Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/jh9Zrl6-iMP7hQ1qk-3lKkMoGSo.roa
File:                     jh9Zrl6-iMP7hQ1qk-3lKkMoGSo.roa (raw, json)
Hash identifier:          zTikiLSaw5dUvJXvHN1zJvnUcwlLVsvJDd46sAG6Z7M=
Subject key identifier:   8E:1F:59:AE:5E:BE:88:C3:FB:85:0D:6A:93:ED:E5:2A:43:28:19:2A
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       018311F6641A5845722A45772C80C3FC3E33
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/jh9Zrl6-iMP7hQ1qk-3lKkMoGSo.roa
Signing time:             Tue 06 Sep 2022 08:41:43 +0000
ROA not before:           Tue 06 Sep 2022 08:41:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        141.11.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:11:f6:64:1a:58:45:72:2a:45:77:2c:80:c3:fc:3e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Sep  6 08:41:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e1f59ae5ebe88c3fb850d6a93ede52a4328192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:36:5f:f6:83:db:75:24:b7:72:72:4d:c2:
                    a8:aa:45:7e:99:26:1f:cd:1f:42:df:32:7d:bd:e4:
                    22:cf:45:0a:71:7b:fa:7c:a7:65:3b:af:66:f2:a1:
                    09:3a:29:93:80:c6:af:af:a8:0b:3d:5c:d2:57:b6:
                    2f:5a:4a:65:76:f6:c6:7c:dc:03:ed:2a:57:4b:db:
                    04:ba:d9:67:11:37:40:76:9b:d0:91:52:fd:58:db:
                    98:1b:c4:30:70:b2:a8:59:7d:e2:ea:72:70:8d:cc:
                    2e:e0:a8:05:00:9d:f8:75:b3:ad:bd:d9:3b:3f:d1:
                    38:6f:2f:c0:a6:4f:4b:db:2a:7d:8c:77:16:c1:2f:
                    f1:53:80:0f:84:66:e2:25:4a:e0:62:d7:25:2c:74:
                    be:1b:d4:dc:8f:e7:81:64:ef:47:33:24:76:42:9b:
                    01:0e:30:bf:4d:ed:92:91:2f:57:74:42:a3:7f:85:
                    4c:a2:0e:51:e1:23:f5:31:73:2c:3a:a1:21:95:b6:
                    b3:b0:b3:14:1c:bf:d7:5f:9a:c5:f0:1e:7d:d3:f9:
                    7e:ad:5c:5a:07:28:24:65:8b:12:7d:9a:6f:08:2f:
                    90:29:b0:e2:42:a4:e0:a1:79:e8:1f:6d:a0:a4:c0:
                    92:bf:d9:87:84:c3:70:b5:16:73:00:16:50:a9:81:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:59:AE:5E:BE:88:C3:FB:85:0D:6A:93:ED:E5:2A:43:28:19:2A
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/jh9Zrl6-iMP7hQ1qk-3lKkMoGSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:62:6d:20:a1:66:38:72:4c:1a:ed:9c:59:42:a7:e6:51:2a:
         21:fe:a6:60:34:08:c7:53:ab:cb:00:b3:69:57:03:9f:5f:60:
         34:ed:e8:25:80:10:89:93:f3:d6:c7:62:8b:d1:bd:d8:f5:3a:
         69:a3:b7:8d:e9:61:e9:7e:58:e9:92:67:75:af:93:73:89:f2:
         09:82:6c:c1:3d:aa:04:52:0d:39:c5:ca:f1:1a:dc:cd:e5:76:
         3b:f3:ac:eb:0f:c0:4a:ad:9d:59:dc:ba:00:dc:20:e4:d4:09:
         cc:94:e1:6f:32:ce:7e:39:4f:fc:ab:40:76:3e:e7:a9:17:c4:
         a2:65:97:95:f8:35:20:e1:af:c1:3f:4c:c1:83:48:83:74:55:
         2f:ec:3e:e3:8b:d9:6f:98:dd:ed:53:23:ad:6a:ff:cc:2f:8a:
         31:30:c3:39:b9:f4:bc:b3:1a:e0:8a:27:5c:80:3b:b4:a1:f0:
         0c:0c:7d:81:27:82:c0:83:7d:33:72:8f:dc:ee:a0:58:7b:87:
         fc:ff:ed:f8:ad:d2:b2:91:3f:a7:55:ca:c9:dd:88:70:0c:72:
         a8:98:9f:1c:ef:da:7d:b5:79:6e:5f:c8:9f:f1:57:35:79:d4:
         83:3c:b0:a3:9d:19:2c:1c:70:97:0e:92:5f:63:51:60:e1:7b:
         7d:12:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----