Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/0KI_NS59ZOap2f_STfYllTmznvw.roa
File:                     0KI_NS59ZOap2f_STfYllTmznvw.roa (raw, json)
Hash identifier:          3RWdONgSjZeUAtPEzAxCzByqJGv9pXuZDIwDYzwssm0=
Subject key identifier:   D0:A2:3F:35:2E:7D:64:E6:A9:D9:FF:D2:4D:F6:25:95:39:B3:9E:FC
Certificate issuer:       /CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
Certificate serial:       01DE0662
Authority key identifier: 26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/0KI_NS59ZOap2f_STfYllTmznvw.roa
Signing time:             Sat 28 May 2022 14:11:14 +0000
ROA not before:           Sat 28 May 2022 14:11:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203020
IP address blocks:        178.212.226.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31327842 (0x1de0662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
        Validity
            Not Before: May 28 14:11:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0a23f352e7d64e6a9d9ffd24df6259539b39efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:20:78:39:c1:ff:f2:f3:45:c0:3f:c0:ac:
                    7a:fc:1c:64:a0:81:38:b7:25:cd:ce:da:65:11:88:
                    0e:56:db:cf:2b:b0:8d:da:c5:c2:fc:6a:ac:7c:79:
                    14:b8:86:5f:ea:10:77:1d:f2:7b:f5:57:e4:5c:71:
                    97:42:36:a0:04:5b:ec:80:11:27:f9:e8:9c:e4:28:
                    65:b3:a2:64:dc:7b:86:cc:fb:fc:b6:de:23:2e:96:
                    42:ab:92:23:47:52:49:ef:e9:11:75:0f:f2:73:bc:
                    fe:8d:d8:ac:b1:cc:b9:0d:15:42:80:af:4c:ca:1c:
                    42:f1:d3:2c:ca:6d:18:a1:44:6f:11:0d:97:61:d6:
                    ff:d3:fe:49:f4:c4:26:0c:e2:66:52:2f:08:25:e5:
                    40:5f:11:68:18:ca:ef:bf:45:3a:cb:8b:37:0d:2d:
                    ab:c2:5b:e2:99:1f:45:39:7f:ee:18:21:07:0e:9c:
                    9b:25:b8:6e:32:fb:e1:9b:2d:84:f2:94:75:6d:e8:
                    2c:d3:48:c1:9b:87:ff:4a:58:51:1b:79:c6:f9:27:
                    71:d0:4f:57:ed:1d:09:04:e4:e7:7e:01:e0:52:b8:
                    2c:57:d6:92:a2:9d:d0:31:79:f8:3e:81:d0:46:58:
                    07:2d:24:3e:57:4c:62:cc:b0:ba:3a:6e:df:ca:aa:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:3F:35:2E:7D:64:E6:A9:D9:FF:D2:4D:F6:25:95:39:B3:9E:FC
            X509v3 Authority Key Identifier:
                keyid:26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/0KI_NS59ZOap2f_STfYllTmznvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:45:57:36:2f:35:da:ba:24:6c:cc:c9:94:3b:61:c1:f0:
         c1:ed:72:4b:32:74:a5:fe:67:30:41:df:c6:a6:74:bc:71:55:
         32:fe:9c:6a:c7:68:dc:1f:8f:ea:5b:63:b1:1f:34:ea:bf:33:
         dd:03:ef:e2:7d:0f:0d:02:1c:83:1f:7c:46:85:b9:f0:c2:ad:
         aa:ac:09:b0:ad:82:6e:0c:67:03:67:53:d4:73:54:b0:1e:30:
         12:83:d7:6c:22:2b:13:1e:c9:86:ab:05:23:8a:61:20:40:07:
         8b:9d:1e:d8:23:20:e9:c4:fe:d3:f3:3c:20:c3:52:c2:36:dc:
         e1:d4:3c:61:bd:50:99:2d:e8:fd:ab:38:39:9e:9b:92:d0:d6:
         00:52:2c:ff:6b:72:97:91:f7:c3:3b:cf:6e:90:d8:fe:08:bb:
         fd:16:1f:ba:0d:67:e0:79:d8:2f:13:a3:ee:8c:94:8b:e3:ab:
         97:4d:0d:4a:59:c8:f5:e2:a2:92:d0:a7:8f:a9:54:7e:22:3a:
         62:58:f6:bf:99:6c:da:29:d7:2d:c6:b9:46:82:1b:f2:86:d2:
         31:99:8b:16:9f:7e:dc:5d:33:1f:89:8b:31:aa:5c:f0:29:a4:
         5a:79:79:8c:21:6d:84:87:d3:d4:7a:17:b5:a6:70:a0:b2:1d:
         58:83:4a:90
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAd4GYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NmVjZDgzNDhlOTgyOGQwNDNjMjE1ODJhMmM1MTU4YmY0ZDg5NTBkMB4XDTIyMDUy
ODE0MTExNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBhMjNmMzUyZTdk
NjRlNmE5ZDlmZmQyNGRmNjI1OTUzOWIzOWVmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGbIHg5wf/y80XAP8CsevwcZKCBOLclzc7aZRGIDlbbzyuw
jdrFwvxqrHx5FLiGX+oQdx3ye/VX5Fxxl0I2oARb7IARJ/nonOQoZbOiZNx7hsz7
/LbeIy6WQquSI0dSSe/pEXUP8nO8/o3YrLHMuQ0VQoCvTMocQvHTLMptGKFEbxEN
l2HW/9P+SfTEJgziZlIvCCXlQF8RaBjK779FOsuLNw0tq8Jb4pkfRTl/7hghBw6c
myW4bjL74ZsthPKUdW3oLNNIwZuH/0pYURt5xvkncdBPV+0dCQTk534B4FK4LFfW
kqKd0DF5+D6B0EZYBy0kPldMYsywujpu38qqDRkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTQoj81Ln1k5qnZ/9JN9iWVObOe/DAfBgNVHSMEGDAWgBQm7Ng0jpgo0EPC
FYKixRWL9NiVDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p1ellOSTZZS05CRHdoV0Nvc1VWaV9UWWxRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvMWNmMTY4LTlkMDItNDgxOC05MGZhLWNmMWE4OGQyMjdhYy8x
LzBLSV9OUzU5Wk9hcDJmX1NUZllsbFRtem52dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
MWNmMTY4LTlkMDItNDgxOC05MGZhLWNmMWE4OGQyMjdhYy8xL0p1ellOSTZZS05C
RHdoV0Nvc1VWaV9UWWxRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLU4jANBgkqhkiG9w0BAQsFAAOC
AQEAka5FVzYvNdq6JGzMyZQ7YcHwwe1ySzJ0pf5nMEHfxqZ0vHFVMv6casdo3B+P
6ltjsR806r8z3QPv4n0PDQIcgx98RoW58MKtqqwJsK2CbgxnA2dT1HNUsB4wEoPX
bCIrEx7JhqsFI4phIEAHi50e2CMg6cT+0/M8IMNSwjbc4dQ8Yb1QmS3o/as4OZ6b
ktDWAFIs/2tyl5H3wzvPbpDY/gi7/RYfug1n4HnYLxOj7oyUi+Orl00NSlnI9eKi
ktCnj6lUfiI6Ylj2v5ls2inXLca5RoIb8obSMZmLFp9+3F0zH4mLMapc8CmkWnl5
jCFthIfT1HoXtaZwoLIdWINKkA==
-----END CERTIFICATE-----