Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/MEa5s9WhLjMUPTKi78IgY5NGXMQ.roa
File:                     MEa5s9WhLjMUPTKi78IgY5NGXMQ.roa (raw, json)
Hash identifier:          AjlGqjkcrzFvNyfvDIXPaLOM3/NfuV3g2eAL6UbwEpw=
Subject key identifier:   30:46:B9:B3:D5:A1:2E:33:14:3D:32:A2:EF:C2:20:63:93:46:5C:C4
Certificate issuer:       /CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
Certificate serial:       01856CCB08A45746A2577E8DA8D2011FA41C
Authority key identifier: 9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/MEa5s9WhLjMUPTKi78IgY5NGXMQ.roa
Signing time:             Sun 01 Jan 2023 10:05:23 +0000
ROA not before:           Sun 01 Jan 2023 10:05:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8823
IP address blocks:        94.154.2.0/24 maxlen: 24
                          2a07:2680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:cb:08:a4:57:46:a2:57:7e:8d:a8:d2:01:1f:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
        Validity
            Not Before: Jan  1 10:05:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3046b9b3d5a12e33143d32a2efc2206393465cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:8f:02:4a:b4:b2:29:b3:4e:b2:98:5e:f7:
                    2b:96:64:6b:2c:22:e7:45:8e:0c:e0:55:2f:94:c8:
                    cd:9f:97:ef:3a:60:51:7f:0f:85:12:46:ae:06:96:
                    6e:9f:9a:f2:e6:41:17:9c:d8:c7:44:7c:38:32:c6:
                    72:fa:8d:62:d6:3f:8c:0a:5f:48:37:ae:c5:6a:a6:
                    6e:a6:ee:5a:60:10:f2:db:60:a9:11:c4:44:d2:77:
                    98:6b:0e:04:b4:57:69:2e:ae:7f:13:b1:80:4b:d0:
                    bd:91:00:2a:3f:61:7b:42:ff:ba:dc:d8:82:87:4d:
                    e1:d4:8b:5b:7b:8b:6b:56:0b:c2:9c:89:af:b9:19:
                    8d:c9:4c:fe:68:b8:32:45:24:f4:a8:59:19:7e:70:
                    ae:17:c4:55:ce:8e:43:48:57:49:02:5d:4e:03:58:
                    ac:78:e5:d2:49:eb:ce:d9:f5:d5:c7:60:33:31:9f:
                    f4:86:21:c1:93:81:bf:2a:f3:6c:cf:13:f8:42:83:
                    39:16:e4:2a:b0:69:22:28:f4:b5:35:31:15:e0:20:
                    1f:e0:db:ec:e2:c8:5c:ab:8e:f2:5b:49:95:5d:d3:
                    db:b0:69:f6:5d:eb:52:96:c3:83:7e:87:b9:4c:48:
                    71:c0:05:c3:0f:54:1a:3d:cc:37:a3:06:6b:37:8c:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:B9:B3:D5:A1:2E:33:14:3D:32:A2:EF:C2:20:63:93:46:5C:C4
            X509v3 Authority Key Identifier:
                keyid:9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/MEa5s9WhLjMUPTKi78IgY5NGXMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.2.0/24
                IPv6:
