Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa
File:                     323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (raw, json)
Hash identifier:          WQDn601J9qMVqlk9uVVUEkO80TmAvIi8EjtYIk2viUY=
Subject key identifier:   0D:D6:D1:5E:03:3C:5A:3A:C8:B6:A9:E8:BF:F4:E7:33:8B:FB:D8:7B
Certificate issuer:       /CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
Certificate serial:       7F777F917F7CB32A9AAA0E00F4447B9498EEB7EC
Authority key identifier: 22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer
Subject info access:      rsync://rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa
Signing time:             Tue 23 Aug 2022 20:17:33 +0000
ROA not before:           Tue 23 Aug 2022 20:12:33 +0000
ROA not after:            Tue 22 Aug 2023 20:17:33 +0000
asID:                     57782
IP address blocks:        2001:67c:1190:babe::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:7f:91:7f:7c:b3:2a:9a:aa:0e:00:f4:44:7b:94:98:ee:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
        Validity
            Not Before: Aug 23 20:12:33 2022 GMT
            Not After : Aug 22 20:17:33 2023 GMT
        Subject: CN=0DD6D15E033C5A3AC8B6A9E8BFF4E7338BFBD87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:ad:90:38:aa:ad:8c:80:32:b4:3c:bb:df:
                    be:6a:0d:fc:1e:fb:11:5f:aa:38:66:5d:93:8f:6a:
                    ef:5c:9d:8e:26:9c:ee:38:b9:a5:9f:19:35:ba:a4:
                    44:17:28:78:ca:fb:44:ef:93:75:98:51:45:cb:a9:
                    90:02:9f:3a:9b:4e:09:50:4d:85:2b:3d:b3:29:25:
                    99:39:07:83:89:20:bb:6d:8b:45:09:6d:cf:c1:ed:
                    9e:dc:bc:74:6a:d7:d6:5b:74:15:56:43:71:55:85:
                    88:31:75:e0:8b:c9:c5:41:a8:32:bb:14:0a:3b:e1:
                    37:86:43:58:e4:64:4a:4f:d9:44:9a:30:17:70:08:
                    9c:41:c6:82:90:4b:ac:87:2f:13:3e:33:a9:07:d2:
                    d3:4e:0f:7d:ce:03:19:16:3e:d6:b1:70:56:2f:e4:
                    36:54:44:f5:e7:33:2d:d6:aa:89:52:bf:39:98:5e:
                    6f:4a:d4:af:d5:39:c7:ef:02:2c:38:3a:0f:ae:be:
                    fe:a9:9f:99:05:99:6f:41:b0:06:2a:55:db:fa:b0:
                    93:80:dd:f0:dd:cc:25:ab:09:70:39:25:3c:35:3e:
                    06:50:af:20:5e:c9:b5:3e:6c:68:fd:e6:53:94:4f:
                    aa:97:05:6f:92:fc:89:7a:19:99:85:1a:26:03:cb:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:D1:5E:03:3C:5A:3A:C8:B6:A9:E8:BF:F4:E7:33:8B:FB:D8:7B
            X509v3 Authority Key Identifier:
                keyid:22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/cynthia/2/22AB6906F1375C1930CF9EA6C4F3C90039F5ED4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190:babe::/64

