Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/c-7m78N6b-fhveNFww3U2qRnTM4.roa
File:                     c-7m78N6b-fhveNFww3U2qRnTM4.roa (raw, json)
Hash identifier:          VlMHYrZx5LO9w/khIoPKqwesVZ14ic71xXjp8zkn/q8=
Subject key identifier:   73:EE:E6:EF:C3:7A:6F:E7:E1:BD:E3:45:C3:0D:D4:DA:A4:67:4C:CE
Certificate issuer:       /CN=5dae1569613a9decaa0c38a895b5cc5479dc4640
Certificate serial:       05E5A202
Authority key identifier: 5D:AE:15:69:61:3A:9D:EC:AA:0C:38:A8:95:B5:CC:54:79:DC:46:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xa4VaWE6neyqDDiolbXMVHncRkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/c-7m78N6b-fhveNFww3U2qRnTM4.roa
Signing time:             Sat 01 Jan 2022 15:58:24 +0000
ROA not before:           Sat 01 Jan 2022 15:58:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43219
IP address blocks:        2a01:530::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98935298 (0x5e5a202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dae1569613a9decaa0c38a895b5cc5479dc4640
        Validity
            Not Before: Jan  1 15:58:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73eee6efc37a6fe7e1bde345c30dd4daa4674cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:b4:cc:0b:3d:1a:04:bc:b0:68:7b:65:c5:
                    a9:aa:96:88:9e:db:92:d0:8b:4f:3f:92:5d:82:b3:
                    df:72:69:15:2c:68:7e:5c:78:80:f2:1d:ed:ba:2b:
                    f5:d2:e0:ae:db:13:de:6e:46:3a:fa:8d:62:7a:26:
                    a2:14:47:f6:67:6a:ed:f6:63:a4:91:ea:81:ff:35:
                    1b:0f:64:e0:fe:58:70:c2:9b:7e:68:70:99:5c:12:
                    f7:ff:74:7e:54:c1:08:ec:5c:ea:75:ce:ed:93:a9:
                    d0:89:37:d9:81:fc:9d:2d:98:c5:30:63:96:08:7c:
                    3b:c4:35:8e:c1:55:b0:93:8d:90:92:f6:e3:8d:57:
                    48:54:09:07:da:98:e5:e0:ee:3e:d4:db:67:fc:28:
                    27:91:2d:bd:ed:6f:10:94:3c:18:1b:7d:f9:63:2f:
                    d6:97:cb:8e:9a:db:53:16:0b:90:e1:12:e2:30:61:
                    47:95:a7:ae:40:38:6b:ec:2b:09:d5:f3:12:80:d3:
                    b0:0a:16:04:e4:06:7a:5f:92:dc:82:60:70:e5:da:
                    be:96:31:9e:3d:56:98:c5:a2:3c:29:6d:86:94:28:
                    d9:b4:d0:f3:12:6e:0e:f1:7e:c4:cb:a0:76:c8:72:
                    3c:41:75:ab:b5:83:22:a5:f5:b9:fb:84:02:70:74:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:E6:EF:C3:7A:6F:E7:E1:BD:E3:45:C3:0D:D4:DA:A4:67:4C:CE
            X509v3 Authority Key Identifier:
                keyid:5D:AE:15:69:61:3A:9D:EC:AA:0C:38:A8:95:B5:CC:54:79:DC:46:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xa4VaWE6neyqDDiolbXMVHncRkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/c-7m78N6b-fhveNFww3U2qRnTM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/Xa4VaWE6neyqDDiolbXMVHncRkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:530::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:fe:b1:3a:05:93:86:f8:81:13:0a:d7:84:40:9f:e0:c8:e0:
         6d:47:2a:4e:d2:73:20:e4:78:2b:7e:2d:42:98:ad:d2:3f:bb:
         86:d7:72:fb:eb:b8:4d:8b:70:b3:c2:d9:75:4d:33:24:56:01:
         7d:f4:8d:fc:1d:f9:f5:72:65:58:0b:37:55:46:74:57:5a:40:
         8e:84:8d:8c:93:79:92:ed:bf:e8:fd:02:7b:20:4c:80:77:77:
         5c:b7:24:8b:b8:21:a6:07:b8:f5:6d:fb:50:39:ff:d5:b7:4b:
         13:1b:02:cb:70:da:51:2a:fa:61:c9:41:1a:62:7b:76:73:51:
         81:fb:de:45:ae:5c:55:bd:0e:82:10:c1:78:c0:47:77:a2:ac:
         83:a8:89:3d:cb:dd:d1:3e:b4:6c:2f:05:b0:41:24:2b:b5:b8:
         32:c5:c2:f3:e1:8e:ec:4a:ba:70:23:0d:23:7b:91:50:29:aa:
         08:96:d7:80:2a:98:02:14:e5:9a:cc:0c:a3:71:e9:c1:dd:a1:
         2d:24:90:a8:2e:3b:51:2b:4e:a0:be:ba:66:48:65:6e:ae:91:
         28:8d:eb:4c:10:04:17:98:0e:69:e3:b0:44:76:b9:ea:89:da:
         60:d3:a3:20:05:c0:6e:eb:cb:ab:f4:be:4f:47:32:76:e6:ed:
         e0:6b:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----