Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5-7VYrERbKS4r72P52mtTlmPexo.roa
File:                     5-7VYrERbKS4r72P52mtTlmPexo.roa (raw, json)
Hash identifier:          wMh33wNDIwDI29q796CoxIgrics51rP0mVKuCm+iDPs=
Subject key identifier:   E7:EE:D5:62:B1:11:6C:A4:B8:AF:BD:8F:E7:69:AD:4E:59:8F:7B:1A
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       049EDA9B
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5-7VYrERbKS4r72P52mtTlmPexo.roa
Signing time:             Sat 01 Jan 2022 10:03:10 +0000
ROA not before:           Sat 01 Jan 2022 10:03:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50046
IP address blocks:        2a10:4647:1::/48 maxlen: 48
                          2a10:4647::/48 maxlen: 48
                          2a10:4647:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77519515 (0x49eda9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7eed562b1116ca4b8afbd8fe769ad4e598f7b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:4f:49:05:96:d8:74:a2:3c:4a:de:3d:eb:
                    16:06:14:81:b2:5b:f4:19:4c:cb:3d:c9:62:a2:87:
                    62:40:db:2f:60:a5:e7:d1:d3:ac:10:01:12:e3:d3:
                    73:97:e5:3f:3c:fd:c5:84:d3:9b:60:a0:02:4d:d4:
                    b5:7c:1a:64:3d:8e:5d:80:3e:d4:65:9a:3a:e1:a7:
                    bc:12:fb:b4:3d:7e:fe:5a:37:8e:e0:b5:0e:5a:13:
                    6d:ca:49:ff:2d:71:4f:25:48:9b:58:14:a9:ea:07:
                    b9:b0:8c:89:c4:88:61:85:52:61:e0:43:d7:d9:47:
                    0c:02:54:2a:13:11:c3:e8:cd:f1:37:2b:e6:d6:ce:
                    dc:e5:f4:5a:8d:f8:0b:68:7a:0e:bd:d7:e8:ac:37:
                    00:98:e8:d5:b4:00:46:5d:26:78:c9:c2:6f:94:28:
                    1b:bb:95:fc:4c:6e:38:a6:85:b3:c3:68:9e:5f:07:
                    a3:fb:07:14:e4:95:5d:bd:2c:2a:14:a4:9f:cb:5f:
                    4d:b2:92:a8:43:18:f7:32:82:aa:d9:10:77:2f:df:
                    33:29:a4:59:77:c5:a7:35:82:74:a5:e0:a2:6d:e3:
                    f7:b5:c5:73:49:84:96:2a:1d:27:46:e2:e4:e1:2e:
                    e9:ed:a7:d3:e4:ec:fe:50:3b:12:60:20:66:6a:38:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:D5:62:B1:11:6C:A4:B8:AF:BD:8F:E7:69:AD:4E:59:8F:7B:1A
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/5-7VYrERbKS4r72P52mtTlmPexo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4647::-2a10:4647:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:18:e2:84:23:0b:47:2c:e2:2b:b9:d5:12:f4:d1:b6:e9:
         f2:62:93:18:a7:12:cb:35:95:9e:53:b8:b7:43:ec:8b:80:47:
         52:5b:24:8e:c6:2a:84:c3:2f:2c:ad:0e:8f:51:84:e5:18:cb:
         88:fd:e0:72:90:87:fc:cf:d6:87:f4:32:9b:b6:15:81:66:45:
         a0:06:5e:f1:b1:3e:75:4f:d0:71:4a:d7:79:d9:af:94:2d:5b:
         75:0c:ae:8e:86:00:45:69:e8:9e:7f:5e:38:dd:1e:e2:ea:dd:
         86:e5:d8:17:77:04:cd:7a:2e:51:6b:74:ed:be:e1:32:6f:c1:
         28:e1:ca:a9:4f:e4:ef:ed:ee:cc:41:86:42:84:ba:51:2f:77:
         9e:e2:c9:21:65:fa:72:e9:18:7c:5b:a7:fe:4d:78:94:d3:54:
         fc:af:1c:f2:9c:e0:ea:14:54:9e:9a:8d:50:26:9b:56:c0:f8:
         f0:b8:1a:17:b2:b0:38:14:19:53:ec:a5:23:c9:00:b6:e2:9a:
         08:82:98:f9:2e:aa:c2:ad:8c:be:56:ca:63:a9:f7:0a:6a:a4:
         df:8b:13:eb:61:0f:12:80:c4:9b:5a:ef:97:0f:4a:38:c0:48:
         4c:ce:67:42:74:20:88:67:8e:6e:6b:5f:97:a2:f7:89:00:8e:
         be:6c:f5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----