Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/up6aBU0VMoWrPoGZS3p2g5Dk4tw.roa
File:                     up6aBU0VMoWrPoGZS3p2g5Dk4tw.roa (raw, json)
Hash identifier:          nRyAf4aEpfhw4s/cWUjQPCNNeCpTknMTpI5NyF5J6ss=
Subject key identifier:   BA:9E:9A:05:4D:15:32:85:AB:3E:81:99:4B:7A:76:83:90:E4:E2:DC
Certificate issuer:       /CN=db0d8a8f8f49e6ed22ee2a5aae552f0650a34ade
Certificate serial:       0892A864
Authority key identifier: DB:0D:8A:8F:8F:49:E6:ED:22:EE:2A:5A:AE:55:2F:06:50:A3:4A:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2w2Kj49J5u0i7iparlUvBlCjSt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/up6aBU0VMoWrPoGZS3p2g5Dk4tw.roa
Signing time:             Sat 01 Jan 2022 05:53:03 +0000
ROA not before:           Sat 01 Jan 2022 05:53:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208846
IP address blocks:        2a0e:7780::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143829092 (0x892a864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0d8a8f8f49e6ed22ee2a5aae552f0650a34ade
        Validity
            Not Before: Jan  1 05:53:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba9e9a054d153285ab3e81994b7a768390e4e2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:07:97:be:36:1f:43:56:ad:d6:01:48:4d:
                    5f:92:9d:58:3e:a7:39:e1:57:dc:ca:ab:e6:44:e1:
                    c4:45:8d:cb:0c:d5:ff:7c:53:27:6a:70:3d:07:48:
                    30:04:da:58:a6:ea:84:09:eb:fc:37:69:6a:d0:76:
                    6c:fc:7b:63:1f:ee:a7:a3:d1:c9:12:36:cc:3e:aa:
                    1f:37:e7:e4:ec:22:51:31:01:da:9c:46:da:8d:d8:
                    73:52:cc:ca:e2:23:cc:73:db:cd:79:7e:ca:4e:e1:
                    86:79:ad:64:d2:d1:8c:40:40:62:ea:4c:10:ed:77:
                    20:46:83:22:20:65:46:5f:dd:6a:81:ec:63:13:74:
                    5e:cf:49:f8:b0:03:75:db:35:0d:27:c8:e2:df:67:
                    a3:19:e8:26:48:b3:10:71:87:1e:a3:6a:96:4d:8e:
                    37:c5:d1:76:b4:20:d1:af:ff:91:53:7e:63:6b:a4:
                    d7:d8:28:06:c5:76:6d:98:67:3a:9f:60:56:ce:1a:
                    67:19:0e:92:65:10:1f:c7:bc:9a:bf:51:46:18:a5:
                    ce:a1:82:87:da:c5:57:da:75:10:f7:ce:08:6d:f4:
                    16:9b:5f:5c:3a:d3:ea:da:51:bc:61:36:ba:c6:7d:
                    66:41:cd:ba:94:ee:b2:b2:65:1b:55:97:ed:6e:c1:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9E:9A:05:4D:15:32:85:AB:3E:81:99:4B:7A:76:83:90:E4:E2:DC
            X509v3 Authority Key Identifier:
                keyid:DB:0D:8A:8F:8F:49:E6:ED:22:EE:2A:5A:AE:55:2F:06:50:A3:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2w2Kj49J5u0i7iparlUvBlCjSt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/up6aBU0VMoWrPoGZS3p2g5Dk4tw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/2w2Kj49J5u0i7iparlUvBlCjSt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:7780::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:38:60:87:1a:bb:1e:af:8d:f3:fc:bb:48:c5:de:73:26:48:
         fa:f5:77:9a:30:0b:d9:65:d6:21:07:fa:5f:fe:df:73:33:49:
         a1:42:cb:a7:de:5d:a8:77:e5:f7:be:45:33:6a:c5:38:cb:b6:
         fd:6e:ef:44:41:e8:11:97:8c:af:ca:ec:0e:b4:a8:f8:db:18:
         5a:be:32:90:7e:a8:6e:b0:07:e0:f1:f1:36:eb:30:7e:af:2c:
         a0:23:a8:ec:06:20:c7:5c:c0:54:1e:90:26:2b:d6:a3:01:92:
         b2:c3:62:94:21:2a:83:8e:76:66:81:74:ce:ef:aa:9c:0d:87:
         8d:e8:91:76:f0:be:36:19:8b:93:63:58:f3:23:e0:c2:7f:b9:
         83:4d:50:c3:61:06:e8:0f:d7:66:1c:fa:ff:f4:e8:ea:c3:d4:
         97:cb:77:28:e0:db:e3:79:4b:84:d1:4c:cb:f1:d6:ae:b0:da:
         2c:16:d1:29:af:e3:af:3a:4f:20:5d:f9:9a:43:2f:b2:aa:a3:
         5a:31:6d:8a:9c:f0:93:c2:84:61:fb:d7:59:8f:04:b1:30:ef:
         2d:a4:28:8c:cd:3d:5e:37:92:28:07:27:7c:2c:61:e1:24:f7:
         fe:c5:9b:14:ba:74:72:f8:04:e7:cd:da:77:f9:26:fa:f5:ff:
         35:d1:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----