Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/4N20sQY70AjpLufUK3f1nRKXcsY.roa
File:                     4N20sQY70AjpLufUK3f1nRKXcsY.roa (raw, json)
Hash identifier:          oakg72/P3KdY2Ccb7YOtjjU0JfDmrpacfZBunaM2hlc=
Subject key identifier:   E0:DD:B4:B1:06:3B:D0:08:E9:2E:E7:D4:2B:77:F5:9D:12:97:72:C6
Certificate issuer:       /CN=d0f94226321badf0aec9acec2376e246ad9d1973
Certificate serial:       03A2BA65
Authority key identifier: D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PlCJjIbrfCuyazsI3biRq2dGXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/4N20sQY70AjpLufUK3f1nRKXcsY.roa
Signing time:             Sat 01 Jan 2022 06:05:32 +0000
ROA not before:           Sat 01 Jan 2022 06:05:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207925
IP address blocks:        193.143.226.0/24 maxlen: 24
                          2a10:8700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60996197 (0x3a2ba65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f94226321badf0aec9acec2376e246ad9d1973
        Validity
            Not Before: Jan  1 06:05:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0ddb4b1063bd008e92ee7d42b77f59d129772c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:c5:47:b6:6b:df:77:56:ad:6b:aa:41:7d:
                    63:28:df:7b:d6:ae:94:00:50:f1:7f:72:ec:6b:86:
                    0c:63:48:d0:37:07:ac:a2:b2:74:98:42:3f:b5:af:
                    8d:0c:5d:68:62:4f:89:e1:14:f7:c0:bf:1e:16:b7:
                    8f:58:b4:9f:c5:b5:18:4b:ba:d2:a3:e7:70:a4:e9:
                    d7:7d:01:5d:bb:78:94:f7:62:96:fb:9d:2e:4a:91:
                    b3:09:74:66:02:b4:05:03:7a:10:4e:9d:f9:b7:61:
                    65:67:e8:c5:81:5e:e7:4b:ad:3e:2c:9a:06:31:bf:
                    3c:22:1e:6b:2c:cc:2a:2a:df:1f:2d:a2:bb:e5:0c:
                    04:6f:c3:c5:01:74:85:60:ff:83:a9:ee:46:9e:cf:
                    e8:7a:6d:ca:fe:a5:45:15:71:58:f6:3a:52:27:9c:
                    06:dd:db:2f:ee:0e:61:5f:6d:35:80:fa:fc:43:2f:
                    b2:57:22:13:7a:39:54:26:49:69:86:56:7d:20:f0:
                    c4:7e:af:cb:aa:49:98:a4:d4:eb:6e:d9:71:55:f9:
                    04:21:f8:62:c0:eb:9d:c1:e7:83:9b:54:f6:02:b9:
                    41:a0:b8:cc:d4:21:db:65:76:15:5c:98:a5:43:84:
                    e9:4e:83:5e:5f:ab:34:cf:64:b2:8d:0f:47:a6:92:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DD:B4:B1:06:3B:D0:08:E9:2E:E7:D4:2B:77:F5:9D:12:97:72:C6
            X509v3 Authority Key Identifier:
                keyid:D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PlCJjIbrfCuyazsI3biRq2dGXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/4N20sQY70AjpLufUK3f1nRKXcsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/0PlCJjIbrfCuyazsI3biRq2dGXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.143.226.0/24
