Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/WiqDDKWCTpomcCfxKI8KXP_b-3Q.roa
File:                     WiqDDKWCTpomcCfxKI8KXP_b-3Q.roa (raw, json)
Hash identifier:          6hgXuMCX+uv2z43CPIfrk8kC8T0PhiqPqD0XZcFGjC0=
Subject key identifier:   5A:2A:83:0C:A5:82:4E:9A:26:70:27:F1:28:8F:0A:5C:FF:DB:FB:74
Certificate issuer:       /CN=c7d81e65ea61bc8f1da9b6092ddc5910acb9eb48
Certificate serial:       0C8B0F94
Authority key identifier: C7:D8:1E:65:EA:61:BC:8F:1D:A9:B6:09:2D:DC:59:10:AC:B9:EB:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9geZephvI8dqbYJLdxZEKy560g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/WiqDDKWCTpomcCfxKI8KXP_b-3Q.roa
Signing time:             Sat 01 Jan 2022 08:00:59 +0000
ROA not before:           Sat 01 Jan 2022 08:00:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205423
IP address blocks:        2001:678:518::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210440084 (0xc8b0f94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7d81e65ea61bc8f1da9b6092ddc5910acb9eb48
        Validity
            Not Before: Jan  1 08:00:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a2a830ca5824e9a267027f1288f0a5cffdbfb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:10:74:b9:57:8a:b2:56:28:30:19:27:73:
                    6d:0b:06:72:b9:c1:e4:f0:33:46:3e:bc:c9:82:6a:
                    06:f7:d7:82:ca:5d:c0:86:29:bd:9b:ab:b4:d3:d2:
                    05:e4:b5:a4:77:24:4b:a9:6f:d7:bc:df:be:84:97:
                    77:04:47:cd:7b:d5:d3:e9:f3:ef:6f:85:5f:76:56:
                    95:46:a6:69:6c:03:f8:2a:15:b7:c4:60:a5:d9:60:
                    9e:64:7b:6a:ed:90:3c:c3:5d:13:e7:94:50:84:f3:
                    85:93:61:f7:83:17:2e:2b:25:84:23:ef:9b:a6:20:
                    0e:11:d4:19:0d:5d:50:65:05:76:f0:c7:45:bf:90:
                    0d:93:5e:c8:6b:ad:a2:c5:be:25:5b:02:49:c3:f3:
                    fe:7c:19:08:8c:e1:08:0e:a7:0d:61:7e:24:90:ab:
                    33:46:a1:bb:c6:ba:f6:96:fd:5e:fd:72:d2:7a:47:
                    4b:ed:90:96:3f:fd:e8:e6:f6:0e:58:fc:79:14:0a:
                    05:37:c6:b5:33:7a:70:7b:b5:84:0d:99:22:ab:6d:
                    56:93:ba:48:7b:fe:3a:fa:e5:da:16:b3:d5:92:cb:
                    fa:93:7a:ec:2d:b6:30:71:78:ed:0f:8a:d4:77:e3:
                    22:e7:b5:ef:5e:3e:2d:f9:32:70:3b:c1:76:c8:35:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2A:83:0C:A5:82:4E:9A:26:70:27:F1:28:8F:0A:5C:FF:DB:FB:74
            X509v3 Authority Key Identifier:
                keyid:C7:D8:1E:65:EA:61:BC:8F:1D:A9:B6:09:2D:DC:59:10:AC:B9:EB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9geZephvI8dqbYJLdxZEKy560g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/WiqDDKWCTpomcCfxKI8KXP_b-3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/x9geZephvI8dqbYJLdxZEKy560g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:518::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:63:2a:a5:00:04:f4:cb:b2:f4:c3:3c:88:73:53:10:e9:05:
