Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa
File:                     yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa (raw, json)
Hash identifier:          CnKaKNvztmDh57Zj1u0js4NgnNuohnRhZUKPjWBfHP8=
Subject key identifier:   CA:3C:9C:8C:11:0C:B4:63:E2:56:9C:C2:EA:79:7F:AE:5D:D9:C0:61
Certificate issuer:       /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial:       01857B6CBCD756EBD89F61737C9D34F910CA
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa
Signing time:             Wed 04 Jan 2023 06:16:41 +0000
ROA not before:           Wed 04 Jan 2023 06:16:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50058
IP address blocks:        2a06:a346::/31 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7b:6c:bc:d7:56:eb:d8:9f:61:73:7c:9d:34:f9:10:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
        Validity
            Not Before: Jan  4 06:16:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca3c9c8c110cb463e2569cc2ea797fae5dd9c061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:d4:d9:c6:d5:3b:d0:99:af:86:07:e4:11:
                    2c:a5:e0:ad:96:ed:c3:85:ef:38:e9:73:b7:ff:37:
                    bd:28:ec:a1:88:e8:c8:80:bc:c1:8f:c7:82:ac:ef:
                    aa:32:b8:a3:cc:5d:a1:51:c1:01:45:ec:ad:77:b3:
                    e0:ac:4f:64:7f:15:26:69:3e:06:70:84:d6:22:40:
                    3e:54:22:b5:73:2f:6c:f2:62:ee:67:d4:d6:ae:d6:
                    55:38:fc:6d:8b:56:c4:55:7b:79:e2:67:73:8c:fc:
                    76:1f:a3:ac:3e:77:d6:36:74:eb:87:68:6d:db:0a:
                    bb:0c:e5:3d:83:96:40:23:a8:30:97:71:01:3b:23:
                    9d:bb:96:6f:16:63:46:09:ed:ec:e9:0b:e4:84:10:
                    53:dd:cf:a7:c6:94:69:8d:f1:bc:68:82:ba:3e:4b:
                    23:a7:d0:ce:e8:8c:ed:40:21:17:c2:09:a5:67:72:
                    86:91:87:08:c5:95:5c:d4:c4:9e:c6:07:18:5f:6e:
                    f3:5f:51:49:81:b7:c8:8c:8d:16:48:e0:de:43:9c:
                    09:f9:d8:c8:1e:05:10:16:c6:5f:6c:f4:cc:88:10:
                    b8:d8:19:e1:58:b8:15:5f:db:96:8a:2a:4a:be:13:
                    e1:2a:f5:ec:de:13:90:e9:b0:1c:67:ac:9d:f2:80:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:9C:8C:11:0C:B4:63:E2:56:9C:C2:EA:79:7F:AE:5D:D9:C0:61
            X509v3 Authority Key Identifier:
                keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a346::/31

    Signature Algorithm: sha256WithRSAEncryption
         75:40:d7:e6:af:8f:9d:da:15:98:84:2f:e6:09:1f:3c:5d:2f:
         42:6b:dc:29:14:ca:8d:aa:5d:c5:bd:16:6e:5e:6e:10:89:e6:
         7f:7c:ef:e0:de:6e:4e:62:4b:3d:97:10:de:7f:19:04:38:16:
         27:3f:b2:b4:43:b1:85:b1:a2:6b:4f:1c:46:b7:3f:09:65:d3:
         a7:af:8c:72:43:0f:14:ae:a8:43:3e:55:ab:4c:6d:5b:0d:67:
         eb:5d:14:97:45:ea:e2:36:5c:0d:4a:05:b9:6b:64:9c:d6:4e:
         e1:fe:0e:99:94:9c:78:d0:99:34:9d:0a:be:ef:58:e7:35:06:
         cb:d0:38:e6:a8:34:71:b2:f4:ef:d9:09:82:52:5f:ee:57:58:
         84:56:29:29:0f:17:ba:3a:02:e4:c8:f6:7d:62:8c:c6:50:c1:
         38:5b:87:09:b8:a9:7b:1d:9f:5d:64:bb:28:05:b9:97:f7:c6:
         83:e0:e3:40:87:26:a4:5b:29:56:b0:a2:6b:29:a7:04:19:ff:
         95:ba:20:6b:0b:1e:e7:0a:30:fa:8a:29:69:80:16:25:75:dd:
         6c:8c:5c:5c:22:f8:72:8f:55:04:3d:ef:d5:6e:c9:b4:a7:23:
         63:b0:27:7d:65:c2:e5:cd:65:a3:36:1b:3d:1d:94:96:2a:0f:
         fa:7a:79:a8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYV7bLzXVuvYn2FzfJ00+RDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWIzNWIwODQ2MDhjZDFjMjU5NGJiYWE1ZTQ2OTM3NjAw
NTAwMzcwHhcNMjMwMTA0MDYxNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNjOWM4YzExMGNiNDYzZTI1NjljYzJlYTc5N2ZhZTVkZDljMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/bU2cbVO9CZr4YH5BEspeCtlu3D
he846XO3/ze9KOyhiOjIgLzBj8eCrO+qMrijzF2hUcEBReytd7PgrE9kfxUmaT4G
cITWIkA+VCK1cy9s8mLuZ9TWrtZVOPxti1bEVXt54mdzjPx2H6OsPnfWNnTrh2ht
2wq7DOU9g5ZAI6gwl3EBOyOdu5ZvFmNGCe3s6QvkhBBT3c+nxpRpjfG8aIK6Pksj
p9DO6IztQCEXwgmlZ3KGkYcIxZVc1MSexgcYX27zX1FJgbfIjI0WSODeQ5wJ+djI
HgUQFsZfbPTMiBC42BnhWLgVX9uWiipKvhPhKvXs3hOQ6bAcZ6yd8oAshwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMo8nIwRDLRj4lacwup5f65d2cBhMB8GA1UdIwQY
MBaAFPabNbCEYIzRwllLuqXkaTdgBQA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODct
NjQ1MDk4NTEyOWFhLzEveWp5Y2pCRU10R1BpVnB6QzZubF9ybDNad0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODctNjQ1MDk4NTEyOWFh
LzEvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgajRjAN
BgkqhkiG9w0BAQsFAAOCAQEAdUDX5q+PndoVmIQv5gkfPF0vQmvcKRTKjapdxb0W
bl5uEInmf3zv4N5uTmJLPZcQ3n8ZBDgWJz+ytEOxhbGia08cRrc/CWXTp6+MckMP
FK6oQz5Vq0xtWw1n610Ul0Xq4jZcDUoFuWtknNZO4f4OmZSceNCZNJ0Kvu9Y5zUG
y9A45qg0cbL079kJglJf7ldYhFYpKQ8XujoC5Mj2fWKMxlDBOFuHCbipex2fXWS7
KAW5l/fGg+DjQIcmpFspVrCiaymnBBn/lbogawse5wow+oopaYAWJXXdbIxcXCL4
co9VBD3v1W7JtKcjY7AnfWXC5c1lozYbPR2UlioP+np5qA==
-----END CERTIFICATE-----