Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/OECXXKJbLtq-QtVDSD-UVjjPmuw.roa
File:                     OECXXKJbLtq-QtVDSD-UVjjPmuw.roa (raw, json)
Hash identifier:          DMeqhQQ1w24KVfjACwwIY0AqZjYp+uQZyuHD/5BEBGA=
Subject key identifier:   38:40:97:5C:A2:5B:2E:DA:BE:42:D5:43:48:3F:94:56:38:CF:9A:EC
Certificate issuer:       /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial:       08572D94
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/OECXXKJbLtq-QtVDSD-UVjjPmuw.roa
Signing time:             Sat 01 Jan 2022 12:02:10 +0000
ROA not before:           Sat 01 Jan 2022 12:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206499
IP address blocks:        2a04:5b81:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139931028 (0x8572d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
        Validity
            Not Before: Jan  1 12:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3840975ca25b2edabe42d543483f945638cf9aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:a5:8e:17:f5:b0:0c:ce:8d:76:1b:70:e9:
                    a2:55:f7:c7:bd:70:2e:74:a4:ee:02:7e:07:dc:4c:
                    e8:0a:e7:cf:ce:16:9f:7c:fb:82:87:58:e7:5b:67:
                    47:e6:1c:08:7c:1d:5f:d7:20:c5:87:53:ca:94:08:
                    44:54:60:98:f4:18:a8:61:83:b2:95:c6:86:d0:f4:
                    f0:7f:63:f9:bd:70:f6:54:a1:22:af:b6:df:e5:d2:
                    b4:c6:e9:9c:75:13:66:3e:12:29:4b:f6:da:5c:83:
                    dd:a2:ed:17:bb:e8:3f:22:37:e7:13:99:41:82:17:
                    f4:55:bf:7e:79:d7:85:82:8c:a0:fe:6c:f2:c5:d5:
                    10:c3:94:8a:c0:67:59:1e:01:83:7e:41:12:f5:99:
                    1d:1c:28:1a:a4:25:5e:89:88:d6:0e:9f:53:83:59:
                    55:1f:4b:e1:f1:71:00:d6:bf:f6:0a:91:89:dc:1b:
                    74:0a:65:b6:4f:1e:25:9d:bc:10:29:af:e2:c2:c2:
                    c7:1b:de:b0:9a:8d:b4:a1:c9:df:eb:c0:18:91:6d:
                    89:fe:7a:2a:54:9f:9c:bb:81:da:5c:f8:75:26:a4:
                    c5:36:08:46:d1:aa:4d:73:96:e8:c6:a4:ba:05:12:
                    53:41:a5:79:6b:bc:8a:8e:ad:9b:35:b8:be:a4:98:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:40:97:5C:A2:5B:2E:DA:BE:42:D5:43:48:3F:94:56:38:CF:9A:EC
            X509v3 Authority Key Identifier:
                keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/OECXXKJbLtq-QtVDSD-UVjjPmuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5b81:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:77:ad:84:33:f9:c4:9b:05:67:a2:17:03:b8:f4:b0:59:c3:
         db:a6:d1:fd:85:5d:71:6f:d5:14:e3:1c:8d:93:eb:58:85:cc:
         59:27:4a:ec:e3:92:13:ad:f9:5e:bb:ff:55:67:ab:da:8d:f3:
         d6:28:53:37:09:83:62:68:0d:27:57:12:66:cc:40:c4:ca:45:
         55:66:09:9b:43:95:a5:36:8c:ed:bc:e8:fb:1b:fe:51:b1:f9:
         e1:13:37:69:a9:e2:f0:b8:9e:36:ff:a7:53:d9:37:72:9f:f7:
         0a:32:aa:5c:a1:88:3c:3d:eb:24:7a:86:0f:4d:b6:9a:6a:e1:
         e8:34:b7:27:58:0a:34:da:d1:20:d5:cf:b1:03:1e:5e:68:90:
         dd:17:55:e3:82:2e:66:35:dd:0a:67:22:f0:51:5e:22:82:11:
         83:ae:2b:3c:17:ae:4e:8c:df:27:be:4d:c1:ce:22:5c:67:9c:
         1c:57:ef:0f:a9:c0:9c:fd:b4:bf:ee:ae:63:bc:a7:3d:41:d6:
         d5:71:97:86:3b:db:00:2c:e4:30:dd:22:cf:5e:19:56:d3:f4:
         9b:b2:6f:81:69:fb:54:dc:93:79:6d:42:7f:5f:07:52:ea:53:
         29:0e:ec:3d:11:1d:ad:17:d2:c3:ec:fa:99:fd:2b:24:e6:5f:
         3e:40:66:18
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIECFctlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmIzMzBmYWMxNGM2MjE2YTc0ZjVkOTMxNzU0NGI2M2YyYzExOGRjMB4XDTIyMDEw
MTEyMDIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzg0MDk3NWNhMjVi
MmVkYWJlNDJkNTQzNDgzZjk0NTYzOGNmOWFlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsLpY4X9bAMzo12G3DpolX3x71wLnSk7gJ+B9xM6Arnz84W
n3z7godY51tnR+YcCHwdX9cgxYdTypQIRFRgmPQYqGGDspXGhtD08H9j+b1w9lSh
Iq+23+XStMbpnHUTZj4SKUv22lyD3aLtF7voPyI35xOZQYIX9FW/fnnXhYKMoP5s
8sXVEMOUisBnWR4Bg35BEvWZHRwoGqQlXomI1g6fU4NZVR9L4fFxANa/9gqRidwb
dApltk8eJZ28ECmv4sLCxxvesJqNtKHJ3+vAGJFtif56KlSfnLuB2lz4dSakxTYI
RtGqTXOW6MakugUSU0GleWu8io6tmzW4vqSYSgsCAwEAAaOCAg4wggIKMB0GA1Ud
DgQWBBQ4QJdcolsu2r5C1UNIP5RWOM+a7DAfBgNVHSMEGDAWgBT7szD6wUxiFqdP
XZMXVEtj8sEY3DAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtN013LXNGTVloYW5UMTJURjFSTFlfTEJHTncuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzAyLzI4ZTU2Zi1jZjFhLTQzZTAtODRjMy01MmRhOGJlNjQwZjQv
MS9PRUNYWEtKYkx0cS1RdFZEU0QtVVZqalBtdXcucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAy
LzI4ZTU2Zi1jZjFhLTQzZTAtODRjMy01MmRhOGJlNjQwZjQvMS8xLTdNdy1zRk1Z
aGFuVDEyVEYxUkxZX0xCR053LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRbgSAAMA0GCSqGSIb3DQEB
CwUAA4IBAQALd62EM/nEmwVnohcDuPSwWcPbptH9hV1xb9UU4xyNk+tYhcxZJ0rs
45ITrfleu/9VZ6vajfPWKFM3CYNiaA0nVxJmzEDEykVVZgmbQ5WlNoztvOj7G/5R
sfnhEzdpqeLwuJ42/6dT2Tdyn/cKMqpcoYg8PeskeoYPTbaaauHoNLcnWAo02tEg
1c+xAx5eaJDdF1Xjgi5mNd0KZyLwUV4ighGDris8F65OjN8nvk3BziJcZ5wcV+8P
qcCc/bS/7q5jvKc9QdbVcZeGO9sALOQw3SLPXhlW0/Sbsm+BaftU3JN5bUJ/XwdS
6lMpDuw9ER2tF9LD7PqZ/Ssk5l8+QGYY
-----END CERTIFICATE-----