Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/jq6mN6Jz0rW8wmFfxLqh5WTuRx8.roa
File:                     jq6mN6Jz0rW8wmFfxLqh5WTuRx8.roa (raw, json)
Hash identifier:          dykL/kV+GjduxoLclFctN9NMzAbTRU9Nwfrf4KtHCIY=
Subject key identifier:   8E:AE:A6:37:A2:73:D2:B5:BC:C2:61:5F:C4:BA:A1:E5:64:EE:47:1F
Certificate issuer:       /CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Certificate serial:       1CA62E99
Authority key identifier: 27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/jq6mN6Jz0rW8wmFfxLqh5WTuRx8.roa
Signing time:             Sat 01 Jan 2022 04:03:36 +0000
ROA not before:           Sat 01 Jan 2022 04:03:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196832
IP address blocks:        2a02:ac8:1002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480652953 (0x1ca62e99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
        Validity
            Not Before: Jan  1 04:03:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8eaea637a273d2b5bcc2615fc4baa1e564ee471f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:0a:56:e8:e7:a7:8e:1d:18:a4:11:06:61:
                    d2:88:6d:17:bc:f8:bc:dd:5a:76:94:4d:3d:8e:2f:
                    b7:bd:80:b3:00:3f:bd:75:62:c1:55:93:b9:33:40:
                    50:1c:b8:3c:4e:b0:de:35:33:54:9a:1c:de:de:44:
                    c6:d2:cd:75:6e:1e:ba:e8:5b:dc:85:01:eb:b5:b0:
                    a5:04:fb:e8:46:70:b4:11:89:44:d6:ad:56:bc:67:
                    96:84:24:fc:b3:e0:15:17:0b:fc:c9:88:2d:19:e1:
                    1b:a8:17:96:59:d1:b7:a4:3e:93:52:49:6a:52:4d:
                    61:92:30:47:e4:62:73:b9:d7:1e:ab:f5:d8:3e:5e:
                    06:fc:9e:5e:ad:cf:13:b1:62:b0:a7:af:72:9d:0c:
                    6c:62:cd:fb:e4:e6:6b:f7:a9:7d:31:92:b2:5f:06:
                    6b:09:6e:25:11:4e:f2:64:c6:f5:b0:de:f0:08:1b:
                    1f:6c:19:90:d2:c3:8c:4f:63:d1:73:ee:1e:5b:f6:
                    3e:39:13:4a:2c:d2:0a:aa:6e:05:1c:d6:42:4b:67:
                    bc:e7:89:81:ec:c0:98:9c:37:fa:95:13:a1:2e:06:
                    f2:3b:78:3a:49:de:50:a6:f5:14:bf:d4:5f:a1:ba:
                    1e:bd:95:33:c2:b2:05:70:f4:66:6b:9a:70:bf:ba:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AE:A6:37:A2:73:D2:B5:BC:C2:61:5F:C4:BA:A1:E5:64:EE:47:1F
            X509v3 Authority Key Identifier:
                keyid:27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/jq6mN6Jz0rW8wmFfxLqh5WTuRx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:ac8:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:21:a3:d8:45:a5:0a:c9:b8:a2:56:38:aa:d5:eb:ee:9f:c3:
         83:79:ae:09:d0:ce:d6:a0:d8:f3:7c:80:21:df:ee:d2:37:b1:
         97:1d:f8:51:e4:b4:52:3a:a5:15:b4:ed:4e:53:4f:5c:ff:2a:
         78:79:32:d6:08:de:46:51:a5:1d:9b:5d:e5:d9:ac:83:37:28:
         17:51:d4:47:69:5e:33:61:c4:05:48:ca:95:f8:89:6c:3a:56:
         0f:0d:88:41:36:04:9d:f2:fb:71:e0:86:74:7c:ed:de:2f:dd:
         e3:bf:3d:41:b8:84:e9:24:2a:14:a2:ee:be:a1:1b:58:cb:94:
         93:32:ec:25:13:22:88:3e:cc:56:60:5f:07:e7:df:dd:5e:1d:
         cf:7c:f6:17:8a:5e:84:30:c3:41:36:2b:77:b7:54:c2:52:e2:
         e0:2f:03:a0:ea:8c:9d:b8:b3:1d:2a:57:7e:07:04:ef:c5:df:
         1e:43:a6:45:c0:37:12:1b:5b:b4:03:c2:d8:c5:77:38:53:22:
         d5:9f:2f:37:45:71:91:68:ea:99:f1:e1:09:b3:4f:78:9b:df:
         0c:70:f8:fb:7b:15:30:c6:8f:df:04:ec:e4:0d:de:fc:9b:42:
         37:be:2d:eb:1a:17:44:10:c6:1e:8e:47:be:ac:9e:f1:9e:e7:
         f0:2c:64:b0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEHKYumTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
N2FhZjNiZjU0YWZmODZmMWZhODZiNjQzMzAxZTkxNWNlOGE4YWNmMB4XDTIyMDEw
MTA0MDMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGVhZWE2MzdhMjcz
ZDJiNWJjYzI2MTVmYzRiYWExZTU2NGVlNDcxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALS8Clbo56eOHRikEQZh0ohtF7z4vN1adpRNPY4vt72AswA/
vXViwVWTuTNAUBy4PE6w3jUzVJoc3t5ExtLNdW4euuhb3IUB67WwpQT76EZwtBGJ
RNatVrxnloQk/LPgFRcL/MmILRnhG6gXllnRt6Q+k1JJalJNYZIwR+Ric7nXHqv1
2D5eBvyeXq3PE7FisKevcp0MbGLN++Tma/epfTGSsl8GawluJRFO8mTG9bDe8Agb
H2wZkNLDjE9j0XPuHlv2PjkTSizSCqpuBRzWQktnvOeJgezAmJw3+pUToS4G8jt4
OkneUKb1FL/UX6G6Hr2VM8KyBXD0ZmuacL+6s3cCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSOrqY3onPStbzCYV/EuqHlZO5HHzAfBgNVHSMEGDAWgBQnqvO/VK/4bx+o
a2QzAekVzoqKzzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0o2cnp2MVN2LUc4ZnFHdGtNd0hwRmM2S2lzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvZmQ1YjY2LWE0NGMtNGY1Ni1hMzVjLWFiNjQxYzhkYjMzMi8x
L2pxNm1ONkp6MHJXOHdtRmZ4THFoNVdUdVJ4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ZmQ1YjY2LWE0NGMtNGY1Ni1hMzVjLWFiNjQxYzhkYjMzMi8xL0o2cnp2MVN2LUc4
ZnFHdGtNd0hwRmM2S2lzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCCsgQAjANBgkqhkiG9w0BAQsF
AAOCAQEAliGj2EWlCsm4olY4qtXr7p/Dg3muCdDO1qDY83yAId/u0jexlx34UeS0
UjqlFbTtTlNPXP8qeHky1gjeRlGlHZtd5dmsgzcoF1HUR2leM2HEBUjKlfiJbDpW
Dw2IQTYEnfL7ceCGdHzt3i/d4789QbiE6SQqFKLuvqEbWMuUkzLsJRMiiD7MVmBf
B+ff3V4dz3z2F4pehDDDQTYrd7dUwlLi4C8DoOqMnbizHSpXfgcE78XfHkOmRcA3
EhtbtAPC2MV3OFMi1Z8vN0VxkWjqmfHhCbNPeJvfDHD4+3sVMMaP3wTs5A3e/JtC
N74t6xoXRBDGHo5Hvqye8Z7n8CxksA==
-----END CERTIFICATE-----