Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/wKJGf_UU-QiPoLJuubKWUKn1tbE.roa
File:                     wKJGf_UU-QiPoLJuubKWUKn1tbE.roa (raw, json)
Hash identifier:          3DBPg5BFPi6kg0/sqJhW1Mg+grfB6Zx2LwYfQvvLm7U=
Subject key identifier:   C0:A2:46:7F:F5:14:F9:08:8F:A0:B2:6E:B9:B2:96:50:A9:F5:B5:B1
Certificate issuer:       /CN=f24903f2bc44c3eb7953bb92cdfb64c194f05b72
Certificate serial:       0AB81FF3
Authority key identifier: F2:49:03:F2:BC:44:C3:EB:79:53:BB:92:CD:FB:64:C1:94:F0:5B:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kkD8rxEw-t5U7uSzftkwZTwW3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/wKJGf_UU-QiPoLJuubKWUKn1tbE.roa
Signing time:             Sat 01 Jan 2022 03:03:01 +0000
ROA not before:           Sat 01 Jan 2022 03:03:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39149
IP address blocks:        195.135.194.0/24 maxlen: 24
                          2001:678:7dc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179838963 (0xab81ff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24903f2bc44c3eb7953bb92cdfb64c194f05b72
        Validity
            Not Before: Jan  1 03:03:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0a2467ff514f9088fa0b26eb9b29650a9f5b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:5f:28:b2:b2:08:63:64:01:dd:b3:cf:ca:
                    1c:11:39:e6:7f:bd:85:80:a3:9e:d1:39:9f:c2:2b:
                    b8:98:89:33:b1:6e:6d:14:0b:b5:c9:f4:88:57:04:
                    8b:ac:2d:b2:29:ff:72:19:71:87:0b:67:aa:5b:8a:
                    43:0b:34:59:f6:33:c9:fb:79:ee:eb:d8:0b:0d:fa:
                    f1:bf:4d:79:c0:c7:16:48:e4:e2:75:9b:ee:1a:98:
                    f2:02:fa:e9:a5:f2:df:3a:af:2b:45:8c:a5:9b:3b:
                    52:73:42:b7:37:c8:b8:f6:3e:ca:bd:0f:e2:d5:51:
                    f3:ef:49:75:35:43:aa:5c:25:3d:b3:ca:35:35:26:
                    82:20:7c:45:5e:38:23:68:c8:a9:9c:b8:e1:9f:46:
                    ba:77:7e:1b:2f:e5:2f:f2:91:7e:6b:09:0c:82:dd:
                    81:ba:15:81:76:d8:c3:74:93:dd:49:36:8b:3b:85:
                    00:65:13:f4:e8:bf:f2:98:23:57:2e:df:cd:6e:ae:
                    02:4c:1b:0a:32:14:76:d5:98:dc:c6:97:87:8b:1e:
                    3f:06:66:10:a9:31:ef:8e:8d:b4:1e:b4:77:08:ed:
                    99:af:cc:f8:a0:c6:51:10:7e:24:3a:59:94:80:e9:
                    99:2a:ae:82:a1:61:40:44:e8:6c:b0:86:13:27:57:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:46:7F:F5:14:F9:08:8F:A0:B2:6E:B9:B2:96:50:A9:F5:B5:B1
            X509v3 Authority Key Identifier:
                keyid:F2:49:03:F2:BC:44:C3:EB:79:53:BB:92:CD:FB:64:C1:94:F0:5B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kkD8rxEw-t5U7uSzftkwZTwW3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/wKJGf_UU-QiPoLJuubKWUKn1tbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/8kkD8rxEw-t5U7uSzftkwZTwW3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.135.194.0/24
