Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/6Jm952KwrG24mRMe6v9k43bSe2M.roa
File:                     6Jm952KwrG24mRMe6v9k43bSe2M.roa (raw, json)
Hash identifier:          z9kP2uwbDOVtv5N2sNLxeeSm/XdPx3G2HskxStt2NmA=
Subject key identifier:   E8:99:BD:E7:62:B0:AC:6D:B8:99:13:1E:EA:FF:64:E3:76:D2:7B:63
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       049F2917
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/6Jm952KwrG24mRMe6v9k43bSe2M.roa
Signing time:             Sat 01 Jan 2022 10:03:11 +0000
ROA not before:           Sat 01 Jan 2022 10:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208029
IP address blocks:        2a10:4645::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77539607 (0x49f2917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e899bde762b0ac6db899131eeaff64e376d27b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:5c:31:12:85:d8:14:8e:69:d1:7f:b7:98:
                    74:f2:f4:59:5d:7a:d6:4d:12:b7:d4:93:f2:99:74:
                    b9:01:4c:4c:67:d0:f1:f9:38:ff:6e:10:79:5b:89:
                    96:05:9b:f4:cf:d5:c1:ac:2f:bf:4f:2b:48:97:98:
                    9a:9f:23:70:cf:40:ed:e4:bb:3f:6a:b8:73:0e:d0:
                    78:e4:03:e4:f4:67:1b:ce:36:d1:af:c3:c9:c6:91:
                    ab:23:e4:fa:3e:eb:77:96:79:bf:6c:dd:bf:fa:0e:
                    b0:af:dd:0b:5d:c2:36:8b:55:89:98:cb:5c:7f:6b:
                    73:87:c3:bf:6e:12:18:26:47:d4:0e:71:d9:34:33:
                    52:f0:91:08:e7:bd:02:93:29:fe:eb:2d:e2:53:84:
                    c1:b8:7a:1d:48:2c:69:4e:bd:8d:75:a3:45:af:73:
                    75:16:7b:88:e6:24:59:f6:e1:fd:2b:10:c9:94:5c:
                    fe:91:de:b1:eb:c7:e1:90:9d:f7:d1:29:4c:4a:26:
                    a3:50:35:f1:14:0d:78:25:22:b4:d6:0f:e7:9f:1b:
                    63:f8:a6:da:64:77:9e:8d:32:c7:5c:bc:bf:bc:58:
                    2f:ba:11:2f:db:22:b4:5b:a7:b4:97:b3:1f:d8:fa:
                    29:5a:6f:f7:1c:65:f1:99:80:f5:d3:49:0b:fc:23:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:99:BD:E7:62:B0:AC:6D:B8:99:13:1E:EA:FF:64:E3:76:D2:7B:63
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/6Jm952KwrG24mRMe6v9k43bSe2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4645::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:aa:a7:0c:95:05:1b:1e:eb:ca:96:9e:e3:3e:7b:b8:f3:
         2c:b5:b2:21:14:0f:76:38:88:5f:b3:a0:68:46:70:36:fd:b6:
         57:1b:d0:ad:0d:87:c3:67:dd:18:ef:47:22:4b:6d:9c:1e:90:
         c1:12:a4:5e:a7:1f:cf:ec:2d:b2:61:2a:00:18:5c:d3:bf:2b:
         23:7f:fe:ff:00:74:15:ce:d6:7b:99:a4:11:33:2a:6f:25:47:
         a4:31:99:f3:f5:41:e4:9b:b8:a1:42:a3:5a:02:16:8b:6c:2a:
         dd:16:3c:5d:89:4e:0d:b1:0b:74:7c:3e:01:ac:4e:04:86:bd:
         a9:11:31:8f:36:6b:43:67:14:48:4d:8a:bc:47:e4:a8:f2:dd:
         17:b6:c2:21:77:50:16:3c:f7:c8:6d:6c:2c:f2:1b:32:ee:70:
         38:6f:85:b6:e0:94:d4:98:b7:33:a0:15:61:1e:6b:04:77:cd:
         51:8a:0a:c0:2b:bb:24:79:b3:a6:b0:d2:cd:e5:aa:1d:9c:b7:
         15:9a:d1:3e:ac:be:f4:16:10:e3:c4:26:59:a4:c1:08:94:b7:
         e7:8c:27:f5:08:62:e9:d0:51:a4:2f:c5:ac:be:f8:39:d7:d1:
         73:50:9e:3a:33:4d:59:33:43:3d:70:b2:a1:db:03:49:49:b9:
         4b:81:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----