                IPv6:
                  2a10:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:af:a1:27:63:00:7a:0f:b1:d6:ea:d1:60:bf:a3:10:f7:08:
         d4:98:c5:fe:e6:fe:85:62:f1:28:99:d2:ac:e4:f4:96:60:5b:
         24:dd:98:86:ee:1d:78:27:63:46:34:77:fb:1e:a1:f5:59:a0:
         05:57:2c:da:c2:1a:66:fd:a2:ab:0f:75:69:8f:dd:19:6d:39:
         71:03:fc:82:f5:fe:94:08:d7:3f:91:f5:25:ba:95:36:10:df:
         83:5d:fe:21:7a:d1:a2:9c:70:da:d1:94:7e:25:88:a2:8d:f2:
         18:0b:70:ed:8a:38:12:45:68:da:19:4a:a7:bb:00:1b:1e:07:
         1e:15:cf:85:27:dd:d5:ce:60:69:c3:ea:be:54:a7:8e:11:52:
         b3:38:81:3f:1a:d7:68:27:03:74:c4:29:49:85:5c:45:d6:e7:
         59:cd:b0:0b:8a:0f:b2:de:49:08:c6:59:a6:39:f6:20:b0:77:
         9e:11:3a:05:82:4d:a8:87:42:7f:56:3d:27:c4:9b:3e:a0:e3:
         bf:14:c3:80:44:22:52:50:6e:42:56:a2:9c:ec:0e:08:ef:e4:
         c3:f8:1b:d8:8f:5f:fa:0c:5e:5b:74:1a:98:67:99:ce:d5:78:
         6a:c5:11:e7:8d:77:3b:21:3d:f4:da:60:c7:f0:42:3b:a4:79:
         d2:dd:b2:a0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA6K6ZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MGY5NDIyNjMyMWJhZGYwYWVjOWFjZWMyMzc2ZTI0NmFkOWQxOTczMB4XDTIyMDEw
MTA2MDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTBkZGI0YjEwNjNi
ZDAwOGU5MmVlN2Q0MmI3N2Y1OWQxMjk3NzJjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALb2xUe2a993Vq1rqkF9Yyjfe9aulABQ8X9y7GuGDGNI0DcH
rKKydJhCP7WvjQxdaGJPieEU98C/Hha3j1i0n8W1GEu60qPncKTp130BXbt4lPdi
lvudLkqRswl0ZgK0BQN6EE6d+bdhZWfoxYFe50utPiyaBjG/PCIeayzMKirfHy2i
u+UMBG/DxQF0hWD/g6nuRp7P6Hptyv6lRRVxWPY6UiecBt3bL+4OYV9tNYD6/EMv
slciE3o5VCZJaYZWfSDwxH6vy6pJmKTU627ZcVX5BCH4YsDrncHng5tU9gK5QaC4
zNQh22V2FVyYpUOE6U6DXl+rNM9kso0PR6aSO/0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTg3bSxBjvQCOku59Qrd/WdEpdyxjAfBgNVHSMEGDAWgBTQ+UImMhut8K7J
rOwjduJGrZ0ZczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBQbENKaklicmZDdXlhenNJM2JpUnEyZEdYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNmY5YTZkLTliMWEtNGZjYy1hZDFmLWViYWI3YzNhMzVkZS8x
LzROMjBzUVk3MEFqcEx1ZlVLM2YxblJLWGNzWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NmY5YTZkLTliMWEtNGZjYy1hZDFmLWViYWI3YzNhMzVkZS8xLzBQbENKaklicmZD
dXlhenNJM2JpUnEyZEdYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMGP4jANBAIAAjAHAwUAKhCHADAN
BgkqhkiG9w0BAQsFAAOCAQEAiK+hJ2MAeg+x1urRYL+jEPcI1JjF/ub+hWLxKJnS
rOT0lmBbJN2Yhu4deCdjRjR3+x6h9VmgBVcs2sIaZv2iqw91aY/dGW05cQP8gvX+
lAjXP5H1JbqVNhDfg13+IXrRopxw2tGUfiWIoo3yGAtw7Yo4EkVo2hlKp7sAGx4H
HhXPhSfd1c5gacPqvlSnjhFSsziBPxrXaCcDdMQpSYVcRdbnWc2wC4oPst5JCMZZ
pjn2ILB3nhE6BYJNqIdCf1Y9J8SbPqDjvxTDgEQiUlBuQlainOwOCO/kw/gb2I9f
+gxeW3QamGeZztV4asUR5413OyE99Npgx/BCO6R50t2yoA==
-----END CERTIFICATE-----