         14:f6:50:e3:b4:ae:b9:11:28:70:a5:8d:22:3d:fc:60:64:29:
         e5:2d:ee:e9:f8:ba:21:62:c1:9b:b0:49:18:26:10:7d:58:f9:
         a6:98:da:d7:92:b1:d5:5f:41:4d:73:f4:f1:7a:a6:6c:f8:54:
         e7:a6:b8:d6:fc:c5:ab:30:0a:5c:4c:cc:2a:2d:0f:30:75:77:
         56:1f:a9:f7:ab:a8:17:cc:ff:31:d4:5b:10:b4:d6:e0:8e:2f:
         4f:df:ef:b6:2d:d2:15:b7:39:8a:15:38:a2:43:23:67:d0:47:
         31:f1:92:53:55:dc:be:f4:bf:dc:f9:4c:5e:7f:e6:1c:d0:1c:
         19:d6:3a:87:cf:90:de:c7:16:ce:01:99:76:30:d3:0d:3b:5b:
         8c:11:ad:76:cb:53:72:51:6c:73:e8:36:fd:00:c0:01:08:7c:
         84:8f:35:0a:2c:2a:50:6f:6c:03:ad:80:bd:40:dd:5f:8d:e1:
         38:6d:60:8a:c4:ba:d8:af:fe:33:68:7b:bd:3e:98:11:ec:35:
         68:24:5d:83:ef:d2:41:57:24:b2:4d:6e:ed:fa:9a:ef:2e:7d:
         64:e4:df:ac:23:d3:3c:4c:58:79:7d:b8:c2:52:17:11:ff:4d:
         d4:c2:4b:05
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEDIsPlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
N2Q4MWU2NWVhNjFiYzhmMWRhOWI2MDkyZGRjNTkxMGFjYjllYjQ4MB4XDTIyMDEw
MTA4MDA1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWEyYTgzMGNhNTgy
NGU5YTI2NzAyN2YxMjg4ZjBhNWNmZmRiZmI3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRTEHS5V4qyVigwGSdzbQsGcrnB5PAzRj68yYJqBvfXgspd
wIYpvZurtNPSBeS1pHckS6lv17zfvoSXdwRHzXvV0+nz72+FX3ZWlUamaWwD+CoV
t8RgpdlgnmR7au2QPMNdE+eUUITzhZNh94MXLislhCPvm6YgDhHUGQ1dUGUFdvDH
Rb+QDZNeyGutosW+JVsCScPz/nwZCIzhCA6nDWF+JJCrM0ahu8a69pb9Xv1y0npH
S+2Qlj/96Ob2Dlj8eRQKBTfGtTN6cHu1hA2ZIqttVpO6SHv+Ovrl2haz1ZLL+pN6
7C22MHF47Q+K1HfjIue1714+LfkycDvBdsg14Y8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRaKoMMpYJOmiZwJ/Eojwpc/9v7dDAfBgNVHSMEGDAWgBTH2B5l6mG8jx2p
tgkt3FkQrLnrSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3g5Z2VaZXBodkk4ZHFiWUpMZHhaRUt5NTYwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvZDMxN2NhLTM5NjEtNGZlMC1iZGU4LWY3YzUwMTQxOGU1Ni8x
L1dpcURES1dDVHBvbWNDZnhLSThLWFBfYi0zUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
ZDMxN2NhLTM5NjEtNGZlMC1iZGU4LWY3YzUwMTQxOGU1Ni8xL3g5Z2VaZXBodkk4
ZHFiWUpMZHhaRUt5NTYwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngFGDANBgkqhkiG9w0BAQsF
AAOCAQEAqmMqpQAE9Muy9MM8iHNTEOkFFPZQ47SuuREocKWNIj38YGQp5S3u6fi6
IWLBm7BJGCYQfVj5ppja15Kx1V9BTXP08XqmbPhU56a41vzFqzAKXEzMKi0PMHV3
Vh+p96uoF8z/MdRbELTW4I4vT9/vti3SFbc5ihU4okMjZ9BHMfGSU1XcvvS/3PlM
Xn/mHNAcGdY6h8+Q3scWzgGZdjDTDTtbjBGtdstTclFsc+g2/QDAAQh8hI81Ciwq
UG9sA62AvUDdX43hOG1gisS62K/+M2h7vT6YEew1aCRdg+/SQVcksk1u7fqa7y59
ZOTfrCPTPExYeX24wlIXEf9N1MJLBQ==
-----END CERTIFICATE-----