Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Eom6428RbspYxImBdOdglg3uNPM.roa
File:                     Eom6428RbspYxImBdOdglg3uNPM.roa (raw, json)
Hash identifier:          5Zrvou17KIH437Daw2GMrfxuuDuqSaIcJYGBkk/tCr0=
Subject key identifier:   12:89:BA:E3:6F:11:6E:CA:58:C4:89:81:74:E7:60:96:0D:EE:34:F3
Certificate issuer:       /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial:       08EF4484
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Eom6428RbspYxImBdOdglg3uNPM.roa
Signing time:             Sat 01 Jan 2022 14:06:19 +0000
ROA not before:           Sat 01 Jan 2022 14:06:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208226
IP address blocks:        2a0e:4007:fffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149898372 (0x8ef4484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
        Validity
            Not Before: Jan  1 14:06:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1289bae36f116eca58c4898174e760960dee34f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:1a:95:f4:17:e5:97:57:e1:21:77:60:4b:
                    d8:6d:91:ca:83:54:f7:3f:c6:d5:7c:4a:a4:a7:65:
                    b9:77:66:77:d8:52:25:67:02:7b:c9:86:1f:38:0d:
                    b2:a6:0f:72:d2:b1:02:91:be:bf:d2:02:23:5f:c0:
                    9f:2e:d9:38:7d:6a:e2:bf:ec:34:d9:7e:6c:e5:1f:
                    ac:56:0f:7f:b3:63:b8:94:1a:6f:28:87:40:c0:9d:
                    78:8c:89:14:7b:18:17:6f:4e:3f:bc:cd:7f:01:93:
                    ef:7b:f2:89:9f:d9:5d:a2:fd:c9:36:5a:1c:23:d0:
                    7f:7e:3c:0f:ba:f0:8d:91:26:2a:25:0a:bd:68:6f:
                    ef:b5:32:7b:ff:72:4f:25:e6:f4:33:8c:ba:de:02:
                    f5:3c:cc:ce:98:21:94:19:a6:1f:8f:b6:fb:bc:1f:
                    50:f4:67:32:9a:87:13:36:f6:f1:dd:09:03:42:74:
                    91:37:9a:e1:84:a3:cc:28:22:77:35:c4:a2:1a:79:
                    af:ee:a5:fd:a5:d3:0b:b9:b2:74:c6:21:1b:15:a4:
                    83:a6:42:25:35:4f:d0:5f:89:f3:2e:3d:ed:b1:d9:
                    c7:e8:e1:19:8e:99:e7:48:14:48:34:f1:0e:09:b8:
                    af:a6:ae:12:ae:61:99:19:22:d5:1c:b8:48:e8:99:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:89:BA:E3:6F:11:6E:CA:58:C4:89:81:74:E7:60:96:0D:EE:34:F3
            X509v3 Authority Key Identifier:
                keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Eom6428RbspYxImBdOdglg3uNPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4007:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:1a:28:1c:f3:1f:18:a6:d9:38:25:5c:bb:5f:a0:b7:8f:4b:
         15:13:4f:86:03:86:23:54:6c:6a:f1:70:94:f2:fc:f4:12:fd:
         2b:7d:20:58:92:4b:cc:4e:da:2b:17:37:37:5f:0c:a6:14:6d:
         ab:72:b3:b4:28:9c:23:15:b8:41:94:2d:5d:be:c8:bf:37:97:
         c6:bb:88:9a:08:e7:24:db:c7:49:f1:5f:2c:69:c6:71:5b:fe:
         9e:17:0b:f3:a7:5c:f2:e7:89:b5:aa:fa:a3:a1:a5:f6:92:59:
         75:5b:fa:15:65:64:71:f4:9c:6b:50:aa:5b:44:48:56:e7:23:
         d0:d9:58:c2:1d:54:eb:28:e8:a6:9b:a1:c4:1a:a9:9b:c9:88:
         eb:37:87:86:bf:e5:24:c1:4a:1b:4c:ae:4a:05:15:79:bb:d2:
         eb:5a:d8:a4:c6:56:ca:96:95:25:18:b1:99:38:02:8e:c2:e5:
         28:d4:95:1b:5b:ef:24:a3:7e:51:33:84:42:72:9f:1f:49:37:
         bc:79:24:28:d3:58:4f:72:6a:75:8b:61:2a:64:0a:39:99:e3:
         b2:3b:34:93:3d:a6:57:14:d8:19:6b:76:f1:c8:cb:85:e5:18:
         a2:73:f6:f9:07:e6:33:55:a9:e8:87:14:96:25:9f:44:75:88:
         e9:11:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----