Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/1-kgghMkSVSqrn3vX7VkgyqiDyG8.roa
File:                     1-kgghMkSVSqrn3vX7VkgyqiDyG8.roa (raw, json)
Hash identifier:          UwjG2FL3lGHrG7PWd0JtfV/GL2yZzOvWBHmn8vJfpBI=
Subject key identifier:   FA:48:20:84:C9:12:55:2A:AB:9F:7B:D7:ED:59:20:CA:A8:83:C8:6F
Certificate issuer:       /CN=a5c79d32e094c70c592f7ce7f161b2050d26867c
Certificate serial:       044823D1
Authority key identifier: A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/1-kgghMkSVSqrn3vX7VkgyqiDyG8.roa
Signing time:             Sat 01 Jan 2022 15:02:39 +0000
ROA not before:           Sat 01 Jan 2022 15:02:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42202
IP address blocks:        185.206.188.0/22 maxlen: 23
                          2a0b:1740::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71836625 (0x44823d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c79d32e094c70c592f7ce7f161b2050d26867c
        Validity
            Not Before: Jan  1 15:02:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa482084c912552aab9f7bd7ed5920caa883c86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:5f:66:30:ca:f0:ec:e8:89:d2:07:65:04:
                    40:aa:5f:7e:2a:67:49:51:fc:08:b1:1c:f6:9f:03:
                    82:46:b3:48:dc:8b:de:ac:38:1b:92:4e:21:a9:68:
                    26:ff:78:6a:31:9d:4a:0f:c5:64:4e:bd:55:52:84:
                    50:25:a0:e2:ae:de:8d:ff:85:3a:b2:e8:f4:52:fd:
                    20:e3:56:fb:e1:7e:37:50:53:f1:73:08:23:46:84:
                    c5:c9:6c:94:1b:26:67:30:83:6f:38:66:8a:a3:92:
                    50:6d:3b:52:19:90:1e:45:b6:5d:6a:85:53:1c:fe:
                    87:ec:5c:82:47:f3:72:0b:e3:08:50:af:f4:f0:82:
                    a4:b6:58:c2:af:92:c1:8f:28:fc:32:f3:87:ab:27:
                    34:48:bb:c9:5a:af:18:29:56:b4:3a:a9:94:7a:1f:
                    61:79:1b:f6:09:47:5c:6f:59:65:7f:eb:50:ac:f6:
                    58:a2:68:f7:fc:f2:84:a2:0c:01:13:38:43:7c:7b:
                    b0:2d:93:74:72:ed:22:05:8f:1b:a7:da:08:d1:90:
                    5b:28:ee:36:4a:3f:f6:25:3d:0d:45:78:f6:96:08:
                    4d:78:ed:6d:c8:18:d9:b7:60:63:a6:d3:76:d4:ae:
                    91:de:c5:0c:af:20:a5:55:05:81:18:68:43:5b:68:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:48:20:84:C9:12:55:2A:AB:9F:7B:D7:ED:59:20:CA:A8:83:C8:6F
            X509v3 Authority Key Identifier:
                keyid:A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/1-kgghMkSVSqrn3vX7VkgyqiDyG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.188.0/22
                IPv6:
                  2a0b:1740::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:32:53:21:fe:1c:53:00:44:57:2d:63:40:23:f2:22:89:
         e0:1a:fb:65:ad:68:8e:33:62:70:f8:3d:9e:be:ad:51:d9:22:
         df:f1:57:b4:d0:2f:21:41:38:18:22:b4:82:dd:0c:47:df:2f:
         b6:5d:f5:e5:38:d1:ef:a2:ad:3a:53:71:67:77:91:d5:f5:c3:
         4b:06:44:f7:75:52:e8:8b:3d:90:76:57:f9:0e:b9:04:31:9a:
         91:21:fb:7d:ee:2b:2f:e4:5d:41:60:25:7d:be:a3:b0:79:2a:
         05:a8:33:9f:af:a8:e2:05:7b:18:ff:23:32:99:27:b1:83:88:
         93:48:78:19:80:48:6b:57:d3:f4:33:1b:96:b5:0f:6b:59:db:
         42:20:5c:9e:b1:d2:28:7c:61:65:f6:5f:c8:0a:9f:b5:a6:41:
         d7:25:0f:07:95:bc:2e:52:79:f8:58:d1:da:f0:9e:9a:f6:5f:
         f9:2d:c9:d8:60:f5:80:20:5e:e2:3e:c8:96:d6:41:fb:fb:80:
         78:11:94:af:c1:f3:b5:ad:35:22:59:ff:ff:f1:69:6e:14:a8:
         6f:9a:04:d2:7c:46:e6:ce:29:3b:39:a3:e3:5e:07:1c:30:8a:
         17:be:0c:30:82:ab:3f:fa:af:48:ea:12:1c:51:df:3f:4c:2a:
         fe:df:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----