Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/ts-gGTZCbMY6nE05cMY164sWB38.roa
File:                     ts-gGTZCbMY6nE05cMY164sWB38.roa (raw, json)
Hash identifier:          v184P4qy7G6j4zVvcaHAitCr5I0uK9d+L/PqJYemC2Y=
Subject key identifier:   B6:CF:A0:19:36:42:6C:C6:3A:9C:4D:39:70:C6:35:EB:8B:16:07:7F
Certificate issuer:       /CN=67cc74ddcc584773d4f9d50e3e5b27bb601b8a8b
Certificate serial:       149A
Authority key identifier: 67:CC:74:DD:CC:58:47:73:D4:F9:D5:0E:3E:5B:27:BB:60:1B:8A:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8x03cxYR3PU-dUOPlsnu2Abios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/ts-gGTZCbMY6nE05cMY164sWB38.roa
Signing time:             Thu 21 Apr 2022 17:42:39 +0000
ROA not before:           Thu 21 Apr 2022 17:42:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205684
IP address blocks:        2001:678:d04::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5274 (0x149a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc74ddcc584773d4f9d50e3e5b27bb601b8a8b
        Validity
            Not Before: Apr 21 17:42:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6cfa01936426cc63a9c4d3970c635eb8b16077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:c3:19:80:49:8a:19:61:e7:63:3e:71:b8:
                    65:f1:5a:be:0e:04:98:12:13:f7:31:14:52:96:2b:
                    ad:e2:9d:de:13:ac:c7:6d:a2:b3:db:4c:dd:32:e4:
                    36:e8:af:4a:55:4e:7f:eb:cf:f3:8c:71:13:67:52:
                    7d:48:cb:37:83:bf:47:36:4b:5e:1c:04:98:53:50:
                    2b:fa:ee:4d:f8:a5:dd:a6:2a:ff:fe:bf:21:43:2e:
                    dc:04:d2:70:83:9c:d9:ab:9e:c2:20:dd:8f:6d:88:
                    e6:74:ce:dc:e6:52:6e:f4:8d:f0:2b:bb:fb:43:f4:
                    e4:c5:73:25:e2:d7:56:83:49:98:e7:85:3e:4f:72:
                    45:fd:ee:e4:50:6e:76:41:5b:1c:e0:f1:44:89:66:
                    54:7f:9b:e4:b2:4f:ac:79:b3:2f:48:8b:61:bf:0e:
                    c1:97:5a:34:bb:89:1f:9a:70:6b:d0:76:30:62:5d:
                    1c:c2:50:44:03:05:5c:7b:e0:dc:b5:58:0f:c5:b4:
                    e8:ff:a8:ce:eb:65:94:4d:ed:0e:fb:df:aa:b9:64:
                    90:68:eb:20:6d:1a:56:30:63:6f:75:af:c6:c0:12:
                    1b:4e:80:5e:b2:95:b4:01:f9:9e:9d:e9:2b:23:46:
                    46:44:ae:3d:c2:a9:46:29:e4:d0:ea:63:01:e0:96:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:A0:19:36:42:6C:C6:3A:9C:4D:39:70:C6:35:EB:8B:16:07:7F
            X509v3 Authority Key Identifier:
                keyid:67:CC:74:DD:CC:58:47:73:D4:F9:D5:0E:3E:5B:27:BB:60:1B:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x03cxYR3PU-dUOPlsnu2Abios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/ts-gGTZCbMY6nE05cMY164sWB38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/Z8x03cxYR3PU-dUOPlsnu2Abios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:22:8a:37:2f:40:9c:dd:54:a8:a4:d2:5f:d5:2c:0e:41:38:
         90:df:7f:94:ec:95:94:aa:b7:c8:b7:bb:22:2e:27:7a:f3:70:
         ca:09:76:ce:86:cd:d4:b2:20:f9:96:5f:e9:24:c6:69:81:89:
         c1:49:a7:b6:2e:b6:0d:1a:07:e0:a2:b6:50:31:2d:01:5f:b7:
         b5:3b:7b:e8:4b:a3:39:34:de:3b:e3:3d:0d:39:27:4b:aa:86:
         7a:b6:c1:8f:84:33:8b:b0:b4:c9:86:7c:01:ae:67:c7:ce:60:
         87:6a:05:a8:79:92:ae:c9:58:15:59:70:79:f6:7f:76:b7:e7:
         d5:1a:ce:25:63:c9:1c:54:ea:6f:f9:02:f5:43:55:a0:f3:12:
         14:fd:c0:7f:08:29:85:f1:75:96:32:36:38:ac:24:f8:b3:74:
         8e:a1:f5:6f:38:21:36:1d:f0:94:ea:8d:fb:64:e2:df:26:81:
         c9:c6:9e:05:69:4e:3e:02:66:84:79:32:ec:fe:99:53:9c:2e:
         3f:b7:89:3d:75:68:dc:7d:12:7b:20:91:25:b1:f6:9d:da:b1:
         3a:c8:f3:f7:33:db:16:51:db:ea:be:a7:93:78:8d:63:84:97:
         c1:77:e1:34:27:b0:32:25:fa:f4:00:ec:2c:d2:61:cf:28:01:
         41:81:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----