Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/x2p-ZHuu2nXLBBGmaWXK6GX7b84.roa
File:                     x2p-ZHuu2nXLBBGmaWXK6GX7b84.roa (raw, json)
Hash identifier:          iSi7Q3wKuMy6/F7lhQp0rOse9Lb0KzHnWO5mXfu683g=
Subject key identifier:   C7:6A:7E:64:7B:AE:DA:75:CB:04:11:A6:69:65:CA:E8:65:FB:6F:CE
Certificate issuer:       /CN=c34c13ecf26ac702f768c99110bf662e99139794
Certificate serial:       0183A3D6135D1207B7851C1E08DA50B04D48
Authority key identifier: C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/x2p-ZHuu2nXLBBGmaWXK6GX7b84.roa
Signing time:             Tue 04 Oct 2022 16:30:59 +0000
ROA not before:           Tue 04 Oct 2022 16:30:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209261
IP address blocks:        2a10:1cc0::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a3:d6:13:5d:12:07:b7:85:1c:1e:08:da:50:b0:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34c13ecf26ac702f768c99110bf662e99139794
        Validity
            Not Before: Oct  4 16:30:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c76a7e647baeda75cb0411a66965cae865fb6fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:d7:a0:b5:cf:b4:60:13:12:ca:3a:e5:ca:
                    fb:a6:b8:98:86:87:95:1e:f7:98:1f:f8:63:5e:6c:
                    56:42:f1:e6:ef:04:e1:67:2c:a5:45:91:31:e6:f1:
                    2f:26:1b:e3:9a:5a:8d:76:4e:a3:01:51:7e:ce:b5:
                    1e:5d:a6:53:fe:37:da:91:23:3a:b8:1f:d1:5e:2f:
                    81:a6:6f:c6:2c:87:62:cc:e5:e4:a8:39:8f:f6:b1:
                    5c:97:6e:f4:a7:f1:06:27:1e:59:b2:8b:57:f9:a7:
                    ed:25:30:bf:bc:75:1c:93:58:e1:ff:ee:d9:fb:62:
                    35:70:fa:04:cf:b5:33:be:c5:77:8a:f4:c9:2b:39:
                    9d:d0:fd:80:9e:9a:93:ce:37:6d:6d:02:a0:f3:3f:
                    67:f2:eb:ae:28:c5:a5:34:29:f6:a5:4d:87:13:3f:
                    86:0d:51:74:09:17:15:e3:52:1f:d4:2f:b1:ae:70:
                    72:18:78:90:9a:31:b4:3b:7f:bf:6d:39:a3:e5:b1:
                    72:b7:c0:ca:e2:ca:3f:ab:52:ea:b1:90:d8:17:2f:
                    d6:ae:b0:84:78:0f:be:22:9d:e3:8d:c3:ec:11:18:
                    b9:01:1c:43:98:57:04:f3:5b:e0:61:15:8f:2d:cd:
                    27:d8:52:6e:71:4d:e9:7c:c0:5d:f6:73:1c:ea:53:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:7E:64:7B:AE:DA:75:CB:04:11:A6:69:65:CA:E8:65:FB:6F:CE
            X509v3 Authority Key Identifier:
                keyid:C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/x2p-ZHuu2nXLBBGmaWXK6GX7b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:1cc0::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:53:a0:c9:44:a5:29:4a:8b:c9:72:c5:97:46:5a:81:10:fd:
         ff:28:14:5a:f8:b4:25:3f:18:2c:6e:a9:42:4f:7d:88:8a:bf:
         17:75:ee:5f:2c:e8:04:f3:b5:c7:6a:69:65:12:a8:99:75:c0:
         0f:f6:85:32:be:b2:04:5b:3f:3b:d7:0a:b9:31:b3:3d:ce:4a:
         e0:40:45:c2:30:94:d2:e9:e9:33:d8:e5:22:12:d5:77:1c:84:
         e4:99:20:27:33:39:4c:06:01:a2:f8:75:4e:b3:50:53:06:91:
         2b:1b:03:56:e9:de:53:c5:b6:47:f7:4d:7a:a2:55:87:f6:ad:
         30:5f:0d:88:80:6e:ba:86:6b:16:6b:07:80:6d:a4:85:6c:d2:
         88:6b:28:16:d7:85:1b:8c:b8:8a:f7:6a:90:1d:00:14:55:79:
         1f:eb:2b:71:a1:39:b3:51:74:0b:33:b7:ac:34:9c:40:de:bc:
         c0:f8:c0:95:72:8f:f7:a0:6f:08:85:de:47:2d:7e:e8:35:fd:
         80:1b:f8:e0:73:b2:9d:c2:7d:12:e6:15:09:83:b1:92:a2:6c:
         d9:12:e2:17:ee:c9:ae:8b:7a:6f:74:0c:6e:5b:35:2f:4c:89:
         3c:ce:4f:9c:c6:d5:c4:ed:57:dd:fd:8d:1f:6f:4c:63:15:0b:
         4c:0b:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----