                  2a07:2680::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:a3:0c:50:cb:a3:fa:39:cf:05:13:b1:1a:db:d0:69:f8:
         81:bc:02:f5:c0:f8:1e:80:68:8d:69:e1:3e:de:c3:cb:f9:c2:
         13:eb:de:d5:63:2f:64:30:33:89:54:fe:c2:58:2d:a1:40:a3:
         ed:ac:e5:6e:03:78:ba:83:1b:fe:d9:7e:58:2c:96:f2:bb:2c:
         61:bc:c2:6e:89:08:c3:8d:9d:fd:aa:4f:31:a5:e4:37:0e:36:
         81:91:e2:24:e6:d3:a2:1e:a7:55:7d:3f:dc:97:a0:c9:ff:47:
         ef:e9:cf:5c:3b:1d:3b:66:fd:a2:fb:04:13:13:1f:18:83:7c:
         cd:81:eb:ad:a3:0b:79:36:38:74:51:58:d9:87:68:64:7b:36:
         f0:84:cf:9a:37:fc:63:5e:e3:a2:4c:40:db:f3:0f:f9:de:8c:
         e8:ef:39:36:eb:7a:47:c3:ff:a3:38:e4:7c:3c:60:5b:03:d4:
         6a:89:3c:ba:20:40:2d:93:de:30:a8:11:a8:f3:5b:b3:2a:b7:
         0d:66:2b:21:b5:4e:6c:2b:bd:18:21:52:c8:97:f7:d3:4d:29:
         b1:f8:0b:6a:36:40:df:17:d4:92:7e:a8:65:cd:83:70:3a:fa:
         6e:3d:14:55:d1:86:f4:73:f5:14:ae:3f:bd:40:2e:d9:81:7d:
         b8:1b:f4:ff
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsywikV0aiV36NqNIBH6QcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGJhOWFkOTliMTRiZjQ4Nzc0NjAyZGQyZmQyZmVhMTM2
MDdjMzQwHhcNMjMwMTAxMTAwNTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQ2YjliM2Q1YTEyZTMzMTQzZDMyYTJlZmMyMjA2MzkzNDY1Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoSPAkq0simzTrKYXvcrlmRrLCLn
RY4M4FUvlMjNn5fvOmBRfw+FEkauBpZun5ry5kEXnNjHRHw4MsZy+o1i1j+MCl9I
N67FaqZupu5aYBDy22CpEcRE0neYaw4EtFdpLq5/E7GAS9C9kQAqP2F7Qv+63NiC
h03h1Itbe4trVgvCnImvuRmNyUz+aLgyRST0qFkZfnCuF8RVzo5DSFdJAl1OA1is
eOXSSevO2fXVx2AzMZ/0hiHBk4G/KvNszxP4QoM5FuQqsGkiKPS1NTEV4CAf4Nvs
4shcq47yW0mVXdPbsGn2XetSlsODfoe5TEhxwAXDD1QaPcw3owZrN4z0xwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDBGubPVoS4zFD0you/CIGOTRlzEMB8GA1UdIwQY
MBaAFJ4Lqa2ZsUv0h3RgLdL9L+oTYHw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmd1cHJabXhTX1NIZEdBdDB2MHY2aE5nZkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNjM4N2YtYTM2Yy00NzQ5LTg5NzUt
ZTU2YjkxMTMwZWI4LzEvTUVhNXM5V2hMak1VUFRLaTc4SWdZNU5HWE1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNjM4N2YtYTM2Yy00NzQ5LTg5NzUtZTU2YjkxMTMwZWI4
LzEvbmd1cHJabXhTX1NIZEdBdDB2MHY2aE5nZkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpoCMA0E
AgACMAcDBQMqByaAMA0GCSqGSIb3DQEBCwUAA4IBAQBF0qMMUMuj+jnPBROxGtvQ
afiBvAL1wPgegGiNaeE+3sPL+cIT697VYy9kMDOJVP7CWC2hQKPtrOVuA3i6gxv+
2X5YLJbyuyxhvMJuiQjDjZ39qk8xpeQ3DjaBkeIk5tOiHqdVfT/cl6DJ/0fv6c9c
Ox07Zv2i+wQTEx8Yg3zNgeutowt5Njh0UVjZh2hkezbwhM+aN/xjXuOiTEDb8w/5
3ozo7zk263pHw/+jOOR8PGBbA9RqiTy6IEAtk94wqBGo81uzKrcNZishtU5sK70Y
IVLIl/fTTSmx+AtqNkDfF9SSfqhlzYNwOvpuPRRV0Yb0c/UUrj+9QC7ZgX24G/T/
-----END CERTIFICATE-----