Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4qqJQnWJmIokEbEuslhbxf2l5tQ.roa
File:                     4qqJQnWJmIokEbEuslhbxf2l5tQ.roa (raw, json)
Hash identifier:          VZeVMM5xiNmAHoXJiX/Q4gcRQbx28AwUE/3Yig3abj0=
Subject key identifier:   E2:AA:89:42:75:89:98:8A:24:11:B1:2E:B2:58:5B:C5:FD:A5:E6:D4
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0183C161E2232BBD8A2C1C97A789FBE02B15
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4qqJQnWJmIokEbEuslhbxf2l5tQ.roa
Signing time:             Mon 10 Oct 2022 10:12:41 +0000
ROA not before:           Mon 10 Oct 2022 10:12:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        141.11.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:61:e2:23:2b:bd:8a:2c:1c:97:a7:89:fb:e0:2b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Oct 10 10:12:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2aa89427589988a2411b12eb2585bc5fda5e6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:e4:dd:01:92:43:e1:38:09:26:73:19:93:
                    7e:bd:a2:5a:c3:c4:9b:c2:5a:47:63:c2:da:a5:77:
                    20:21:ce:7d:de:f3:fa:3b:df:b6:4d:57:7b:7e:7e:
                    fc:be:f1:f7:8c:ef:17:dd:65:1c:62:de:b3:97:7e:
                    7b:41:43:fc:21:b9:46:a7:1b:bc:15:db:03:1c:b3:
                    65:8f:9c:20:83:69:c2:02:b4:b8:c5:a6:3d:21:1c:
                    3c:43:d2:4a:72:5a:fd:dc:43:80:8b:f4:9f:5e:bd:
                    c8:b6:65:ea:93:43:af:1d:71:a4:33:2d:c6:39:b9:
                    c3:15:b6:65:10:d8:87:d5:00:e1:b8:c2:e7:a3:b6:
                    a3:dd:f8:01:05:ac:32:94:aa:8c:a4:fc:b3:8f:b9:
                    e8:f3:36:25:92:79:b5:2b:a5:49:ef:dc:3d:00:2d:
                    69:6b:41:0e:5e:3e:4d:48:a5:17:ae:94:ef:26:b4:
                    f7:09:24:b1:aa:65:0e:a8:02:78:16:ae:99:9e:8a:
                    6e:90:80:2d:24:d9:22:10:24:4a:c6:8f:ce:2c:50:
                    0e:f9:72:29:84:fe:1c:50:a9:36:b5:0c:1e:bb:75:
                    03:5d:d2:90:d6:9b:84:7c:3b:a0:25:b3:af:2f:38:
                    84:15:0d:bf:19:b5:50:9f:31:60:70:e0:5f:b4:90:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:89:42:75:89:98:8A:24:11:B1:2E:B2:58:5B:C5:FD:A5:E6:D4
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4qqJQnWJmIokEbEuslhbxf2l5tQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:ed:fc:31:8e:0f:09:fa:51:2c:8a:d2:15:b2:3a:41:a6:
         5f:ce:8b:63:7b:cb:aa:37:c3:2d:f5:f8:7e:10:3b:51:b7:18:
         ea:11:0a:2b:5d:52:6f:58:40:0a:0d:e1:dd:8e:6f:30:dd:80:
         d3:29:11:69:c0:ec:04:29:e1:1c:a0:33:3d:7f:89:f6:f6:3e:
         c8:4b:cf:35:86:cf:88:e9:f3:b8:61:60:fd:61:11:98:f6:81:
         13:a6:06:ec:64:29:7a:ec:45:6e:81:1a:3f:52:3d:70:f6:a9:
         17:f6:ad:99:a7:f8:bf:57:66:eb:4e:76:ba:45:7f:72:8c:db:
         fd:df:ae:57:7f:c2:e6:b5:5f:b6:a9:7a:ca:63:f1:82:80:63:
         ec:f1:f2:d7:24:0c:ca:34:25:fa:86:1a:96:bc:84:e8:35:28:
         4c:ac:f0:cb:03:58:fd:91:ae:9a:d6:17:41:a9:f1:7d:3b:8f:
         d0:6a:5f:e5:59:9b:59:63:27:f4:91:b6:a1:c4:b7:4b:50:5d:
         b9:3c:82:84:a7:f5:7a:15:3a:32:20:c3:b7:e2:60:8a:bd:d8:
         85:29:0c:9e:d9:93:0e:f9:72:fc:97:bb:b2:bb:2a:27:a7:24:
         7e:33:18:60:31:a3:4d:d2:c8:ab:53:f3:53:49:7f:de:6d:60:
         08:57:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----