b:5d:ff:39:f4:
                    d2:1b:10:41:fb:d0:72:bb:f5:af:0e:73:02:cb:4d:
                    c0:3d:9d:fe:bf:70:5e:56:58:0a:f3:a3:15:e6:db:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:C1:21:8D:FF:D2:D8:A6:BA:34:53:21:4C:9E:A5:C9:E0:69:73
            X509v3 Authority Key Identifier:
                keyid:0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/FeDBIY3_0timujRTIUyepcngaXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:8a:c5:00:41:ff:c2:18:35:4d:83:75:85:b4:b1:62:4d:
         ae:f4:08:f0:f9:81:54:13:ed:41:13:fd:6e:64:1d:fa:0d:9a:
         03:1e:8a:bf:a4:80:e9:96:b0:3c:42:c8:0b:24:f0:0f:0d:01:
         0e:fe:d1:15:7e:6e:5b:e8:58:47:24:06:34:e6:58:fc:7e:6f:
         a9:02:d6:57:a4:30:3b:ed:71:06:cf:4c:d6:ea:5d:3a:8d:89:
         28:be:bc:ae:3e:c9:a5:6b:62:7a:c5:70:80:10:e1:a0:1b:77:
         59:ac:af:ee:f7:66:b0:9c:52:f8:7d:13:76:0a:0a:d2:fb:34:
         e3:f6:eb:5f:9d:b7:90:4a:3c:a9:c3:17:e0:26:af:69:ec:55:
         de:99:de:ab:de:3f:33:f2:51:88:85:f4:b3:4e:80:64:fc:29:
         b3:e9:06:d0:35:cd:bc:49:cd:9e:15:46:ad:af:a4:2b:5d:5a:
         f8:cf:c2:5a:47:b0:37:eb:78:81:08:80:1c:b2:e6:e4:89:ef:
         1a:bb:ff:3b:d2:6a:11:52:dc:8c:02:46:5d:eb:1d:38:a0:68:
         e0:f4:af:a1:8d:8f:29:1c:57:16:b5:8d:5e:c4:ea:33:31:15:
         7a:3e:3d:1f:05:bc:74:e8:f5:89:d5:b9:f1:bb:5d:a3:0c:67:
         2d:d3:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----