Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/e89mCJdSA5Vpc8SDAR99tTcagV0.roa
File:                     e89mCJdSA5Vpc8SDAR99tTcagV0.roa (raw, json)
Hash identifier:          74PVxNcBTFqjngiKOi5+C95F67hXQNyIUUrnzooe0EQ=
Subject key identifier:   7B:CF:66:08:97:52:03:95:69:73:C4:83:01:1F:7D:B5:37:1A:81:5D
Certificate issuer:       /CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
Certificate serial:       01067AA0
Authority key identifier: A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/e89mCJdSA5Vpc8SDAR99tTcagV0.roa
Signing time:             Sat 01 Jan 2022 03:52:19 +0000
ROA not before:           Sat 01 Jan 2022 03:52:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41827
IP address blocks:        185.168.164.0/22 maxlen: 24
                          2a0b:ea00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17201824 (0x1067aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
        Validity
            Not Before: Jan  1 03:52:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bcf6608975203956973c483011f7db5371a815d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:86:5f:7d:33:b6:19:c4:02:c3:a4:1b:2d:
                    68:00:ef:1e:84:81:98:30:a5:d5:2c:2a:87:08:9f:
                    50:5f:15:37:df:15:99:06:56:e5:58:a9:ac:5c:b9:
                    bc:0a:61:44:aa:4b:40:98:eb:e4:46:8f:60:78:7a:
                    8c:ab:f1:29:9a:7f:87:7f:da:61:09:33:c8:51:26:
                    cf:6c:1e:28:e3:40:23:ad:7d:4a:1e:c5:6f:9c:cc:
                    da:52:a7:eb:14:99:61:b8:f0:24:6d:ca:27:3f:85:
                    98:09:2b:f3:8a:73:00:2d:79:ba:4e:76:bc:d7:a8:
                    a1:ed:c7:f6:33:d5:64:f4:d5:2c:26:32:fe:57:28:
                    f3:38:4e:c7:fe:c9:c5:06:67:78:7c:3f:06:77:f2:
                    49:eb:eb:af:9b:cc:35:a0:ee:29:b0:5d:33:b7:d6:
                    10:e8:07:70:9b:1d:76:3c:65:c5:85:5b:29:d2:50:
                    b1:cf:e9:22:86:1d:f0:55:3e:9f:03:36:e6:5c:d4:
                    0b:73:d8:94:80:46:86:d4:9a:94:6f:6e:13:cc:a4:
                    1d:78:b9:6f:ec:5e:27:13:b2:d6:7a:02:d7:5b:2a:
                    98:03:1f:76:b0:1b:10:18:15:1f:1f:79:72:94:bb:
                    58:c1:09:89:ae:70:72:67:54:36:9e:f5:b6:0b:b7:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:66:08:97:52:03:95:69:73:C4:83:01:1F:7D:B5:37:1A:81:5D
            X509v3 Authority Key Identifier:
                keyid:A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/e89mCJdSA5Vpc8SDAR99tTcagV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.164.0/22
                IPv6:
                  2a0b:ea00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:a6:b1:34:fe:fb:d3:40:82:30:cd:1c:9c:30:54:4b:1d:
         06:59:c9:74:b6:91:aa:30:47:d4:72:dc:1a:0d:7a:9f:ee:97:
         7b:9a:fa:42:8b:11:46:3c:8d:0c:0d:d4:be:ea:a4:a1:5c:03:
         25:91:10:41:3c:21:38:25:d8:d1:32:cc:78:49:56:c4:61:b5:
         2d:1c:9e:e9:4d:22:ac:20:87:a0:26:d9:5f:15:58:bc:de:cb:
         32:a6:7e:6a:8b:45:74:af:c3:34:05:f6:af:14:78:0e:ad:cd:
         f7:15:c9:c8:3b:5e:fa:f0:63:1d:51:b7:78:4c:2f:02:dd:c1:
         a5:92:09:3f:9a:71:bc:b7:c9:84:eb:fb:c7:65:75:02:63:1c:
         15:a5:1f:8e:88:3e:1d:42:5f:42:e3:a3:95:04:f2:ef:52:09:
         37:05:ef:cd:7b:c1:5e:55:95:bf:4a:f1:95:4d:f6:21:98:7b:
         62:f3:29:44:7f:5f:eb:f8:a7:54:1f:17:d6:1d:77:60:ee:ca:
         83:56:83:3d:09:aa:c6:7b:e7:f1:39:81:4e:8f:6e:24:86:64:
         fa:2c:71:e6:50:36:7d:ad:94:61:7d:d6:48:2f:60:64:0d:b2:
         3d:f4:af:8f:09:25:13:0e:bf:68:f6:85:74:a3:d7:e0:e0:1c:
         07:11:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----