Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/69YRUw4uDXoIZTYfxBrfjgU8uoY.roa
File:                     69YRUw4uDXoIZTYfxBrfjgU8uoY.roa (raw, json)
Hash identifier:          vrziGAu/ijWezPP/OFLDOx7dBR23mPAd7zHUaNrdFtA=
Subject key identifier:   EB:D6:11:53:0E:2E:0D:7A:08:65:36:1F:C4:1A:DF:8E:05:3C:BA:86
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       018471E068E47C5F9C24929F02E46E0E21DA
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/69YRUw4uDXoIZTYfxBrfjgU8uoY.roa
Signing time:             Sun 13 Nov 2022 16:44:03 +0000
ROA not before:           Sun 13 Nov 2022 16:44:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212815
IP address blocks:        185.171.202.0/24 maxlen: 24
                          2a10:4646:200::/44 maxlen: 44
                          2a10:4640::/48 maxlen: 48
                          2a10:4640:1::/48 maxlen: 48
                          2a10:4640:4::/48 maxlen: 48
                          2a10:4640:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:71:e0:68:e4:7c:5f:9c:24:92:9f:02:e4:6e:0e:21:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Nov 13 16:44:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebd611530e2e0d7a0865361fc41adf8e053cba86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:c7:b7:64:10:d7:fa:d1:94:8c:3f:30:0c:
                    ec:f8:ca:b0:81:86:6f:68:d2:13:ad:17:2f:8e:78:
                    62:05:77:78:3e:d4:df:5e:2d:4a:17:87:4c:a4:67:
                    38:07:f3:12:15:ee:be:6f:55:20:b8:1f:c8:11:9a:
                    87:cc:9d:cb:ee:89:9f:a1:b6:cc:64:e8:05:c2:b8:
                    f3:7f:cd:67:32:16:54:2b:f3:72:9c:56:94:d6:ea:
                    d5:ec:1d:05:09:40:f6:74:05:59:d9:ac:dc:9f:0f:
                    a5:f9:ea:38:1d:fa:83:23:f3:1b:d2:92:b4:f5:c8:
                    94:53:72:95:1f:40:91:4b:cb:81:6d:44:b5:56:8f:
                    8b:51:78:d0:f0:ad:14:a6:cf:8b:dd:62:b6:ab:fb:
                    68:c5:4b:1c:5a:41:48:47:37:79:a8:35:2f:70:90:
                    27:7f:27:ae:14:d8:36:f6:6b:d1:8a:09:51:9c:ad:
                    ae:4e:36:12:de:28:62:ed:cf:26:3e:84:f1:53:a1:
                    89:01:68:e9:c3:b8:7c:20:99:60:eb:44:ef:e8:8d:
                    5b:e9:a7:ca:12:b7:15:60:79:ed:07:e9:bf:ad:56:
                    1b:aa:10:ed:bd:a5:ae:c3:40:81:dc:08:85:0d:fe:
                    cd:7b:c6:45:e2:49:a0:95:c8:25:d6:6e:f9:71:d1:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D6:11:53:0E:2E:0D:7A:08:65:36:1F:C4:1A:DF:8E:05:3C:BA:86
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/69YRUw4uDXoIZTYfxBrfjgU8uoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.202.0/24
                IPv6:
                  2a10:4640::/47
                  2a10:4640:4::/48
                  2a10:4640:ffff::/48
                  2a10:4646:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:46:12:56:e0:e5:80:7c:ee:2b:f1:3f:04:2f:10:d1:26:
         e6:66:e6:27:d9:5b:15:22:d3:6d:f7:c2:d5:b3:a0:3d:4c:bb:
         47:24:7e:a4:36:de:77:87:cf:ba:67:87:35:3e:da:61:29:2d:
         0c:cd:ec:83:85:2e:61:e5:f3:55:87:6b:ae:89:d4:9e:41:d6:
         27:8b:df:e2:83:06:48:6a:33:8f:f0:60:80:9c:9e:64:5c:54:
         3a:26:f3:2a:44:67:b6:2d:8f:c8:4e:b5:3d:9a:91:31:e2:aa:
         a4:1c:8d:bf:ba:94:6d:63:0f:4d:da:08:8d:db:98:04:0c:09:
         59:7d:56:8a:0b:f6:bd:3b:cc:fb:24:c0:03:3a:23:2c:13:1b:
         d2:b3:6c:09:22:e9:66:e3:5f:07:ee:33:d4:24:a4:11:b3:03:
         be:fa:9e:a1:20:d2:93:ad:9f:d1:76:31:0e:22:27:e5:36:7c:
         ff:b8:01:a1:4f:36:68:de:0e:7c:c6:7f:22:fe:b9:c0:61:f1:
         19:22:b2:79:b6:06:02:f4:59:98:95:75:6f:67:77:35:83:fb:
         a4:a8:ae:30:3f:ba:f5:a6:dd:2e:c9:a8:87:86:cb:f1:10:6c:
         ed:1f:7c:ea:98:3a:a6:c4:fc:ba:07:00:8e:5c:2b:a9:85:27:
         a8:f5:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----