Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/_MmG8TlHY_4qBLGn_qm4l8ZFJqY.roa
File:                     _MmG8TlHY_4qBLGn_qm4l8ZFJqY.roa (raw, json)
Hash identifier:          MtVqbyIzmWUJiF2ff//obk+SFo8gr1+r5fILx8ObSGQ=
Subject key identifier:   FC:C9:86:F1:39:47:63:FE:2A:04:B1:A7:FE:A9:B8:97:C6:45:26:A6
Certificate issuer:       /CN=807381e45b14527deb7b5beca5df665d74cbd4ea
Certificate serial:       09CC6609
Authority key identifier: 80:73:81:E4:5B:14:52:7D:EB:7B:5B:EC:A5:DF:66:5D:74:CB:D4:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHOB5FsUUn3re1vspd9mXXTL1Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/_MmG8TlHY_4qBLGn_qm4l8ZFJqY.roa
Signing time:             Sat 01 Jan 2022 16:06:30 +0000
ROA not before:           Sat 01 Jan 2022 16:06:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2119
IP address blocks:        2001:67c:19e4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164390409 (0x9cc6609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807381e45b14527deb7b5beca5df665d74cbd4ea
        Validity
            Not Before: Jan  1 16:06:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcc986f1394763fe2a04b1a7fea9b897c64526a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:bd:e3:b2:e1:67:cc:e1:27:e4:ee:15:59:
                    6f:ac:00:89:90:58:30:3e:8f:df:66:5d:da:48:a8:
                    ad:e8:5b:23:92:da:82:a3:44:ef:8d:65:75:6e:06:
                    bc:6e:38:c2:5c:b4:3d:33:95:3a:ec:c2:66:a3:0c:
                    80:c6:78:bc:92:28:fa:98:e2:00:87:28:74:88:18:
                    1f:aa:ac:b8:b0:69:84:ec:8b:f3:05:10:73:8e:dd:
                    51:8d:50:0b:97:ce:3f:56:e8:62:76:d2:21:ea:e2:
                    5e:57:35:f1:1a:05:4a:07:e7:6e:43:44:7b:c2:c0:
                    ef:2b:65:d1:8a:ee:11:b9:a6:14:48:59:76:46:76:
                    02:77:a1:60:88:8d:6a:65:ea:d6:be:fd:72:b2:6f:
                    e5:8e:b7:7b:d6:61:80:7f:0d:16:75:45:4d:3b:4b:
                    ab:b4:7f:b0:3e:9d:2e:cc:18:ba:34:c2:56:51:44:
                    a9:31:62:55:fc:ae:29:0c:ab:83:71:71:98:9e:97:
                    95:64:a1:4e:43:d5:0b:81:4b:e3:38:6e:4a:31:35:
                    c8:fb:bd:70:9c:9a:fd:68:d0:63:eb:d8:9b:72:b2:
                    31:a8:c4:56:8e:02:0a:3f:16:e2:64:51:55:db:55:
                    fa:2b:0c:d0:8c:34:84:a5:a1:27:ed:08:53:40:90:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C9:86:F1:39:47:63:FE:2A:04:B1:A7:FE:A9:B8:97:C6:45:26:A6
            X509v3 Authority Key Identifier:
                keyid:80:73:81:E4:5B:14:52:7D:EB:7B:5B:EC:A5:DF:66:5D:74:CB:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHOB5FsUUn3re1vspd9mXXTL1Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/_MmG8TlHY_4qBLGn_qm4l8ZFJqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/gHOB5FsUUn3re1vspd9mXXTL1Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:19e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:95:7a:95:b8:54:66:1b:65:ed:ed:58:4d:1c:98:17:e8:
         44:c1:a6:0a:8e:a7:32:9d:11:22:98:c8:c3:c4:0b:4f:56:2d:
         32:d5:38:d5:69:f8:3c:bd:1f:bc:0c:11:08:60:5f:4b:53:af:
         c7:9d:04:4c:05:28:b9:e7:53:74:a3:2b:a2:89:4d:d2:67:f6:
         97:d0:d9:a0:b5:bb:d4:18:55:8f:91:a3:0a:42:93:2d:40:f2:
         9f:bd:ef:84:99:d5:0f:28:49:c3:bb:8f:d0:cf:e9:c0:5f:a5:
         80:d2:05:b6:fd:23:e2:e6:13:3a:37:09:25:02:c4:e9:3e:57:
         4e:90:eb:f0:50:8f:52:69:df:a6:db:1e:31:84:17:d6:97:db:
         26:d9:16:28:0b:bd:6c:9d:be:16:6c:97:23:45:de:f1:88:3b:
         e8:f9:ce:d2:9d:2e:3f:c5:6f:78:d2:fe:92:a6:71:40:9f:3b:
         9b:01:78:4d:2f:f0:61:14:7b:d1:f5:ad:e7:c1:f0:3e:7b:48:
         1b:6f:61:d3:b3:32:fb:39:d1:9f:dd:87:02:06:b5:28:98:f5:
         aa:e6:a5:b7:17:3c:9b:32:87:9a:0b:54:67:ad:14:c1:f9:26:
         fa:94:b6:58:02:f1:e7:ce:09:d4:9f:3a:a5:c9:52:d5:b1:d9:
         f1:9b:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----