Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa
File:                     BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa (raw, json)
Hash identifier:          j4lelBxBFlkaP7wQsZEquyNVwFvWXCf4wNT2MG18dvw=
Subject key identifier:   06:83:34:5F:25:73:F2:89:39:3E:BB:60:10:7D:D0:81:80:49:F0:54
Certificate issuer:       /CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Certificate serial:       018412FE71D26DF25E18027E7A786FD0E240
Authority key identifier: 29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa
Signing time:             Wed 26 Oct 2022 06:32:55 +0000
ROA not before:           Wed 26 Oct 2022 06:32:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60982
IP address blocks:        2a04:1bc3::/32 maxlen: 32
                          2a04:1bc7::/32 maxlen: 32
                          2a04:1bc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:12:fe:71:d2:6d:f2:5e:18:02:7e:7a:78:6f:d0:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29852162f073224b1af5be6f7fd9a840a284dbbb
        Validity
            Not Before: Oct 26 06:32:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0683345f2573f289393ebb60107dd0818049f054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:30:39:00:64:93:cb:e7:63:2f:85:cf:5d:
                    2a:df:8f:1c:c7:02:81:8a:8b:79:13:38:3d:91:d9:
                    97:65:18:00:c3:c2:4b:c3:55:c8:cc:ba:a9:41:e8:
                    5b:08:07:c1:d6:ae:81:2b:e8:df:04:4a:78:3b:b0:
                    24:5b:4a:87:e5:35:3d:da:76:35:4f:74:13:5e:fd:
                    aa:99:fb:c5:a8:82:75:66:74:91:d5:16:95:5d:78:
                    b0:6c:d3:2a:94:a0:7a:2c:99:58:43:be:e1:05:e4:
                    f8:f7:35:9b:19:82:8d:16:d8:6a:f8:26:fa:c0:2b:
                    52:c9:02:15:b5:19:71:a5:aa:c4:3e:59:4d:b0:fa:
                    a0:a7:af:13:b7:41:bd:2c:5d:52:78:6f:f5:c2:9e:
                    1d:4b:3a:d1:f6:90:73:58:82:85:cd:56:bd:ea:33:
                    69:01:4f:aa:c3:74:b6:eb:54:3e:0a:2f:39:1f:c3:
                    81:32:08:65:48:d0:2a:72:26:c1:a9:83:16:8b:df:
                    d5:18:db:d8:58:a9:f2:91:08:ab:e4:3d:ac:b2:85:
                    85:a2:73:6a:71:08:76:d3:59:6b:55:1e:bd:cd:6d:
                    f4:fc:ca:84:49:7f:f1:45:05:a5:5f:56:54:6d:77:
                    be:99:32:9c:92:b1:72:3f:ec:b6:5b:e9:be:ee:99:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:34:5F:25:73:F2:89:39:3E:BB:60:10:7D:D0:81:80:49:F0:54
            X509v3 Authority Key Identifier:
                keyid:29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1bc0::/32
                  2a04:1bc3::/32
                  2a04:1bc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:86:47:03:c4:ae:e5:45:0b:2d:68:28:40:c0:e0:5a:d8:
         1c:04:f6:e1:26:b2:ea:ea:1d:46:38:95:a3:41:56:86:4d:7d:
         ee:03:e4:74:c9:80:d9:2a:96:9e:a1:fa:69:d9:31:c4:1a:e3:
         f5:46:1e:35:b0:1a:ca:63:42:48:81:50:6d:91:26:ec:db:58:
         b5:61:f4:0e:e6:8d:d9:52:2d:ff:83:be:6c:dd:f3:1a:c1:7b:
         b6:45:10:7d:dd:13:88:f7:85:e3:4a:33:04:04:3b:27:33:3d:
         0b:82:0d:23:0d:fa:42:71:53:d5:f8:ca:49:63:77:f0:fd:3f:
         56:d2:5f:cd:90:0a:0a:92:98:f3:31:ea:38:ea:d7:c4:ae:9c:
         28:fa:f1:51:11:a8:79:23:b0:e7:1f:7e:9d:ae:ae:f3:e3:5e:
         e6:5b:28:ec:45:6c:2a:ea:3f:fb:70:aa:b2:02:fb:7b:e9:b6:
         5a:be:9a:f9:5e:25:ee:75:75:15:9e:cb:a8:73:77:44:ea:91:
         36:63:c8:e3:aa:c0:6b:2e:62:ce:6d:8a:d6:4e:45:7c:d1:89:
         b5:9f:59:34:a3:da:bd:8a:af:d5:81:4b:82:5f:d6:c7:21:f4:
         f7:ba:15:57:80:af:64:87:06:a0:1c:dc:6b:8f:86:3d:82:57:
         d4:35:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----