Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fFc4Eut8OWJo8_lPprFUuWpjO6c.roa
File:                     fFc4Eut8OWJo8_lPprFUuWpjO6c.roa (raw, json)
Hash identifier:          WoP7cO6LHUSDlTtRpwSC5+H3bydzwzc6zKKknOQbXsM=
Subject key identifier:   7C:57:38:12:EB:7C:39:62:68:F3:F9:4F:A6:B1:54:B9:6A:63:3B:A7
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       03DB2E5B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fFc4Eut8OWJo8_lPprFUuWpjO6c.roa
Signing time:             Wed 13 Apr 2022 09:37:38 +0000
ROA not before:           Wed 13 Apr 2022 09:37:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140096
IP address blocks:        141.11.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64695899 (0x3db2e5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 13 09:37:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c573812eb7c396268f3f94fa6b154b96a633ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:28:18:f3:42:e8:fc:b7:2c:4c:e6:b8:ce:
                    cd:67:e3:2e:39:52:59:7f:5b:c3:65:d3:b3:5e:e1:
                    53:d3:99:93:4c:ad:59:09:33:bb:b7:68:5e:03:27:
                    aa:a7:f6:1f:37:f3:5e:91:50:60:c9:5f:f9:5b:b2:
                    40:6c:ba:d2:33:8f:4b:78:72:8c:15:35:cd:f0:6c:
                    bf:16:bc:b5:cb:38:5f:cf:2e:4c:d8:8d:41:1e:7e:
                    fd:41:7b:19:8e:36:3d:27:0d:6a:10:95:b8:c9:b8:
                    66:ef:e5:1f:8c:35:ea:41:ab:f9:6c:56:4c:cf:12:
                    5b:a2:76:97:0f:ab:57:c2:2a:cc:52:07:65:15:cb:
                    60:bd:b0:81:a3:c0:76:79:72:c1:cc:92:00:a6:40:
                    cc:e8:df:a8:6b:41:12:48:e1:e4:01:6c:6d:38:20:
                    73:8b:81:48:8d:1a:2a:30:1f:2d:34:2b:d9:64:f9:
                    69:b9:d4:64:b7:e2:3d:8e:08:bd:95:11:db:db:4f:
                    6a:94:24:c3:07:e8:c6:05:77:fc:cc:cb:b1:d8:15:
                    2e:fe:56:b4:7f:5a:26:d2:09:32:13:4f:79:ab:34:
                    4b:8a:d9:38:8b:42:9c:47:71:b5:87:9b:45:2e:43:
                    47:9b:c5:83:c4:a6:00:c0:50:d0:1b:dc:46:df:98:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:38:12:EB:7C:39:62:68:F3:F9:4F:A6:B1:54:B9:6A:63:3B:A7
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fFc4Eut8OWJo8_lPprFUuWpjO6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:67:f9:a5:e4:4e:1b:2b:46:ba:b8:83:59:56:04:7f:97:37:
         95:cf:47:a8:18:ed:66:ec:b4:ce:40:87:fb:c6:cc:2e:4d:fb:
         19:9f:ba:95:b5:0c:1e:ca:fe:f7:78:1e:60:75:dc:f8:c0:e7:
         80:3a:a2:3e:1f:eb:eb:f1:47:41:1b:11:74:bb:3e:5b:7c:84:
         79:09:58:c1:6e:ce:36:1a:b6:d5:c5:ff:d0:7f:0c:16:ca:70:
         d0:7f:82:3e:07:38:a3:54:97:04:fa:45:2f:c2:80:f4:78:5c:
         4d:ba:4c:5e:31:1c:f4:99:e8:77:e7:a6:5a:67:25:65:4b:4d:
         82:d4:ce:ee:9d:8d:12:e5:37:c6:15:7b:c3:f1:46:ae:b3:5b:
         56:a4:fe:e9:8c:f8:72:28:df:ee:58:ca:87:87:57:27:28:66:
         e0:4c:01:db:42:1f:4e:2a:14:25:ee:d0:e7:5c:bb:b7:8e:73:
         29:6c:5d:59:05:cd:3f:72:90:21:f5:71:99:33:e2:f3:b4:2e:
         a3:eb:35:78:06:7b:0a:35:2a:36:09:8e:d2:29:56:64:c6:d9:
         57:99:a4:12:77:d2:ac:ce:7e:34:98:4f:36:ba:ea:4a:2e:8f:
         1d:18:8d:33:3d:ca:dc:f2:11:46:67:cc:f1:8c:f2:aa:9a:e2:
         ad:e5:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----