Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Zs0IXVLLh0nA5QjHwS-O-pCaygU.roa
File:                     Zs0IXVLLh0nA5QjHwS-O-pCaygU.roa (raw, json)
Hash identifier:          +mVaLEan8lSW8XAE3Bvkdd0pko5/wBn8DK4PdvS95+M=
Subject key identifier:   66:CD:08:5D:52:CB:87:49:C0:E5:08:C7:C1:2F:8E:FA:90:9A:CA:05
Certificate issuer:       /CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Certificate serial:       0185732833769C80C2408B2619368B528386
Authority key identifier: E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Zs0IXVLLh0nA5QjHwS-O-pCaygU.roa
Signing time:             Mon 02 Jan 2023 15:44:52 +0000
ROA not before:           Mon 02 Jan 2023 15:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62349
IP address blocks:        2a0a:6b40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:28:33:76:9c:80:c2:40:8b:26:19:36:8b:52:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
        Validity
            Not Before: Jan  2 15:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=66cd085d52cb8749c0e508c7c12f8efa909aca05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:f4:3b:9d:42:08:ee:83:ac:95:b3:85:97:
                    e2:4d:95:0b:6d:63:9e:3f:48:bc:13:09:6a:e0:a1:
                    bd:56:f7:30:cb:f6:62:29:64:73:d0:ff:6c:4c:2a:
                    58:00:c5:f0:55:2d:33:b1:b2:73:82:99:47:3f:57:
                    84:cb:36:62:c0:bf:da:16:8e:a7:67:b8:73:74:22:
                    f8:e7:c5:f7:10:5d:07:2e:bd:f2:a4:c3:64:0c:4b:
                    4d:e3:8d:13:88:b8:26:47:ce:7e:da:2c:39:16:9d:
                    f5:2c:63:75:ad:57:06:ae:1d:bd:2a:df:5a:87:3d:
                    04:db:5b:5d:a2:60:b1:eb:ab:59:99:39:ec:65:a8:
                    76:f6:e2:9b:72:42:26:88:c5:5b:90:bf:bc:f2:17:
                    da:5e:a5:7c:06:7d:ef:ee:ea:bb:1c:13:e5:53:a5:
                    35:5c:23:23:b6:d6:e9:43:ee:89:79:92:58:14:ce:
                    90:1a:e9:13:7d:51:1b:42:af:fb:60:b1:5c:ae:f6:
                    da:c5:83:32:8f:a0:9a:97:a5:10:50:9c:52:18:1a:
                    80:d0:f9:5b:bf:f8:0c:b5:cf:30:01:4c:6f:f8:80:
                    ab:95:d1:45:78:61:4f:24:a7:e2:a1:74:0c:a6:24:
                    fb:e4:06:bc:f2:bb:ba:9d:2f:ee:f1:27:55:d4:9e:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:08:5D:52:CB:87:49:C0:E5:08:C7:C1:2F:8E:FA:90:9A:CA:05
            X509v3 Authority Key Identifier:
                keyid:E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Zs0IXVLLh0nA5QjHwS-O-pCaygU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:a9:d2:be:f2:2a:f0:0e:01:28:f2:d1:0b:ec:e4:15:0f:
         c5:d5:54:c4:70:5e:e0:03:84:cb:fd:8a:ac:91:60:db:21:77:
         2e:b0:8d:38:20:35:a7:19:ad:98:ed:98:ce:e1:2c:78:b0:e9:
         8d:2d:7f:1e:20:96:b2:fd:c6:06:fb:ae:9c:05:81:22:5d:0a:
         9a:50:36:3c:bd:f8:28:fd:2d:5c:88:45:b6:d4:35:75:b8:6c:
         93:f9:de:21:37:19:bc:68:b2:72:e0:7e:d7:8c:21:af:7e:58:
         64:b0:31:b8:ef:1d:bc:9a:f4:af:d2:c1:1c:8f:27:db:ac:61:
         58:f4:f6:d1:6c:e2:b9:40:6a:c1:cf:c2:de:89:71:6a:7a:28:
         9a:bc:ed:1b:7d:89:2c:13:7e:d6:d8:c1:c0:b5:7f:2d:9e:07:
         bc:ec:6c:0b:69:b8:b4:5f:9b:b3:d2:21:e7:f6:43:7d:0e:89:
         98:16:61:43:d8:49:99:8b:6d:7c:d6:5c:df:9c:68:75:92:e5:
         6e:23:a0:d3:7c:a8:5a:1f:65:8b:01:b5:a0:4a:8e:3e:43:3d:
         01:cc:c6:e9:b1:8c:b2:fa:6c:26:4f:14:36:3e:02:02:c4:7d:
         d3:52:dd:4b:70:c3:54:7e:50:21:b2:e0:89:06:54:ab:6c:86:
         ce:d4:80:59
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVzKDN2nIDCQIsmGTaLUoOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODdhMGE3YmFmMzkwMzhjMmEzY2UxYjUzZWZkYTgzNTBk
MTNiNDEwHhcNMjMwMTAyMTU0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmNkMDg1ZDUyY2I4NzQ5YzBlNTA4YzdjMTJmOGVmYTkwOWFjYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSD0O51CCO6DrJWzhZfiTZULbWOe
P0i8Ewlq4KG9Vvcwy/ZiKWRz0P9sTCpYAMXwVS0zsbJzgplHP1eEyzZiwL/aFo6n
Z7hzdCL458X3EF0HLr3ypMNkDEtN440TiLgmR85+2iw5Fp31LGN1rVcGrh29Kt9a
hz0E21tdomCx66tZmTnsZah29uKbckImiMVbkL+88hfaXqV8Bn3v7uq7HBPlU6U1
XCMjttbpQ+6JeZJYFM6QGukTfVEbQq/7YLFcrvbaxYMyj6Cal6UQUJxSGBqA0Plb
v/gMtc8wAUxv+ICrldFFeGFPJKfioXQMpiT75Aa88ru6nS/u8SdV1J4D0QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGbNCF1Sy4dJwOUIx8EvjvqQmsoFMB8GA1UdIwQY
MBaAFOCHoKe685A4wqPOG1Pv2oNQ0TtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEllZ3A3cnprRGpDbzg0YlUtX2FnMURSTzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2MzNGQtY2NkMS00YmJhLWEwNmUt
ZTVjNzZiYmE4NDYwLzEvWnMwSVhWTExoMG5BNVFqSHdTLU8tcENheWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2MzNGQtY2NkMS00YmJhLWEwNmUtZTVjNzZiYmE4NDYw
LzEvNEllZ3A3cnprRGpDbzg0YlUtX2FnMURSTzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgprQDAN
BgkqhkiG9w0BAQsFAAOCAQEAnEap0r7yKvAOASjy0Qvs5BUPxdVUxHBe4AOEy/2K
rJFg2yF3LrCNOCA1pxmtmO2YzuEseLDpjS1/HiCWsv3GBvuunAWBIl0KmlA2PL34
KP0tXIhFttQ1dbhsk/neITcZvGiycuB+14whr35YZLAxuO8dvJr0r9LBHI8n26xh
WPT20WziuUBqwc/C3olxanoomrztG32JLBN+1tjBwLV/LZ4HvOxsC2m4tF+bs9Ih
5/ZDfQ6JmBZhQ9hJmYttfNZc35xodZLlbiOg03yoWh9liwG1oEqOPkM9AczG6bGM
svpsJk8UNj4CAsR901LdS3DDVH5QIbLgiQZUq2yGztSAWQ==
-----END CERTIFICATE-----