Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/yEDxFK-U0NM7v4LK2HsV4FfbLfI.roa
File:                     yEDxFK-U0NM7v4LK2HsV4FfbLfI.roa (raw, json)
Hash identifier:          e9ktgrSr74Ed4npw8oRdowKhDs/mt1HPb1CSDC84apM=
Subject key identifier:   C8:40:F1:14:AF:94:D0:D3:3B:BF:82:CA:D8:7B:15:E0:57:DB:2D:F2
Certificate issuer:       /CN=a182e24a4524c18e916e7d636be2d11c8e497c67
Certificate serial:       01856F797A3DD6DE27A23D60EC6FCC8B8B3B
Authority key identifier: A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/yEDxFK-U0NM7v4LK2HsV4FfbLfI.roa
Signing time:             Sun 01 Jan 2023 22:35:10 +0000
ROA not before:           Sun 01 Jan 2023 22:35:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206429
IP address blocks:        185.252.152.0/22 maxlen: 22
                          2a0c:28c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:7a:3d:d6:de:27:a2:3d:60:ec:6f:cc:8b:8b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a182e24a4524c18e916e7d636be2d11c8e497c67
        Validity
            Not Before: Jan  1 22:35:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c840f114af94d0d33bbf82cad87b15e057db2df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:0a:51:01:19:4b:42:a8:e0:0d:49:6f:45:
                    b9:7f:8d:e2:a6:11:b8:c1:c1:12:76:53:aa:97:a3:
                    e1:f5:1e:b2:a6:e9:4a:22:47:22:d0:f7:7b:1b:b1:
                    93:a7:96:14:a9:c3:7d:70:e6:36:f8:f4:a4:e5:28:
                    2a:f0:61:e8:53:45:86:d7:fc:86:51:30:c0:43:96:
                    0a:3b:d4:16:64:fb:ef:17:6a:59:b3:6a:ba:9f:25:
                    56:ab:33:c9:5c:93:e2:69:2e:fc:2d:d4:4f:cb:72:
                    27:0e:94:47:ac:a3:cf:65:18:cb:9a:ba:3d:5e:9b:
                    d1:3a:2e:1d:46:cf:3a:15:7e:4b:cd:26:78:92:db:
                    c8:d7:0d:ee:45:0a:83:dc:41:74:59:db:f6:9b:26:
                    28:df:1e:65:fb:9b:6e:b3:07:ac:21:3e:eb:c5:f9:
                    e7:f0:ee:14:a8:2d:ca:7e:d0:66:6c:6b:af:66:24:
                    2d:d9:8c:a9:d1:dc:2d:2e:c2:94:f8:f9:f3:c0:fa:
                    9a:76:54:f7:da:06:8e:c2:40:a0:9f:1b:33:22:53:
                    5b:35:b4:bf:4e:1c:e9:d1:6e:2a:44:dd:ff:06:86:
                    70:ef:8d:fc:6b:1b:5d:af:ea:13:29:a7:8c:60:fa:
                    32:7e:46:1a:24:20:78:cf:63:7b:e1:b5:d1:a8:2c:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:40:F1:14:AF:94:D0:D3:3B:BF:82:CA:D8:7B:15:E0:57:DB:2D:F2
            X509v3 Authority Key Identifier:
                keyid:A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/yEDxFK-U0NM7v4LK2HsV4FfbLfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.152.0/22
                IPv6:
                  2a0c:28c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:22:e2:0b:46:00:23:ac:cd:85:fa:08:ba:26:70:ec:77:46:
         97:be:a0:ee:b4:60:3b:0f:04:5d:54:af:7b:f2:3e:1d:9f:8d:
         2b:9a:77:f2:7c:37:e0:5e:1d:99:37:2d:ab:ee:37:84:30:d4:
         81:07:b6:00:d7:9f:7c:71:e9:93:4c:3d:fa:a4:7d:e7:13:a8:
         99:23:86:56:33:51:47:cb:a8:96:af:8c:a4:e8:4b:bb:1a:86:
         c4:d8:d1:29:fe:90:ed:f2:5f:33:7d:f5:63:bc:af:ad:76:eb:
         d9:51:ed:b5:c9:7c:0a:1a:58:74:f7:4d:ff:e9:e8:20:0d:92:
         84:c8:1b:38:f9:a6:0b:08:c9:22:27:98:44:fb:72:3b:28:56:
         68:58:56:0b:88:8d:e9:f8:66:99:3a:d1:02:99:f1:67:07:95:
         cd:75:a3:bf:55:4d:ff:67:2c:e9:f6:2c:d2:ee:4a:59:11:13:
         96:47:4c:3e:ee:ba:98:2e:84:6e:44:67:47:83:a8:b9:c9:11:
         7a:0f:a9:6b:c3:35:a4:23:71:66:4e:e3:08:01:fa:76:41:f2:
         b3:52:2f:34:bf:1a:30:12:4e:22:65:c0:41:0c:27:63:6e:3c:
         4a:9d:e1:4b:fe:a3:f7:d3:f4:f6:7d:d6:28:c8:06:06:df:5b:
         e5:db:d1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----