    Signature Algorithm: sha256WithRSAEncryption
         80:39:a3:84:7d:e0:c2:17:e7:3e:08:38:e9:7d:e2:b3:ff:1e:
         24:c3:ee:4b:b2:59:c2:07:c9:0c:93:61:c6:39:d5:b4:a1:c6:
         1a:c1:9c:1b:98:56:19:c5:d5:f6:f6:43:e6:ff:3e:d1:df:ff:
         d9:f6:53:5a:b3:80:d9:a6:be:54:95:43:07:ed:46:bf:8f:19:
         1b:86:c2:fa:2d:d0:9a:8d:63:ff:9b:dc:26:fa:0d:7f:cc:33:
         d4:82:ca:0c:0c:b2:66:1c:71:ff:79:14:f3:94:ed:82:ee:b6:
         63:11:b0:21:10:3c:31:55:f5:f5:b0:87:9e:27:98:a1:22:c9:
         e4:5c:e7:eb:a7:1d:e5:4c:9c:3e:de:c0:f8:51:a8:65:fa:80:
         31:14:dc:87:cb:47:15:63:a3:2f:f6:0b:48:8e:2e:45:db:ec:
         25:b4:38:0f:ca:b7:53:c6:2f:8e:f5:15:bd:1f:25:c9:e3:5d:
         39:39:c0:f4:1f:ea:c8:ee:06:42:09:32:7f:a8:48:fa:40:76:
         02:6e:19:cc:2c:7b:d7:fd:f4:7e:96:63:3d:4f:9c:13:1e:df:
         7f:b9:44:e9:aa:7d:5f:2f:98:4c:0a:7d:4f:03:16:11:b2:04:
         4e:5a:78:05:bc:46:52:da:cd:59:cd:80:ca:87:96:d4:c2:6c:
         af:48:6e:e9
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUf3d/kX98syqaqg4A9ER7lJjut+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJhYjY5MDZmMTM3NWMxOTMwY2Y5ZWE2YzRmM2M5MDAz
OWY1ZWQ0YzAeFw0yMjA4MjMyMDEyMzNaFw0yMzA4MjIyMDE3MzNaMDMxMTAvBgNV
BAMTKDBERDZEMTVFMDMzQzVBM0FDOEI2QTlFOEJGRjRFNzMzOEJGQkQ4N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSY62QOKqtjIAytDy7375qDfwe
+xFfqjhmXZOPau9cnY4mnO44uaWfGTW6pEQXKHjK+0Tvk3WYUUXLqZACnzqbTglQ
TYUrPbMpJZk5B4OJILtti0UJbc/B7Z7cvHRq19ZbdBVWQ3FVhYgxdeCLycVBqDK7
FAo74TeGQ1jkZEpP2USaMBdwCJxBxoKQS6yHLxM+M6kH0tNOD33OAxkWPtaxcFYv
5DZURPXnMy3WqolSvzmYXm9K1K/VOcfvAiw4Og+uvv6pn5kFmW9BsAYqVdv6sJOA
3fDdzCWrCXA5JTw1PgZQryBeybU+bGj95lOUT6qXBW+S/Il6GZmFGiYDy0jhAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUDdbRXgM8WjrItqnov/TnM4v72HswHwYDVR0j
BBgwFoAUIqtpBvE3XBkwz56mxPPJADn17UwwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5xcy5udS9yZXBvL2N5bnRoaWEvMi8y
MkFCNjkwNkYxMzc1QzE5MzBDRjlFQTZDNEYzQzkwMDM5RjVFRDRDLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvSXF0cEJ2RTNYQmt3ejU2bXhQUEpBRG4xN1V3LmNl
cjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxyc3luYzovL3Jwa2kucXMu
bnUvcmVwby9jeW50aGlhLzIvMzIzMDMwMzEzYTM2Mzc2MzNhMzEzMTM5MzAzYTYy
NjE2MjY1M2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIwMzUzNzM3MzgzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIw
CwMJACABBnwRkLq+MA0GCSqGSIb3DQEBCwUAA4IBAQCAOaOEfeDCF+c+CDjpfeKz
/x4kw+5LslnCB8kMk2HGOdW0ocYawZwbmFYZxdX29kPm/z7R3//Z9lNas4DZpr5U
lUMH7Ua/jxkbhsL6LdCajWP/m9wm+g1/zDPUgsoMDLJmHHH/eRTzlO2C7rZjEbAh
EDwxVfX1sIeeJ5ihIsnkXOfrpx3lTJw+3sD4Uahl+oAxFNyHy0cVY6Mv9gtIji5F
2+wltDgPyrdTxi+O9RW9HyXJ4105OcD0H+rI7gZCCTJ/qEj6QHYCbhnMLHvX/fR+
lmM9T5wTHt9/uUTpqn1fL5hMCn1PAxYRsgROWngFvEZS2s1ZzYDKh5bUwmyvSG7p
-----END CERTIFICATE-----