Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/DTyBKXRGEgUSEO30wLYcWXqrKNA.roa
File:                     DTyBKXRGEgUSEO30wLYcWXqrKNA.roa (raw, json)
Hash identifier:          wRqZqR/1wqjBBnA21esi7MQt6LU1DE99Gz8L+fgJWNI=
Subject key identifier:   0D:3C:81:29:74:46:12:05:12:10:ED:F4:C0:B6:1C:59:7A:AB:28:D0
Certificate issuer:       /CN=cfe287ce899d4000e66c2d6b4abd0552af644436
Certificate serial:       1994A2AC
Authority key identifier: CF:E2:87:CE:89:9D:40:00:E6:6C:2D:6B:4A:BD:05:52:AF:64:44:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-KHzomdQADmbC1rSr0FUq9kRDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/DTyBKXRGEgUSEO30wLYcWXqrKNA.roa
Signing time:             Sat 01 Jan 2022 07:59:40 +0000
ROA not before:           Sat 01 Jan 2022 07:59:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61952
IP address blocks:        185.46.20.0/22 maxlen: 22
                          2a01:82a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429171372 (0x1994a2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe287ce899d4000e66c2d6b4abd0552af644436
        Validity
            Not Before: Jan  1 07:59:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d3c8129744612051210edf4c0b61c597aab28d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:88:51:76:88:83:bd:5d:a5:c4:78:8d:8c:
                    c8:8b:e6:58:96:31:99:01:d7:b1:0c:7f:28:21:f1:
                    f9:b1:49:86:15:cc:24:e5:ec:8e:2b:1d:80:fc:59:
                    1a:41:4f:cb:d8:ca:4f:67:7b:fa:40:87:f9:8b:c7:
                    b0:12:1d:91:ca:2f:2f:24:e3:3d:6b:86:59:46:4a:
                    db:7c:cb:96:61:b4:64:d3:bc:12:11:89:65:6c:9b:
                    78:c2:98:4b:a6:4c:34:d1:e9:b9:c8:fe:93:11:68:
                    c9:ee:ef:fc:02:f1:39:09:37:66:f9:3d:fd:66:d9:
                    7b:13:3d:3f:3e:3d:97:74:7d:81:df:19:dc:d4:4b:
                    3b:91:de:18:7d:0d:36:17:5c:29:1f:4e:ba:41:0a:
                    54:05:95:61:ad:d9:8b:83:c0:5a:1d:dc:ec:75:c9:
                    cf:c8:d8:e2:8b:9e:fb:fa:4a:a8:57:5e:db:1e:2b:
                    f1:c3:b5:54:4f:84:31:37:cd:84:54:4b:8f:5a:b1:
                    fc:7e:26:cf:28:dd:d8:97:29:d1:ea:9a:04:99:50:
                    c0:82:2c:e1:b6:25:55:87:f5:d3:1a:f2:30:78:3c:
                    b6:66:41:c4:9e:47:a6:3a:22:10:33:4d:9c:34:58:
                    f2:c1:f9:6c:06:07:8f:b9:04:2f:29:75:0e:7e:73:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:81:29:74:46:12:05:12:10:ED:F4:C0:B6:1C:59:7A:AB:28:D0
            X509v3 Authority Key Identifier:
                keyid:CF:E2:87:CE:89:9D:40:00:E6:6C:2D:6B:4A:BD:05:52:AF:64:44:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-KHzomdQADmbC1rSr0FUq9kRDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/DTyBKXRGEgUSEO30wLYcWXqrKNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/z-KHzomdQADmbC1rSr0FUq9kRDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.20.0/22
