Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/UL8laOBuUZdNr4QHNcHDx5EZOfk.roa
File:                     UL8laOBuUZdNr4QHNcHDx5EZOfk.roa (raw, json)
Hash identifier:          40qlmVr1stvl+iXDtaYddbFFFKge5amfic53MfWh94I=
Subject key identifier:   50:BF:25:68:E0:6E:51:97:4D:AF:84:07:35:C1:C3:C7:91:19:39:F9
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       018CCA2A199C546CCCE59858095ADD241087
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/UL8laOBuUZdNr4QHNcHDx5EZOfk.roa
Signing time:             Tue 02 Jan 2024 12:33:25 +0000
ROA not before:           Tue 02 Jan 2024 12:33:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206605
IP address blocks:        185.181.212.0/22 maxlen: 22
                          2a0a:de80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:19:9c:54:6c:cc:e5:98:58:09:5a:dd:24:10:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jan  2 12:33:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=50bf2568e06e51974daf840735c1c3c7911939f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:e5:e1:ec:98:d8:0b:16:cc:a8:9c:54:1a:
                    58:3c:8b:08:09:77:29:6b:22:7b:73:a2:aa:a5:96:
                    06:4b:75:84:c0:3b:4b:e6:dd:80:3d:b2:68:db:23:
                    cf:89:e7:6d:66:28:93:3e:4e:26:fb:0b:68:9a:63:
                    30:bf:24:dc:72:ee:4a:e5:e4:ce:23:47:ef:f1:d7:
                    e2:76:54:85:41:32:e0:5b:c3:70:4f:71:08:eb:7f:
                    0d:a6:c4:e8:50:fc:f3:7b:60:46:6d:1b:c6:7f:48:
                    2f:9c:71:45:83:50:a6:2d:45:0c:ac:b1:a8:c8:50:
                    1a:0e:68:7a:a9:81:f5:b5:50:45:97:0c:d5:0f:07:
                    1e:e6:a8:c4:a4:e3:ed:55:2b:e2:0d:8c:86:b3:cc:
                    cd:70:c7:dc:04:d1:e0:96:21:ae:1b:86:6d:bf:fa:
                    c2:4a:89:f6:aa:53:33:9f:25:fd:17:05:36:b0:5e:
                    cb:c4:51:45:e9:57:e8:64:69:41:43:79:dc:10:42:
                    a4:44:85:c7:e4:99:52:3e:8c:48:4e:49:f0:aa:83:
                    20:86:15:bd:6d:b4:25:8a:f6:d3:20:d2:3c:f2:76:
                    76:bb:68:6a:87:2d:5e:c1:74:3d:d7:e7:89:fc:f5:
                    cb:43:33:d8:cf:b7:e7:62:59:8f:40:54:ab:0f:3b:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:25:68:E0:6E:51:97:4D:AF:84:07:35:C1:C3:C7:91:19:39:F9
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/UL8laOBuUZdNr4QHNcHDx5EZOfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.212.0/22
                IPv6:
                  2a0a:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:d6:f3:cb:9c:66:3e:d0:ef:a9:37:e7:23:35:36:5f:a5:
         a5:78:95:89:c5:a5:3b:50:f1:b3:17:77:3e:fc:12:de:6b:9f:
         e4:cd:6a:c5:52:4a:71:48:21:a9:a3:66:86:71:38:8d:6a:ed:
         6a:6a:fb:34:78:62:f5:06:01:02:5c:65:42:4c:5f:61:cd:cd:
         2d:bc:6d:3f:e2:50:bb:8a:d0:60:07:91:3e:64:ea:ff:77:77:
         3f:57:b9:c7:5d:49:2d:d5:fd:b8:31:4b:16:71:8e:7b:62:ae:
         d1:15:66:3b:2e:b3:4c:5b:a0:83:4e:58:7e:5a:ee:2b:26:32:
         e8:c2:87:c2:01:ae:60:bd:34:ba:3a:ee:96:c3:83:e8:f4:1f:
         77:70:7a:53:e3:e4:d9:7d:45:f3:91:74:bc:99:ce:c6:ba:09:
         3a:97:54:8a:71:4d:8a:1f:c5:9b:c8:90:c3:aa:a2:9d:76:76:
         65:33:e9:35:8b:71:02:d4:1f:43:be:2a:1e:42:b3:5e:2d:8e:
         d6:d6:55:b6:07:6a:3b:a4:4b:96:4a:74:95:8e:96:59:4f:8b:
         23:f2:85:ed:cc:37:98:9d:9a:ac:5c:2e:ec:81:ed:6f:c7:32:
         59:72:e2:83:6d:db:a2:e6:5b:7f:60:12:c1:a7:25:45:0e:74:
         d6:53:e2:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKKhmcVGzM5ZhYCVrdJBCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy
MTFhMDEwHhcNMjQwMTAyMTIzMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJmMjU2OGUwNmU1MTk3NGRhZjg0MDczNWMxYzNjNzkxMTkzOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoDl4eyY2AsWzKicVBpYPIsICXcp
ayJ7c6KqpZYGS3WEwDtL5t2APbJo2yPPiedtZiiTPk4m+wtommMwvyTccu5K5eTO
I0fv8dfidlSFQTLgW8NwT3EI638NpsToUPzze2BGbRvGf0gvnHFFg1CmLUUMrLGo
yFAaDmh6qYH1tVBFlwzVDwce5qjEpOPtVSviDYyGs8zNcMfcBNHgliGuG4Ztv/rC
Son2qlMznyX9FwU2sF7LxFFF6VfoZGlBQ3ncEEKkRIXH5JlSPoxITknwqoMghhW9
bbQlivbTINI88nZ2u2hqhy1ewXQ91+eJ/PXLQzPYz7fnYlmPQFSrDztPDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFC/JWjgblGXTa+EBzXBw8eRGTn5MB8GA1UdIwQY
MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt
MTc0NDFiZmU1NmNmLzEvVUw4bGFPQnVVWmROcjRRSE5jSER4NUVaT2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm
LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubXUMA0E
AgACMAcDBQAqCt6AMA0GCSqGSIb3DQEBCwUAA4IBAQBPvtbzy5xmPtDvqTfnIzU2
X6WleJWJxaU7UPGzF3c+/BLea5/kzWrFUkpxSCGpo2aGcTiNau1qavs0eGL1BgEC
XGVCTF9hzc0tvG0/4lC7itBgB5E+ZOr/d3c/V7nHXUkt1f24MUsWcY57Yq7RFWY7
LrNMW6CDTlh+Wu4rJjLowofCAa5gvTS6Ou6Ww4Po9B93cHpT4+TZfUXzkXS8mc7G
ugk6l1SKcU2KH8WbyJDDqqKddnZlM+k1i3EC1B9DvioeQrNeLY7W1lW2B2o7pEuW
SnSVjpZZT4sj8oXtzDeYnZqsXC7sge1vxzJZcuKDbdui5lt/YBLBpyVFDnTWU+IP
-----END CERTIFICATE-----