Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/cQQLLFcjHA-AV0cCZb-j0qFS_Nk.roa
File:                     cQQLLFcjHA-AV0cCZb-j0qFS_Nk.roa (raw, json)
Hash identifier:          HPcbxpP7xfy34TkM50FUBdH8wkNVTiXj1t4II2Br+z8=
Subject key identifier:   71:04:0B:2C:57:23:1C:0F:80:57:47:02:65:BF:A3:D2:A1:52:FC:D9
Certificate issuer:       /CN=a8426790b9fa6709c977b7c5e5152baabda07fc7
Certificate serial:       0187E71D8E8E69A4A7CA26DF2103F5223C8D
Authority key identifier: A8:42:67:90:B9:FA:67:09:C9:77:B7:C5:E5:15:2B:AA:BD:A0:7F:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/cQQLLFcjHA-AV0cCZb-j0qFS_Nk.roa
Signing time:             Thu 04 May 2023 14:14:46 +0000
ROA not before:           Thu 04 May 2023 14:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60943
IP address blocks:        193.160.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e7:1d:8e:8e:69:a4:a7:ca:26:df:21:03:f5:22:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8426790b9fa6709c977b7c5e5152baabda07fc7
        Validity
            Not Before: May  4 14:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71040b2c57231c0f8057470265bfa3d2a152fcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:bf:1a:81:35:94:7b:1e:57:ad:a3:90:2b:
                    d3:bf:a2:5e:ef:e9:fd:61:05:de:f4:e3:47:e8:ca:
                    fa:6a:e2:01:b5:a5:b5:bd:ea:74:64:fa:03:7c:09:
                    0c:37:7b:df:b0:27:21:2e:9f:74:17:16:c9:ef:1f:
                    95:17:43:69:67:43:b5:50:7b:6e:9f:e9:66:5a:6b:
                    95:db:50:0e:48:55:6f:bc:93:4b:fa:05:f4:b1:b7:
                    21:4d:82:ee:01:48:1b:c7:4c:c9:51:2f:95:a2:e4:
                    54:2e:af:bc:05:83:2a:ca:0d:56:b6:4f:e4:48:5b:
                    71:ec:90:bc:46:fa:79:be:01:b7:89:74:d4:4c:f6:
                    8f:ca:8a:1c:57:29:8e:05:6c:4e:75:5b:9b:73:f7:
                    47:2c:67:4f:a5:bb:6c:91:74:98:5b:d1:4f:d7:cb:
                    2f:56:c0:dd:38:66:96:b1:fa:5c:2a:4d:54:c1:08:
                    44:d8:f9:b0:a8:90:39:e0:77:86:00:b2:f4:17:09:
                    b2:c3:4a:e1:09:99:4c:a3:f0:59:28:56:93:d1:b0:
                    1c:c6:94:23:f2:80:1b:e7:fb:44:7f:a8:00:08:7f:
                    8c:20:c0:b9:b0:7f:3e:ab:45:02:8a:f6:b2:26:4a:
                    a8:11:8a:ce:b2:e0:e2:b0:e3:f7:c6:50:d1:43:b2:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:0B:2C:57:23:1C:0F:80:57:47:02:65:BF:A3:D2:A1:52:FC:D9
            X509v3 Authority Key Identifier:
                keyid:A8:42:67:90:B9:FA:67:09:C9:77:B7:C5:E5:15:2B:AA:BD:A0:7F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/cQQLLFcjHA-AV0cCZb-j0qFS_Nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:d0:f7:c6:20:fd:e6:a8:6c:af:c8:66:99:77:40:21:d5:
         ed:da:db:55:ad:75:6d:62:ce:f4:0d:f5:c1:da:c3:c2:8b:d6:
         03:e9:81:60:9f:ec:fe:13:8b:2c:31:fe:f0:c5:62:6f:92:9d:
         85:a8:f5:b1:46:d3:f2:91:03:81:40:96:6d:1c:a2:d9:58:8b:
         20:4f:df:78:66:9b:6f:17:30:f1:91:2c:71:c6:bc:52:c5:f4:
         aa:23:ab:09:69:ba:35:69:a6:4a:71:b7:2f:9d:fa:4c:b5:dd:
         a9:e2:04:48:24:5e:d7:f3:51:62:ab:93:6c:eb:8f:b6:8a:63:
         44:f0:a1:6c:32:03:0d:a4:1b:1c:7c:19:b7:dc:ab:a6:f8:0e:
         d8:cc:c1:90:e1:54:03:d1:9a:e2:f8:fa:a2:4a:de:77:31:4b:
         a3:23:3e:6a:6f:ee:07:60:c1:bb:dc:92:8a:dd:57:09:e3:5e:
         f2:ba:2b:b8:53:f5:c2:1f:09:99:e5:39:7b:43:a1:27:e7:cc:
         93:cb:0a:8e:21:82:34:5b:69:bc:a7:60:a3:cd:d7:e8:02:e1:
         a1:dd:cc:86:13:3e:c0:1b:db:e3:9c:4f:3d:4f:ca:6c:7d:fc:
         e1:06:91:3f:ea:db:26:93:8e:cb:8c:55:63:02:44:82:22:af:
         aa:14:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----