Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/vXKsVV--DdvnWWMylEga79-oq8Y.roa
File:                     vXKsVV--DdvnWWMylEga79-oq8Y.roa (raw, json)
Hash identifier:          wHj9isstcS5ORoX01aXohyOJqq+o5UG8na9OZIi87S0=
Subject key identifier:   BD:72:AC:55:5F:BE:0D:DB:E7:59:63:32:94:48:1A:EF:DF:A8:AB:C6
Certificate issuer:       /CN=ceac024ffd8df4918741f754c0db218ee7b2748d
Certificate serial:       01857139E718E253185A5E676AFB53C5E9A5
Authority key identifier: CE:AC:02:4F:FD:8D:F4:91:87:41:F7:54:C0:DB:21:8E:E7:B2:74:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqwCT_2N9JGHQfdUwNshjueydI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/vXKsVV--DdvnWWMylEga79-oq8Y.roa
Signing time:             Mon 02 Jan 2023 06:44:58 +0000
ROA not before:           Mon 02 Jan 2023 06:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:d600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:e7:18:e2:53:18:5a:5e:67:6a:fb:53:c5:e9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceac024ffd8df4918741f754c0db218ee7b2748d
        Validity
            Not Before: Jan  2 06:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd72ac555fbe0ddbe759633294481aefdfa8abc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:09:73:e3:48:77:e1:9d:de:ce:82:88:dc:
                    3d:65:dc:15:fd:6a:30:f0:ed:5d:fe:46:33:bc:2a:
                    42:c6:90:a7:e5:3a:d6:2e:1c:1e:f9:67:24:c0:e6:
                    17:43:30:b7:36:15:86:5e:b1:e2:89:56:88:b8:ee:
                    b3:c3:7c:25:3f:36:e0:26:19:c4:0b:06:62:38:0d:
                    44:81:39:4a:e4:17:31:53:81:65:f5:f5:b6:98:12:
                    27:a7:68:73:b8:a7:ec:40:15:0a:a9:e9:06:e2:12:
                    a6:27:3b:f7:7c:21:f2:54:49:5d:28:a8:5f:f4:33:
                    a4:5f:f6:6e:8e:25:3a:bc:bb:60:ef:da:5a:f8:ff:
                    45:14:3d:e7:7b:45:f4:69:f3:bc:9d:0b:a0:65:b3:
                    6c:93:e4:9c:b3:96:3f:d6:ca:a4:de:69:29:07:84:
                    7c:fb:08:cf:a9:1a:6d:13:40:e9:f5:27:d0:4e:50:
                    41:c7:17:98:08:e9:99:19:30:72:3c:ea:11:c5:2d:
                    31:a3:b7:de:00:92:3b:21:db:e7:01:a6:2e:6c:c4:
                    39:e7:02:40:7c:88:4c:ed:fb:d3:5e:f1:e6:ba:94:
                    7e:50:40:4c:16:ea:11:32:43:b6:c6:0d:13:b8:f2:
                    a2:70:22:9e:e0:ac:9f:5e:f9:5c:83:1a:c2:a4:b0:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:AC:55:5F:BE:0D:DB:E7:59:63:32:94:48:1A:EF:DF:A8:AB:C6
            X509v3 Authority Key Identifier:
                keyid:CE:AC:02:4F:FD:8D:F4:91:87:41:F7:54:C0:DB:21:8E:E7:B2:74:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqwCT_2N9JGHQfdUwNshjueydI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/vXKsVV--DdvnWWMylEga79-oq8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/zqwCT_2N9JGHQfdUwNshjueydI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:d600::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:2a:38:22:7f:2a:5a:ac:3c:a3:8e:8b:21:45:a6:92:2e:
