Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/GwV80rDt3qpPwQqZXD7g2sfBZ64.roa
File:                     GwV80rDt3qpPwQqZXD7g2sfBZ64.roa (raw, json)
Hash identifier:          QeOKtZOCXpVZxdfQr4KYi46odQ3ahn5nS7wyFo/5YEs=
Subject key identifier:   1B:05:7C:D2:B0:ED:DE:AA:4F:C1:0A:99:5C:3E:E0:DA:C7:C1:67:AE
Certificate issuer:       /CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Certificate serial:       1CA4F66B
Authority key identifier: 27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/GwV80rDt3qpPwQqZXD7g2sfBZ64.roa
Signing time:             Sat 01 Jan 2022 04:03:35 +0000
ROA not before:           Sat 01 Jan 2022 04:03:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38937
IP address blocks:        2a03:6100:6100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480573035 (0x1ca4f66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
        Validity
            Not Before: Jan  1 04:03:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b057cd2b0eddeaa4fc10a995c3ee0dac7c167ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:9c:2c:63:7b:91:38:27:c9:32:7b:a2:16:
                    d6:b6:4e:da:db:6a:a6:2d:74:89:73:8f:46:f3:8f:
                    34:be:e7:6f:e7:8d:5a:09:28:d0:6e:70:7f:ff:06:
                    cc:71:c9:33:68:94:63:20:f1:42:af:45:5f:31:fc:
                    bd:01:e6:24:2a:f6:09:75:d1:2f:38:d2:ce:7d:14:
                    44:ff:be:35:d6:75:f4:38:64:1b:19:03:65:ee:d9:
                    4e:37:c7:86:aa:e6:2c:0b:ba:62:88:31:2c:c5:9c:
                    bb:8a:bc:e4:78:ed:4f:eb:69:73:0d:fa:81:49:72:
                    33:e4:41:3f:3c:18:97:6f:db:48:f9:50:d9:3a:d8:
                    9a:05:3f:c3:11:ed:d1:7d:4b:7f:06:25:d2:7e:d2:
                    01:c2:5a:41:92:0b:98:b8:8e:ee:82:7e:59:98:91:
                    57:5e:5c:33:5c:68:0c:63:49:58:5a:bd:24:96:5b:
                    c3:f7:4d:29:16:87:77:38:62:51:b3:9a:64:cb:d6:
                    d0:40:54:cf:f1:61:f0:61:aa:85:bb:20:38:de:88:
                    8e:1d:df:bb:fa:6c:8a:2f:01:62:f3:4c:ac:3c:3b:
                    d5:61:34:ce:15:50:d9:24:71:8b:ce:b6:1f:39:c9:
                    46:5b:da:da:78:6f:ba:db:a0:46:33:f7:35:da:3b:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:7C:D2:B0:ED:DE:AA:4F:C1:0A:99:5C:3E:E0:DA:C7:C1:67:AE
            X509v3 Authority Key Identifier:
                keyid:27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/GwV80rDt3qpPwQqZXD7g2sfBZ64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6100:6100::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:dd:e0:ec:42:d4:e1:6d:a9:95:66:91:68:49:0e:d2:85:
         30:91:9b:23:a2:b7:41:aa:23:e6:af:5e:a9:bc:fd:e3:21:f6:
         63:27:dd:cb:e2:5d:ae:da:32:f7:90:ee:ed:4b:c3:86:0c:69:
         22:51:2c:cf:31:45:92:b9:26:ff:c0:72:44:9f:c5:64:0b:c5:
         ba:70:21:21:a9:25:7d:c0:16:72:61:cf:6d:a5:b5:2e:1c:e2:
         d8:99:5f:74:55:61:59:b8:b1:01:bc:5c:d1:f4:c3:2b:c3:84:
         fe:d8:33:73:31:d6:1d:f0:f6:29:97:ce:b9:1e:00:97:65:c6:
         ca:d0:8b:f1:68:44:f1:6b:f5:9e:eb:ed:6e:84:4b:cb:5a:48:
         36:03:0a:e2:fb:26:4c:4d:da:5b:48:d0:f4:85:79:cc:3f:01:
         ff:6d:7a:f1:ce:fd:86:5c:93:8e:b5:bf:0a:17:78:f2:79:00:
         c0:76:b7:d7:5d:cc:e7:ed:75:36:79:da:58:9b:bf:17:5e:4d:
         86:e8:d5:86:7c:b0:6e:eb:8b:ef:dd:1d:42:bd:62:0c:93:93:
         f2:0b:f6:0d:dc:c3:fa:b3:32:68:de:83:79:20:ea:05:8d:03:
         0c:25:f3:26:05:22:c0:77:c1:5d:7f:a0:d0:41:3b:2c:6a:9a:
         bc:c8:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----