Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/3Vlz4osvXPbRFy4bPwE1pxBFH0Y.roa
File:                     3Vlz4osvXPbRFy4bPwE1pxBFH0Y.roa (raw, json)
Hash identifier:          omandrLLfxEL6NB/6kbA3/WFjc5rZ+BbgPYXoiKoaMs=
Subject key identifier:   DD:59:73:E2:8B:2F:5C:F6:D1:17:2E:1B:3F:01:35:A7:10:45:1F:46
Certificate issuer:       /CN=42447a77d82f5ba3521653615c982084b6210694
Certificate serial:       35C4846F
Authority key identifier: 42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/3Vlz4osvXPbRFy4bPwE1pxBFH0Y.roa
Signing time:             Tue 29 Mar 2022 15:07:25 +0000
ROA not before:           Tue 29 Mar 2022 15:07:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210423
IP address blocks:        94.24.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902071407 (0x35c4846f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42447a77d82f5ba3521653615c982084b6210694
        Validity
            Not Before: Mar 29 15:07:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dd5973e28b2f5cf6d1172e1b3f0135a710451f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:89:bd:ed:6d:16:77:5c:d9:63:94:65:98:
                    c5:0e:35:1c:c6:0e:09:e6:78:64:ee:4b:3b:5c:b2:
                    70:81:46:40:8e:97:09:da:44:da:18:fa:69:17:0c:
                    67:21:0b:dd:b0:63:7f:b6:b9:2d:59:57:17:0b:1a:
                    36:44:c9:01:81:76:7c:93:69:c6:60:c8:6c:44:93:
                    04:6b:0c:b3:36:63:a2:ab:26:09:5f:fa:cc:0d:e0:
                    40:4a:f2:b8:c5:ef:f1:01:27:c9:e5:cc:4d:ae:5e:
                    32:ca:39:8a:09:27:1c:9f:7a:22:6c:6b:8a:77:63:
                    73:ae:43:74:f9:8a:fe:6b:db:1d:09:23:a1:a1:e9:
                    c7:04:47:8d:78:4a:9b:1e:db:73:fa:91:53:e3:f6:
                    68:0f:2d:51:ad:20:85:36:62:ff:bf:c6:bf:8c:4c:
                    3d:19:38:42:62:fe:6b:1f:d6:6c:d6:53:e1:37:9c:
                    b0:20:6b:1e:ee:5c:6c:64:14:97:71:31:0b:65:d4:
                    12:d5:9d:cb:e2:88:8d:58:4f:60:53:aa:3e:ea:85:
                    92:f8:18:8e:fd:bf:86:89:87:bd:33:93:94:10:3d:
                    d7:f8:66:d6:69:3c:15:f4:a2:aa:c4:d5:3a:f8:a8:
                    aa:bc:40:73:25:14:a0:49:52:c2:af:90:65:07:4e:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:73:E2:8B:2F:5C:F6:D1:17:2E:1B:3F:01:35:A7:10:45:1F:46
            X509v3 Authority Key Identifier:
                keyid:42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/3Vlz4osvXPbRFy4bPwE1pxBFH0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:21:14:02:9b:f5:5b:67:40:1d:1f:41:11:ab:1a:54:76:52:
         35:3f:6e:13:e6:da:d1:ad:03:41:b3:ea:9f:db:75:cd:a6:dd:
         33:44:c4:f1:9c:99:8d:84:44:36:07:0e:e0:14:12:71:17:1c:
         64:40:78:98:3e:b3:27:f0:9a:54:3b:33:b9:f9:7e:77:a8:3d:
         52:54:73:1c:a5:57:fc:63:88:37:bf:6f:d5:62:df:68:15:40:
         ce:fa:6c:db:16:b4:2c:80:b0:38:73:e9:db:34:e7:30:0d:9f:
         c3:56:64:aa:5c:bd:20:52:ae:07:52:54:d7:aa:49:10:23:47:
         63:8c:cb:ba:8d:d7:16:04:d2:95:c0:b9:6f:9f:5d:49:7b:76:
         f3:3e:37:68:3e:69:1a:c8:65:70:c5:cc:c2:b1:c4:35:7e:50:
         b1:e2:ab:59:28:fa:63:9d:99:7e:db:bc:8b:23:11:d8:85:c9:
         00:be:09:b6:6c:d8:e2:fa:2a:1c:36:16:ad:25:59:6e:7a:bb:
         18:e9:fe:42:d9:63:ce:ab:3d:6f:c5:a4:8c:6d:3e:8f:58:24:
         e4:87:a7:5c:b6:b3:61:75:f9:40:05:5f:74:79:41:56:7d:25:
         74:85:0d:c2:28:d6:bd:ec:a0:be:8d:70:72:71:8d:75:c0:13:
         82:17:16:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENcSEbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MjQ0N2E3N2Q4MmY1YmEzNTIxNjUzNjE1Yzk4MjA4NGI2MjEwNjk0MB4XDTIyMDMy
OTE1MDcyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ1OTczZTI4YjJm
NWNmNmQxMTcyZTFiM2YwMTM1YTcxMDQ1MWY0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPiib3tbRZ3XNljlGWYxQ41HMYOCeZ4ZO5LO1yycIFGQI6X
CdpE2hj6aRcMZyEL3bBjf7a5LVlXFwsaNkTJAYF2fJNpxmDIbESTBGsMszZjoqsm
CV/6zA3gQEryuMXv8QEnyeXMTa5eMso5igknHJ96Imxrindjc65DdPmK/mvbHQkj
oaHpxwRHjXhKmx7bc/qRU+P2aA8tUa0ghTZi/7/Gv4xMPRk4QmL+ax/WbNZT4Tec
sCBrHu5cbGQUl3ExC2XUEtWdy+KIjVhPYFOqPuqFkvgYjv2/homHvTOTlBA91/hm
1mk8FfSiqsTVOvioqrxAcyUUoElSwq+QZQdOQGkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTdWXPiiy9c9tEXLhs/ATWnEEUfRjAfBgNVHSMEGDAWgBRCRHp32C9bo1IW
U2FcmCCEtiEGlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FrUjZkOWd2VzZOU0ZsTmhYSmdnaExZaEJwUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZjliZWU2LWFkYTYtNDk4MS1iZGQyLTBjMWVjY2YwNGE1ZS8x
LzNWbHo0b3N2WFBiUkZ5NGJQd0UxcHhCRkgwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZjliZWU2LWFkYTYtNDk4MS1iZGQyLTBjMWVjY2YwNGE1ZS8xL1FrUjZkOWd2VzZO
U0ZsTmhYSmdnaExZaEJwUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV4YLjANBgkqhkiG9w0BAQsFAAOC
AQEARCEUApv1W2dAHR9BEasaVHZSNT9uE+ba0a0DQbPqn9t1zabdM0TE8ZyZjYRE
NgcO4BQScRccZEB4mD6zJ/CaVDszufl+d6g9UlRzHKVX/GOIN79v1WLfaBVAzvps
2xa0LICwOHPp2zTnMA2fw1Zkqly9IFKuB1JU16pJECNHY4zLuo3XFgTSlcC5b59d
SXt28z43aD5pGshlcMXMwrHENX5QseKrWSj6Y52Zftu8iyMR2IXJAL4JtmzY4voq
HDYWrSVZbnq7GOn+Qtljzqs9b8WkjG0+j1gk5IenXLazYXX5QAVfdHlBVn0ldIUN
wijWveygvo1wcnGNdcATghcWtA==
-----END CERTIFICATE-----