         ae:f8:49:39:78:e3:88:a0:b6:d5:45:5c:3f:e5:b4:94:5b:59:
         f5:26:04:20:2f:9b:30:ca:b4:ce:2e:5d:4a:40:6d:75:61:f6:
         93:31:a1:16:a2:58:77:09:ae:74:37:67:7e:27:01:93:08:a0:
         19:b4:5c:62:c5:14:4a:52:ab:55:e3:46:c4:88:16:96:1b:1c:
         55:53:0c:bf:74:9b:33:b6:d3:31:d4:55:a8:3d:8b:a8:de:e2:
         cf:29:a6:fa:23:96:a9:66:81:ce:dc:7b:53:b7:87:49:47:ef:
         85:7d:47:52:ba:a1:e5:0d:48:2c:a4:8b:d5:cf:5a:02:dc:1b:
         31:17:57:ad:ef:b7:9f:e5:f1:14:df:c4:49:f3:55:56:a5:53:
         fa:80:67:9f:04:35:0a:d5:5d:2c:17:e7:c7:26:31:9c:af:51:
         85:7d:58:24:2b:a9:59:ae:3c:1a:24:d8:5f:4d:2c:ac:0e:ee:
         13:ce:8f:4f:64:b1:02:4f:43:ea:52:1a:1c:c9:2f:df:14:7d:
         f5:4f:c8:3a:98:f6:0b:48:08:18:d0:b7:1a:db:98:b3:23:eb:
         6d:85:dc:c7:69:eb:c3:8a:5a:7c:c7:9d:c2:5e:74:4a:40:54:
         e0:ab:70:8f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxOecY4lMYWl5navtTxemlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYWMwMjRmZmQ4ZGY0OTE4NzQxZjc1NGMwZGIyMThlZTdi
Mjc0OGQwHhcNMjMwMTAyMDY0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDcyYWM1NTVmYmUwZGRiZTc1OTYzMzI5NDQ4MWFlZmRmYThhYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpcJc+NId+Gd3s6CiNw9ZdwV/Wow
8O1d/kYzvCpCxpCn5TrWLhwe+WckwOYXQzC3NhWGXrHiiVaIuO6zw3wlPzbgJhnE
CwZiOA1EgTlK5BcxU4Fl9fW2mBInp2hzuKfsQBUKqekG4hKmJzv3fCHyVEldKKhf
9DOkX/ZujiU6vLtg79pa+P9FFD3ne0X0afO8nQugZbNsk+Scs5Y/1sqk3mkpB4R8
+wjPqRptE0Dp9SfQTlBBxxeYCOmZGTByPOoRxS0xo7feAJI7IdvnAaYubMQ55wJA
fIhM7fvTXvHmupR+UEBMFuoRMkO2xg0TuPKicCKe4KyfXvlcgxrCpLDmwwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFL1yrFVfvg3b51ljMpRIGu/fqKvGMB8GA1UdIwQY
MBaAFM6sAk/9jfSRh0H3VMDbIY7nsnSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenF3Q1RfMk45SkdIUWZkVXdOc2hqdWV5ZEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84Y2VjMjgtOGE4Ni00ZjY5LThmNjgt
YzUzMjM0OWE3NzU3LzEvdlhLc1ZWLS1EZHZuV1dNeWxFZ2E3OS1vcThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84Y2VjMjgtOGE4Ni00ZjY5LThmNjgtYzUzMjM0OWE3NzU3
LzEvenF3Q1RfMk45SkdIUWZkVXdOc2hqdWV5ZEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHWADAN
BgkqhkiG9w0BAQsFAAOCAQEAlgsqOCJ/KlqsPKOOiyFFppIurvhJOXjjiKC21UVc
P+W0lFtZ9SYEIC+bMMq0zi5dSkBtdWH2kzGhFqJYdwmudDdnficBkwigGbRcYsUU
SlKrVeNGxIgWlhscVVMMv3SbM7bTMdRVqD2LqN7izymm+iOWqWaBztx7U7eHSUfv
hX1HUrqh5Q1ILKSL1c9aAtwbMRdXre+3n+XxFN/ESfNVVqVT+oBnnwQ1CtVdLBfn
xyYxnK9RhX1YJCupWa48GiTYX00srA7uE86PT2SxAk9D6lIaHMkv3xR99U/IOpj2
C0gIGNC3GtuYsyPrbYXcx2nrw4pafMedwl50SkBU4Ktwjw==
-----END CERTIFICATE-----