Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/J4697KCX4WFPoUewdV0gamuBBpg.roa
File:                     J4697KCX4WFPoUewdV0gamuBBpg.roa (raw, json)
Hash identifier:          6juaH4jr+LUpfainII8W07+ownmJCl7q4l2vMgKHMLg=
Subject key identifier:   27:8E:BD:EC:A0:97:E1:61:4F:A1:47:B0:75:5D:20:6A:6B:81:06:98
Certificate issuer:       /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial:       018570706B1AF940495B7498700660E08207
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/J4697KCX4WFPoUewdV0gamuBBpg.roa
Signing time:             Mon 02 Jan 2023 03:04:53 +0000
ROA not before:           Mon 02 Jan 2023 03:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209828
IP address blocks:        194.69.162.0/24 maxlen: 24
                          2a0c:ae81::/32 maxlen: 32
                          2a0c:ae80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:6b:1a:f9:40:49:5b:74:98:70:06:60:e0:82:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
        Validity
            Not Before: Jan  2 03:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=278ebdeca097e1614fa147b0755d206a6b810698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:7c:5d:9a:cb:70:d2:db:2b:d2:6a:52:11:
                    7a:75:4c:70:35:eb:ea:7b:12:03:4d:d6:07:a1:68:
                    b1:b8:15:cb:5e:0b:05:d8:a1:ee:c2:f7:31:f8:d9:
                    44:d5:3d:48:f1:1b:b8:c3:13:9a:52:5f:34:e0:6f:
                    83:ec:8e:18:e4:1a:0e:a4:52:9a:70:84:54:63:cf:
                    3f:a2:a6:60:96:bb:17:e3:52:c3:cb:84:e1:1b:c8:
                    ee:d1:bf:1f:d6:71:d9:2a:4d:5c:73:ff:f5:a6:2f:
                    66:72:8b:d1:a9:94:f7:3d:e7:e0:17:48:3f:0a:13:
                    9b:55:92:ce:cd:ad:5d:04:c3:21:cc:7e:89:b6:6a:
                    f2:64:25:35:a6:ed:24:5b:e4:34:2c:d1:a7:c1:fa:
                    90:e4:a8:87:c0:66:04:20:5c:64:32:b3:b8:3e:dc:
                    63:fc:2f:29:d3:30:07:51:da:67:7e:04:26:5d:be:
                    bb:eb:0f:58:f6:4d:91:fe:63:3b:c5:fd:86:f7:e4:
                    92:88:50:3b:9c:f9:92:d8:75:20:f0:6c:e5:3d:74:
                    ce:d6:d7:a9:75:41:ae:91:18:b9:34:28:3d:0f:26:
                    f2:45:a5:da:2d:3b:7d:66:74:28:e5:38:03:b4:e2:
                    80:69:f1:44:3e:72:92:67:9c:44:c0:ca:54:79:3c:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:BD:EC:A0:97:E1:61:4F:A1:47:B0:75:5D:20:6A:6B:81:06:98
            X509v3 Authority Key Identifier:
                keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/J4697KCX4WFPoUewdV0gamuBBpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.162.0/24
                IPv6:
                  2a0c:ae80::/31

    Signature Algorithm: sha256WithRSAEncryption
         51:23:c7:37:77:9e:02:f5:3c:ee:04:a3:e6:c9:d4:73:e9:54:
         d0:22:61:28:2d:a3:2d:0d:73:f2:e3:f4:9d:c2:f4:74:90:24:
         b4:66:dc:a8:ba:67:46:0d:a8:2e:ee:2a:2c:51:12:5e:23:35:
         24:a7:bd:54:7b:a8:3b:c8:c8:98:db:7e:8d:8f:09:1f:f5:81:
         85:41:19:0f:9c:aa:f5:00:30:c1:44:f1:62:0d:01:91:e4:8b:
         f9:72:88:b9:34:fc:64:4c:c8:c8:69:75:be:1d:e9:bd:d4:08:
         6c:73:f3:92:67:46:8b:d5:e5:49:ac:65:d2:03:66:ef:ab:d2:
         86:81:9f:2d:38:59:77:67:35:b5:20:5f:14:6c:5f:7d:24:ba:
         e2:0f:9f:62:bd:1e:dc:4e:59:0c:60:b5:ae:e5:72:0f:9d:9b:
         31:c3:99:a4:e4:ef:97:b0:e2:51:ef:6d:64:f3:3e:55:d1:8c:
         54:e8:89:20:0d:0f:11:22:9c:09:77:cf:58:e1:33:2d:93:8e:
         e3:96:e5:f3:5d:e4:81:37:19:87:92:fc:56:7a:54:11:8f:df:
         1d:09:26:a3:ad:9b:fe:21:24:9e:90:a6:76:7f:92:f5:ea:b1:
         ec:e9:c0:b9:22:88:8f:58:6c:0d:22:44:16:7e:0a:c3:4c:82:
         06:8e:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----