Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/eiuOletLmCuFLuWe2CLoFqZxS8E.roa
File:                     eiuOletLmCuFLuWe2CLoFqZxS8E.roa (raw, json)
Hash identifier:          ktyjwyt2bExrELToo47Fx544BRHP+CNQd3lLgmEVncY=
Subject key identifier:   7A:2B:8E:95:EB:4B:98:2B:85:2E:E5:9E:D8:22:E8:16:A6:71:4B:C1
Certificate issuer:       /CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Certificate serial:       0185719E89DC7BCB5FE7DEF1E391BA73E379
Authority key identifier: C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/eiuOletLmCuFLuWe2CLoFqZxS8E.roa
Signing time:             Mon 02 Jan 2023 08:34:53 +0000
ROA not before:           Mon 02 Jan 2023 08:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210829
IP address blocks:        146.255.190.0/24 maxlen: 24
                          2a11:ad80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:89:dc:7b:cb:5f:e7:de:f1:e3:91:ba:73:e3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
        Validity
            Not Before: Jan  2 08:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a2b8e95eb4b982b852ee59ed822e816a6714bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:29:36:00:36:e6:ed:51:4e:0c:8b:54:61:17:
                    39:f3:ba:bf:6d:19:17:62:21:1c:79:d3:33:fd:e8:
                    2c:22:76:45:96:33:7e:28:98:52:50:ce:27:cf:83:
                    0f:28:35:1a:73:b4:2f:17:fb:5a:48:0d:ef:bb:47:
                    02:f4:65:c9:4c:38:4d:8e:2c:41:c4:ae:e0:70:a5:
                    65:62:6b:7f:0b:be:9f:e6:b1:cb:18:26:3e:10:be:
                    7c:b4:1d:2f:d5:17:2c:1b:c0:0c:e1:ba:f3:52:11:
                    e5:ee:94:a8:86:a7:1d:7c:96:53:19:68:9a:79:d1:
                    4f:7c:02:ea:22:98:7f:9d:d2:15:07:2e:28:e1:4a:
                    8c:60:5d:4c:07:68:28:b4:a6:72:81:21:51:9b:b9:
                    33:f9:45:70:6d:1e:b6:f4:71:3f:0e:c7:65:1f:bc:
                    9f:d3:4e:2a:9e:37:e8:85:08:18:4b:ea:1c:23:52:
                    94:d2:43:f0:a7:74:93:62:05:80:7b:fe:dd:73:75:
                    66:f7:3b:db:6b:14:6e:5e:35:c4:82:c6:32:d0:82:
                    97:86:89:0f:12:2d:64:ec:e4:5d:c4:aa:02:4c:09:
                    1f:34:27:4a:a4:56:fa:2d:4c:58:65:eb:aa:41:c0:
                    19:e4:8a:86:2e:d0:bc:4a:a1:4b:3a:2b:21:35:4c:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2B:8E:95:EB:4B:98:2B:85:2E:E5:9E:D8:22:E8:16:A6:71:4B:C1
            X509v3 Authority Key Identifier:
                keyid:C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/eiuOletLmCuFLuWe2CLoFqZxS8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.190.0/24
                IPv6:
                  2a11:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:92:cd:fc:65:61:4d:b2:08:bd:93:50:2e:3d:a6:c0:a8:c8:
         69:98:f2:ac:92:ab:3c:86:47:48:95:9d:aa:66:4b:e9:67:f5:
         a9:fb:22:34:ac:8c:f9:4a:b6:ed:5c:67:ca:11:4c:1b:03:4e:
         da:cd:12:0c:07:03:de:73:c0:c0:a0:92:10:90:71:29:df:39:
         57:fd:79:33:f5:c7:c1:db:fb:4a:7d:f3:d4:6d:4c:5a:1b:90:
         3f:0a:f1:e4:a9:9a:f1:ab:88:f7:9d:d5:f3:e7:ff:2a:64:bb:
         e1:15:8e:36:5c:6f:35:ff:50:61:00:db:24:d5:e6:fb:87:8e:
         0c:27:ed:20:2d:56:0f:04:3b:3a:bd:b9:65:1f:80:a7:ce:8a:
         8b:2f:3c:58:f7:10:ce:f7:80:fe:d5:93:0e:af:43:49:ba:29:
         f2:47:fb:4f:16:54:53:93:a5:c2:0e:c0:cc:d4:61:07:d7:91:
         7e:cd:d2:60:89:a2:57:0f:13:2d:73:ed:29:2e:54:b2:55:f9:
         04:9e:67:f2:5c:e7:6f:aa:08:3a:18:02:88:06:94:35:2b:a7:
         a4:0b:2a:78:bf:49:b0:91:7e:dd:56:35:b7:c2:23:d7:c6:45:
         e5:f4:ec:26:bb:1f:03:e1:6e:01:da:25:ff:d3:b5:c2:c6:cd:
         8e:d4:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----