Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/Ovi1IhZObQGRShlWfOOMn_h4inI.roa
File:                     Ovi1IhZObQGRShlWfOOMn_h4inI.roa (raw, json)
Hash identifier:          mvf3JwECbx4gzqKbGFrqyVYI2yEGt/j61Vl7M1yIra4=
Subject key identifier:   3A:F8:B5:22:16:4E:6D:01:91:4A:19:56:7C:E3:8C:9F:F8:78:8A:72
Certificate issuer:       /CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Certificate serial:       030C3CCE
Authority key identifier: 72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/Ovi1IhZObQGRShlWfOOMn_h4inI.roa
Signing time:             Sat 01 Jan 2022 08:59:14 +0000
ROA not before:           Sat 01 Jan 2022 08:59:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50329
IP address blocks:        2a10:4a85::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51133646 (0x30c3cce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
        Validity
            Not Before: Jan  1 08:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3af8b522164e6d01914a19567ce38c9ff8788a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:cb:c1:35:10:76:80:a5:37:70:48:3f:4d:
                    40:55:58:e7:a6:7d:8b:a7:bd:3e:ae:df:07:c7:a6:
                    68:a6:92:45:81:3b:0d:fc:2b:4c:a9:b1:30:78:52:
                    be:49:bf:e9:61:50:9b:d6:1c:6d:09:d5:95:e8:ec:
                    1e:23:92:d1:f6:7a:25:13:41:8e:c2:b9:7d:95:87:
                    38:72:f2:78:68:d2:d5:19:a6:54:7c:a5:67:83:c4:
                    04:90:4a:b4:2f:a0:5e:47:31:b4:0a:51:d3:bd:eb:
                    c0:09:8c:51:fd:50:72:b0:e0:13:9c:a4:88:5a:81:
                    01:d0:36:d5:09:27:4a:2c:bb:a0:53:97:10:e8:3f:
                    2d:40:a7:6a:81:2e:3e:b2:17:99:41:d2:86:e5:4e:
                    d2:3c:6f:46:40:9b:a9:03:e9:b8:3d:0e:b2:64:71:
                    fc:52:97:7c:d5:f7:07:16:58:3b:8f:1e:15:bf:9f:
                    1f:dd:ab:88:21:62:b6:53:17:f1:a9:13:00:0e:67:
                    9e:d5:73:d9:fb:2b:1f:7d:90:be:04:47:1b:d4:b5:
                    1b:97:1b:f9:1e:97:cc:a0:36:49:09:0c:bf:3e:f7:
                    11:7c:d3:fa:ed:85:32:5d:b5:30:b2:2d:77:6b:67:
                    f3:85:c1:d5:27:a4:36:d2:ac:e6:b7:9a:1e:b4:54:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:B5:22:16:4E:6D:01:91:4A:19:56:7C:E3:8C:9F:F8:78:8A:72
            X509v3 Authority Key Identifier:
                keyid:72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/Ovi1IhZObQGRShlWfOOMn_h4inI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/cuT3uSKcXWWDiAhAtwyWpQj9B_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4a85::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:cf:e0:73:75:c8:12:d0:2d:d7:6e:78:56:13:98:a4:68:
         1a:e5:8f:ea:3b:f1:fa:c1:a5:24:0a:e3:d2:2f:b0:e8:43:37:
         51:a7:e6:80:4c:68:b4:f5:70:ca:03:fc:ac:2c:d6:dd:38:f2:
         3f:53:26:3f:0b:f7:3a:8c:ca:a8:e4:55:4d:43:dc:58:4b:ce:
         a4:cb:5a:c3:4a:e7:d6:81:e3:af:bd:24:21:96:c1:2d:24:a3:
         27:da:e6:ae:02:3b:3d:3f:a0:47:2b:0a:ae:ed:38:fc:06:d8:
         f6:a6:8b:a2:25:67:f0:78:3e:9f:2e:fe:2f:6c:b7:77:f0:a6:
         84:c8:9e:3a:15:37:a0:7c:6b:7f:02:b7:2a:35:30:cd:98:65:
         0b:04:44:f3:7b:04:e7:51:ee:0a:11:ff:44:16:22:85:92:3b:
         2b:8a:a8:7f:25:c5:1c:b9:0d:b2:81:9d:19:c4:e1:e5:e8:32:
         05:6c:dd:1a:42:57:99:f2:56:83:32:ac:e8:4a:40:3c:dc:ed:
         e4:9b:97:bd:e3:54:93:a3:6d:48:ae:92:03:00:a8:cb:0a:45:
         77:78:5a:38:86:e8:9d:53:19:e7:ad:ac:71:3d:b2:b4:f8:1c:
         ea:5b:d9:57:29:19:5b:17:e8:06:0a:9c:0e:37:ec:22:63:5f:
         78:39:6a:71
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAww8zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmU0ZjdiOTIyOWM1ZDY1ODM4ODA4NDBiNzBjOTZhNTA4ZmQwN2ZlMB4XDTIyMDEw
MTA4NTkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2FmOGI1MjIxNjRl
NmQwMTkxNGExOTU2N2NlMzhjOWZmODc4OGE3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOEy8E1EHaApTdwSD9NQFVY56Z9i6e9Pq7fB8emaKaSRYE7
DfwrTKmxMHhSvkm/6WFQm9YcbQnVlejsHiOS0fZ6JRNBjsK5fZWHOHLyeGjS1Rmm
VHylZ4PEBJBKtC+gXkcxtApR073rwAmMUf1QcrDgE5ykiFqBAdA21QknSiy7oFOX
EOg/LUCnaoEuPrIXmUHShuVO0jxvRkCbqQPpuD0OsmRx/FKXfNX3BxZYO48eFb+f
H92riCFitlMX8akTAA5nntVz2fsrH32QvgRHG9S1G5cb+R6XzKA2SQkMvz73EXzT
+u2FMl21MLItd2tn84XB1SekNtKs5reaHrRUih8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQ6+LUiFk5tAZFKGVZ844yf+HiKcjAfBgNVHSMEGDAWgBRy5Pe5IpxdZYOI
CEC3DJalCP0H/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2N1VDN1U0tjWFdXRGlBaEF0d3lXcFFqOUJfNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvNmIyMjZhLTk0YjQtNDExMS04YjU3LWM4MWRkY2I0NTRiYy8x
L092aTFJaFpPYlFHUlNobFdmT09Nbl9oNGluSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
NmIyMjZhLTk0YjQtNDExMS04YjU3LWM4MWRkY2I0NTRiYy8xL2N1VDN1U0tjWFdX
RGlBaEF0d3lXcFFqOUJfNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoQSoUwDQYJKoZIhvcNAQELBQAD
ggEBAIChz+BzdcgS0C3XbnhWE5ikaBrlj+o78frBpSQK49IvsOhDN1Gn5oBMaLT1
cMoD/Kws1t048j9TJj8L9zqMyqjkVU1D3FhLzqTLWsNK59aB46+9JCGWwS0koyfa
5q4COz0/oEcrCq7tOPwG2Pami6IlZ/B4Pp8u/i9st3fwpoTInjoVN6B8a38Ctyo1
MM2YZQsERPN7BOdR7goR/0QWIoWSOyuKqH8lxRy5DbKBnRnE4eXoMgVs3RpCV5ny
VoMyrOhKQDzc7eSbl73jVJOjbUiukgMAqMsKRXd4WjiG6J1TGeetrHE9srT4HOpb
2VcpGVsX6AYKnA437CJjX3g5anE=
-----END CERTIFICATE-----