Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/pSOVE20FlOGL14LwGVbeIsQ4ao4.roa
File:                     pSOVE20FlOGL14LwGVbeIsQ4ao4.roa (raw, json)
Hash identifier:          GJAbEgArBiUTqa5mYEPrLbKmob45gjv2Q4Ogq3PQXuY=
Subject key identifier:   A5:23:95:13:6D:05:94:E1:8B:D7:82:F0:19:56:DE:22:C4:38:6A:8E
Certificate issuer:       /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial:       070FC9CF
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/pSOVE20FlOGL14LwGVbeIsQ4ao4.roa
Signing time:             Sat 01 Jan 2022 11:59:34 +0000
ROA not before:           Sat 01 Jan 2022 11:59:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133944
IP address blocks:        160.19.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118475215 (0x70fc9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
        Validity
            Not Before: Jan  1 11:59:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a52395136d0594e18bd782f01956de22c4386a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:4b:e3:5a:2d:f9:78:cc:f5:a5:91:64:07:
                    49:5f:30:04:50:f2:4a:e7:bc:89:3d:ca:de:b3:33:
                    5a:91:44:11:90:6d:c2:91:d2:31:d5:fd:de:22:56:
                    ec:77:57:8c:46:4e:7e:e9:5b:42:40:f6:df:29:91:
                    1e:0f:ca:b5:15:e1:62:e6:24:5b:d3:d1:2e:02:d5:
                    c9:aa:30:bf:d7:28:5d:7a:84:8b:a4:47:85:79:18:
                    24:35:e4:c8:23:54:77:cb:0a:18:5b:c7:ec:f1:73:
                    ae:fa:ed:11:6d:b0:3a:99:8d:58:94:43:38:14:e6:
                    e9:10:3a:fe:99:a1:78:24:7b:b7:c9:79:96:8f:74:
                    99:4a:de:2a:fb:80:ba:cf:db:98:db:74:f5:ed:26:
                    e4:99:0e:71:b1:e3:33:bf:aa:16:f9:6f:5c:4f:d1:
                    97:a1:78:78:3b:87:5b:81:c5:c6:0f:74:e4:1a:4a:
                    b4:9e:5b:11:6b:10:3b:d4:cd:c6:df:13:9b:bc:6a:
                    fa:2c:45:cb:02:d6:5f:8d:63:5f:a7:f4:51:dc:f5:
                    c3:3b:ec:1d:55:0c:6c:ed:55:fa:07:f7:76:66:82:
                    a2:b4:10:92:b2:c0:53:46:bd:6e:76:8b:59:04:de:
                    a8:e5:32:50:bb:af:dc:17:64:95:0a:7a:06:8e:79:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:95:13:6D:05:94:E1:8B:D7:82:F0:19:56:DE:22:C4:38:6A:8E
            X509v3 Authority Key Identifier:
                keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/pSOVE20FlOGL14LwGVbeIsQ4ao4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:0e:63:47:ea:ee:2e:a5:bf:7a:87:5b:e3:06:33:df:f6:e5:
         3a:50:55:25:45:93:f2:3e:97:4b:bf:d4:15:90:22:1f:47:21:
         6c:46:3d:1e:31:fc:e8:e8:e8:fa:a5:53:bf:d5:95:e3:6c:c3:
         d4:63:9f:7f:64:56:53:fb:44:5b:2a:5a:7f:ae:dc:c2:23:2c:
         16:79:9e:18:d0:bf:60:ac:0f:c5:5f:de:f5:ba:06:5e:35:17:
         27:80:99:b3:d5:6b:b7:56:c9:a4:fa:aa:22:0a:21:df:10:47:
         7c:a5:59:b0:19:84:44:b8:96:4c:00:80:87:54:04:dc:06:7e:
         79:57:2c:03:a9:e6:ea:a8:a5:80:38:5e:ae:0a:dc:1b:31:87:
         05:e5:3d:23:6d:6f:5d:71:86:e2:cf:0b:5e:4c:51:de:de:5f:
         e1:a4:54:d6:67:bd:19:e0:61:a6:40:a6:50:18:2e:6d:90:e8:
         b0:47:d8:90:49:02:0a:87:99:ac:9b:b0:8c:53:c9:67:c0:65:
         de:d2:4f:7f:54:f4:7d:31:c7:f5:a5:05:a6:62:cf:11:16:3d:
         a7:fd:f1:e0:b1:a6:ba:ee:49:18:b3:c4:b8:4c:93:79:30:0c:
         67:93:65:c8:98:01:8d:55:ad:02:7c:31:de:53:d2:59:ba:ee:
         0e:2d:ad:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBw/JzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY2MWFkY2JmNjk2MmVlZWM4MjVjNmQ0ZGU5YjQ0OWYwMmU4NDFkMB4XDTIyMDEw
MTExNTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTUyMzk1MTM2ZDA1
OTRlMThiZDc4MmYwMTk1NmRlMjJjNDM4NmE4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgvS+NaLfl4zPWlkWQHSV8wBFDySue8iT3K3rMzWpFEEZBt
wpHSMdX93iJW7HdXjEZOfulbQkD23ymRHg/KtRXhYuYkW9PRLgLVyaowv9coXXqE
i6RHhXkYJDXkyCNUd8sKGFvH7PFzrvrtEW2wOpmNWJRDOBTm6RA6/pmheCR7t8l5
lo90mUreKvuAus/bmNt09e0m5JkOcbHjM7+qFvlvXE/Rl6F4eDuHW4HFxg905BpK
tJ5bEWsQO9TNxt8Tm7xq+ixFywLWX41jX6f0Udz1wzvsHVUMbO1V+gf3dmaCorQQ
krLAU0a9bnaLWQTeqOUyULuv3BdklQp6Bo55hHECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlI5UTbQWU4YvXgvAZVt4ixDhqjjAfBgNVHSMEGDAWgBRbZhrcv2li7uyC
XG1N6bRJ8C6EHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cyWWEzTDlwWXU3c2dseHRUZW0wU2ZBdWhCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvY2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8x
L3BTT1ZFMjBGbE9HTDE0THdHVmJlSXNRNGFvNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
Y2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8xL1cyWWEzTDlwWXU3
c2dseHRUZW0wU2ZBdWhCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaATXDANBgkqhkiG9w0BAQsFAAOC
AQEAwg5jR+ruLqW/eodb4wYz3/blOlBVJUWT8j6XS7/UFZAiH0chbEY9HjH86Ojo
+qVTv9WV42zD1GOff2RWU/tEWypaf67cwiMsFnmeGNC/YKwPxV/e9boGXjUXJ4CZ
s9Vrt1bJpPqqIgoh3xBHfKVZsBmERLiWTACAh1QE3AZ+eVcsA6nm6qilgDhergrc
GzGHBeU9I21vXXGG4s8LXkxR3t5f4aRU1me9GeBhpkCmUBgubZDosEfYkEkCCoeZ
rJuwjFPJZ8Bl3tJPf1T0fTHH9aUFpmLPERY9p/3x4LGmuu5JGLPEuEyTeTAMZ5Nl
yJgBjVWtAnwx3lPSWbruDi2tSg==
-----END CERTIFICATE-----