                IPv6:
                  2001:678:7dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:ee:97:ae:5c:85:b8:94:e7:a6:ab:ef:ce:27:01:9e:3d:
         3a:37:0d:db:5a:99:48:22:64:e2:26:2c:16:eb:89:6e:39:c2:
         53:75:f6:bf:a2:51:22:d3:cd:0b:fc:41:49:c0:52:ba:4d:ef:
         ae:70:12:15:6e:06:e5:aa:48:d1:0f:35:25:0c:cb:ca:b2:8c:
         ef:af:81:ca:2e:8c:2b:3c:8f:b9:ff:01:d2:2b:bf:ff:2b:87:
         35:2f:0e:5b:24:fd:05:a7:a7:1f:bc:fe:9d:79:f6:2b:7e:67:
         14:14:c4:18:d7:a0:9b:ad:65:7b:6f:61:ab:71:df:dd:3e:1f:
         df:fb:c8:8b:b2:3a:8b:4c:a9:15:ce:81:bf:04:ba:ff:8c:6b:
         11:2c:1f:bd:15:48:dd:24:60:28:5a:fb:bf:75:be:ff:ca:d9:
         4e:cd:d8:76:ae:23:61:4f:35:df:e2:37:44:2e:8e:bb:08:f3:
         6d:5f:d6:76:ff:21:80:7f:58:30:9b:28:43:d7:a7:5c:bd:b6:
         ae:c9:78:b4:2f:14:b9:81:e0:d2:b1:6a:97:d1:0b:b6:b3:22:
         9f:94:12:e3:e4:9e:f0:4d:50:aa:72:4b:b5:f4:2f:b9:0c:33:
         cc:cf:dc:3e:a7:fc:c9:25:59:cb:3f:6c:90:6f:5f:de:2f:6d:
         a7:74:cf:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECrgf8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjQ5MDNmMmJjNDRjM2ViNzk1M2JiOTJjZGZiNjRjMTk0ZjA1YjcyMB4XDTIyMDEw
MTAzMDMwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzBhMjQ2N2ZmNTE0
ZjkwODhmYTBiMjZlYjliMjk2NTBhOWY1YjViMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6vXyiysghjZAHds8/KHBE55n+9hYCjntE5n8IruJiJM7Fu
bRQLtcn0iFcEi6wtsin/chlxhwtnqluKQws0WfYzyft57uvYCw368b9NecDHFkjk
4nWb7hqY8gL66aXy3zqvK0WMpZs7UnNCtzfIuPY+yr0P4tVR8+9JdTVDqlwlPbPK
NTUmgiB8RV44I2jIqZy44Z9Gund+Gy/lL/KRfmsJDILdgboVgXbYw3ST3Uk2izuF
AGUT9Oi/8pgjVy7fzW6uAkwbCjIUdtWY3MaXh4sePwZmEKkx746NtB60dwjtma/M
+KDGURB+JDpZlIDpmSqugqFhQETobLCGEydXgMkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTAokZ/9RT5CI+gsm65spZQqfW1sTAfBgNVHSMEGDAWgBTySQPyvETD63lT
u5LN+2TBlPBbcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzhra0Q4cnhFdy10NVU3dVN6ZnRrd1pUd1czSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvMzUwOTE2LWYzMzItNDk1Yi1iODcyLTJmNGNjZmFiOTM1OS8x
L3dLSkdmX1VVLVFpUG9MSnV1YktXVUtuMXRiRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
MzUwOTE2LWYzMzItNDk1Yi1iODcyLTJmNGNjZmFiOTM1OS8xLzhra0Q4cnhFdy10
NVU3dVN6ZnRrd1pUd1czSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMOHwjAPBAIAAjAJAwcAIAEGeAfc
MA0GCSqGSIb3DQEBCwUAA4IBAQBeMu6XrlyFuJTnpqvvzicBnj06Nw3bWplIImTi
JiwW64luOcJTdfa/olEi080L/EFJwFK6Te+ucBIVbgblqkjRDzUlDMvKsozvr4HK
LowrPI+5/wHSK7//K4c1Lw5bJP0Fp6cfvP6defYrfmcUFMQY16CbrWV7b2Grcd/d
Ph/f+8iLsjqLTKkVzoG/BLr/jGsRLB+9FUjdJGAoWvu/db7/ytlOzdh2riNhTzXf
4jdELo67CPNtX9Z2/yGAf1gwmyhD16dcvbauyXi0LxS5geDSsWqX0Qu2syKflBLj
5J7wTVCqcku19C+5DDPMz9w+p/zJJVnLP2yQb1/eL22ndM8T
-----END CERTIFICATE-----