Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/NFrm4xtewveVIk_Iyw8AcnlEQ8c.roa
File:                     NFrm4xtewveVIk_Iyw8AcnlEQ8c.roa (raw, json)
Hash identifier:          7lL/tdrt67iSEjoer3PVZQ1GrbrNWaPYZe1yyKb4h40=
Subject key identifier:   34:5A:E6:E3:1B:5E:C2:F7:95:22:4F:C8:CB:0F:00:72:79:44:43:C7
Certificate issuer:       /CN=794d984a7666ea024ca65f4082801d02f11f9980
Certificate serial:       02126941
Authority key identifier: 79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/NFrm4xtewveVIk_Iyw8AcnlEQ8c.roa
Signing time:             Tue 08 Mar 2022 15:50:41 +0000
ROA not before:           Tue 08 Mar 2022 15:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33438
IP address blocks:        185.69.88.0/22 maxlen: 23
                          2a04:a8c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34761025 (0x2126941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794d984a7666ea024ca65f4082801d02f11f9980
        Validity
            Not Before: Mar  8 15:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=345ae6e31b5ec2f795224fc8cb0f0072794443c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:99:ce:30:db:4f:2c:2a:ef:70:95:10:65:
                    90:a5:a2:1e:fc:bd:94:69:2f:92:a2:34:71:15:84:
                    41:a8:f4:23:4e:bc:23:b9:b2:0e:bd:92:4e:37:d6:
                    29:c1:e4:71:0c:70:bd:e9:d1:af:94:9b:3d:d4:1f:
                    83:73:1d:da:ec:e8:95:bd:a8:82:ae:55:b8:1d:3d:
                    57:f4:5a:f6:01:e9:20:9a:81:06:ea:c8:43:43:87:
                    1f:dc:19:08:ba:24:b8:4a:4b:f8:b9:5f:79:a7:95:
                    e7:e0:1a:c1:18:d1:6b:06:62:20:c9:9d:fb:44:5b:
                    92:a8:0a:90:2b:9d:ee:d0:12:5c:81:76:2d:73:79:
                    ae:31:5c:df:4b:f0:79:d4:53:af:67:15:04:15:6b:
                    2c:07:a3:85:54:5c:98:ad:9a:3f:9b:fa:a7:a0:eb:
                    68:92:4b:00:54:94:09:28:5d:a0:4a:23:0a:4b:98:
                    0f:9e:ee:c4:54:9d:be:cb:46:01:d3:f6:80:2b:87:
                    fc:96:6f:3b:61:40:c3:04:c2:36:9d:c1:62:d0:f3:
                    83:81:c3:63:74:a8:e7:48:ea:cb:f2:ac:8a:bf:b9:
                    f1:a5:72:24:7b:11:bb:69:51:31:e9:0e:41:1d:91:
                    3e:ed:ad:f0:c0:2f:4a:12:0c:4e:4f:37:fb:6d:45:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:E6:E3:1B:5E:C2:F7:95:22:4F:C8:CB:0F:00:72:79:44:43:C7
            X509v3 Authority Key Identifier:
                keyid:79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/NFrm4xtewveVIk_Iyw8AcnlEQ8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/eU2YSnZm6gJMpl9AgoAdAvEfmYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.88.0/22
                IPv6:
                  2a04:a8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:20:2d:1a:8d:c4:61:1c:d6:85:ba:a8:3b:15:e2:82:61:
         da:f5:34:0a:18:ad:1d:93:ac:87:78:a6:b0:7f:7e:7a:18:f4:
         cd:34:d0:bb:e1:da:fc:66:10:4c:ba:57:d1:a6:8b:26:a6:7b:
         10:08:93:fd:2f:d8:4d:cc:fc:c0:61:3d:5c:9e:5f:df:52:7c:
         03:67:60:9c:a5:7f:56:78:94:3d:25:fb:c7:e4:ee:8f:f8:17:
         f7:5e:95:6d:5b:45:1f:2a:03:92:3d:c5:1e:dc:1d:da:f4:58:
         17:79:c3:fa:db:bd:ce:90:a4:62:7e:2e:dc:f6:01:a8:e0:90:
         41:4d:1f:69:94:06:db:93:a4:92:bc:56:bf:bb:1f:70:4d:9b:
         34:d9:41:43:87:e9:50:ad:2f:0c:97:3d:f1:c4:29:f1:db:d4:
         0e:aa:e1:92:b3:ad:26:99:ab:db:d3:7b:2f:d6:9e:8a:d9:5c:
         17:6b:bb:a3:74:ec:d8:87:0f:a6:29:f3:1e:d6:20:ce:96:2f:
         32:f7:dd:67:41:5a:5d:eb:4e:92:7d:27:c7:fd:7c:e7:40:a6:
         ed:dd:f1:72:c1:c7:62:11:d9:1f:32:b3:d4:79:c2:a5:94:b9:
         5b:19:1f:81:bf:8f:fd:44:c8:7b:aa:1b:4d:d9:ea:f8:6c:41:
         2c:15:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----