                IPv6:
                  2a01:82a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:96:90:cc:f8:6e:08:08:c3:f3:44:ae:89:c4:ba:d9:c2:
         d1:97:27:48:6b:e9:36:e0:26:2f:22:7c:9b:8b:12:c9:15:f3:
         57:de:f7:b5:6b:34:64:81:bb:10:62:76:78:7d:de:af:67:cd:
         d4:cc:89:98:8a:bc:25:36:fd:d7:90:37:3c:76:6b:a5:dc:c0:
         7a:11:a8:dc:c9:37:7f:cf:d7:1f:de:7b:cb:40:cd:ea:72:d7:
         0a:c5:3f:7a:e2:01:49:20:50:6c:47:39:b7:3c:1b:db:12:30:
         38:4c:5c:9c:42:77:60:95:b0:4e:15:f8:ab:8b:c9:25:68:12:
         a6:0e:31:67:4e:49:69:a2:42:78:94:7d:d4:cf:0b:ff:f1:3d:
         c0:71:6c:a8:32:fe:31:4a:e8:e8:1d:f2:8d:7b:5f:b5:c0:4f:
         41:38:24:0c:16:b4:b8:31:04:8f:75:46:97:86:b5:82:e3:31:
         88:f0:40:22:32:db:97:02:74:a7:2f:46:e0:6b:b0:a0:51:5d:
         fd:55:22:9c:ed:81:5a:01:f9:46:a6:d7:62:eb:d4:9e:b3:9a:
         83:3f:91:f9:02:5f:6b:e7:24:c3:0f:3c:7e:51:88:2c:b0:a3:
         a5:85:a9:6c:24:b5:c1:65:33:ac:3a:7a:3f:b3:60:cd:f6:0b:
         8c:73:af:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGZSirDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmUyODdjZTg5OWQ0MDAwZTY2YzJkNmI0YWJkMDU1MmFmNjQ0NDM2MB4XDTIyMDEw
MTA3NTk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQzYzgxMjk3NDQ2
MTIwNTEyMTBlZGY0YzBiNjFjNTk3YWFiMjhkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOf4iFF2iIO9XaXEeI2MyIvmWJYxmQHXsQx/KCHx+bFJhhXM
JOXsjisdgPxZGkFPy9jKT2d7+kCH+YvHsBIdkcovLyTjPWuGWUZK23zLlmG0ZNO8
EhGJZWybeMKYS6ZMNNHpucj+kxFoye7v/ALxOQk3Zvk9/WbZexM9Pz49l3R9gd8Z
3NRLO5HeGH0NNhdcKR9OukEKVAWVYa3Zi4PAWh3c7HXJz8jY4oue+/pKqFde2x4r
8cO1VE+EMTfNhFRLj1qx/H4mzyjd2Jcp0eqaBJlQwIIs4bYlVYf10xryMHg8tmZB
xJ5HpjoiEDNNnDRY8sH5bAYHj7kELyl1Dn5z5LMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQNPIEpdEYSBRIQ7fTAthxZeqso0DAfBgNVHSMEGDAWgBTP4ofOiZ1AAOZs
LWtKvQVSr2RENjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3otS0h6b21kUUFEbWJDMXJTcjBGVXE5a1JEWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvNmRiM2Q3LTFjMWYtNDQ3NS1hOGQzLTc5ZGI5Y2U4YThhOC8x
L0RUeUJLWFJHRWdVU0VPMzB3TFljV1hxcktOQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
NmRiM2Q3LTFjMWYtNDQ3NS1hOGQzLTc5ZGI5Y2U4YThhOC8xL3otS0h6b21kUUFE
bWJDMXJTcjBGVXE5a1JEWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkuFDANBAIAAjAHAwUAKgGCoDAN
BgkqhkiG9w0BAQsFAAOCAQEAGLOWkMz4bggIw/NEronEutnC0ZcnSGvpNuAmLyJ8
m4sSyRXzV973tWs0ZIG7EGJ2eH3er2fN1MyJmIq8JTb915A3PHZrpdzAehGo3Mk3
f8/XH957y0DN6nLXCsU/euIBSSBQbEc5tzwb2xIwOExcnEJ3YJWwThX4q4vJJWgS
pg4xZ05JaaJCeJR91M8L//E9wHFsqDL+MUro6B3yjXtftcBPQTgkDBa0uDEEj3VG
l4a1guMxiPBAIjLblwJ0py9G4GuwoFFd/VUinO2BWgH5RqbXYuvUnrOagz+R+QJf
a+ckww88flGILLCjpYWpbCS1wWUzrDp6P7NgzfYLjHOvcA==