Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OaLnFvn8_wgdt2iaH5BV1NF4yLc.roa
File:                     OaLnFvn8_wgdt2iaH5BV1NF4yLc.roa (raw, json)
Hash identifier:          +CBwdnzc3KB4bg4GWVsB9ymkLmoYVhK5KVbsN+X7eaE=
Subject key identifier:   39:A2:E7:16:F9:FC:FF:08:1D:B7:68:9A:1F:90:55:D4:D1:78:C8:B7
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       049DB769
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OaLnFvn8_wgdt2iaH5BV1NF4yLc.roa
Signing time:             Sat 01 Jan 2022 10:03:08 +0000
ROA not before:           Sat 01 Jan 2022 10:03:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39091
IP address blocks:        2a10:4646:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77444969 (0x49db769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39a2e716f9fcff081db7689a1f9055d4d178c8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:c7:f3:22:30:94:fc:46:2a:24:bd:27:64:
                    a5:91:7c:36:8a:1d:ca:bf:69:03:ca:40:80:bc:6e:
                    37:2f:29:b9:fd:07:5e:9a:b6:0f:b0:0e:f4:de:a2:
                    8d:32:55:30:d5:c3:c2:5a:ef:e0:61:3c:67:7e:1f:
                    13:23:ac:58:29:33:4f:3a:3d:80:46:c8:e2:d8:33:
                    f3:be:c8:b6:83:2d:d4:2b:f8:3a:97:14:15:88:47:
                    d5:c7:cb:c0:75:ce:1f:a6:76:4b:5a:ed:a2:23:e7:
                    7b:fd:b7:7f:23:ca:9d:68:23:04:bb:89:ca:69:56:
                    61:b6:6c:a9:ed:35:6e:66:3e:fe:ae:85:6f:c2:1c:
                    e6:f3:d9:56:1f:73:38:59:7c:22:98:4a:ea:61:c7:
                    77:ff:56:cf:33:80:5b:e3:9f:44:bc:79:dd:71:4c:
                    5d:bb:5b:36:f3:70:58:fb:8d:9a:8f:2e:d7:d9:bc:
                    1c:5f:93:d2:7b:b6:8b:71:32:e7:79:ff:e3:e9:10:
                    41:95:4d:0b:f9:c0:f8:bb:36:8b:c2:58:8d:7d:92:
                    dc:e9:8d:5f:f9:3b:3e:8a:f0:fa:da:0d:d9:71:cc:
                    03:4b:4b:61:32:26:fc:57:d1:92:ac:b9:1f:1f:62:
                    0c:0b:2f:a5:6c:d1:91:c8:ae:d3:e0:4c:9b:33:08:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:E7:16:F9:FC:FF:08:1D:B7:68:9A:1F:90:55:D4:D1:78:C8:B7
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OaLnFvn8_wgdt2iaH5BV1NF4yLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:a6:0f:a5:94:a3:4f:6e:75:bc:3a:71:02:ac:10:ba:1e:c1:
         60:3c:ca:dd:b2:f1:12:bd:88:0d:87:93:47:d0:aa:5a:29:8a:
         67:ba:43:6c:64:f6:08:5b:90:7f:d6:cc:d8:52:79:2a:d9:1a:
         d0:79:7d:c3:f2:e4:ff:61:7c:4d:55:ff:26:38:70:fb:bc:cc:
         15:45:71:21:88:98:b1:ff:0e:4f:81:b4:63:ab:c2:07:e3:b0:
         e8:40:49:b8:f4:fb:3c:33:47:da:49:0f:21:af:f5:11:00:bd:
         08:17:1d:b7:2b:6d:5d:90:a4:a9:62:c5:d6:f7:f2:17:0e:5e:
         6f:78:6c:34:41:db:67:59:da:5d:ab:68:c5:63:fc:d8:4a:54:
         24:46:b3:d3:67:72:6c:7a:55:46:38:66:fc:dd:f6:b2:08:7f:
         db:6c:71:2c:b5:78:e7:d1:f1:06:b5:6a:ba:eb:2f:88:b6:b4:
         18:b9:47:3a:d7:62:30:95:96:51:ef:45:5b:a6:cc:5e:64:5f:
         60:54:4a:3a:b3:74:8c:e3:d2:84:03:66:60:97:c2:5b:02:44:
         bb:06:a2:02:8f:78:96:4c:e4:5c:69:1d:10:d4:c4:7e:c8:93:
         c5:08:0e:4f:4e:08:15:45:2a:24:e4:6e:e4:92:27:8a:e0:39:
         c0:1f:96:21
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBJ23aTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzBkMGUxNjZmYTVmMmM3ODU1YjAyNGIzNWM0N2U1N2JkYzU1NjU2MB4XDTIyMDEw
MTEwMDMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzlhMmU3MTZmOWZj
ZmYwODFkYjc2ODlhMWY5MDU1ZDRkMTc4YzhiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3Wx/MiMJT8RiokvSdkpZF8Noodyr9pA8pAgLxuNy8puf0H
Xpq2D7AO9N6ijTJVMNXDwlrv4GE8Z34fEyOsWCkzTzo9gEbI4tgz877ItoMt1Cv4
OpcUFYhH1cfLwHXOH6Z2S1rtoiPne/23fyPKnWgjBLuJymlWYbZsqe01bmY+/q6F
b8Ic5vPZVh9zOFl8IphK6mHHd/9WzzOAW+OfRLx53XFMXbtbNvNwWPuNmo8u19m8
HF+T0nu2i3Ey53n/4+kQQZVNC/nA+Ls2i8JYjX2S3OmNX/k7Porw+toN2XHMA0tL
YTIm/FfRkqy5Hx9iDAsvpWzRkciu0+BMmzMIaPkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQ5oucW+fz/CB23aJofkFXU0XjItzAfBgNVHSMEGDAWgBS3DQ4Wb6Xyx4Vb
Aks1xH5XvcVWVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R3ME9GbS1sOHNlRld3SkxOY1ItVjczRlZsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvYzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8x
L09hTG5Gdm44X3dnZHQyaWFINUJWMU5GNHlMYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
YzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8xL3R3ME9GbS1sOHNl
Rld3SkxOY1ItVjczRlZsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoQRkYACTANBgkqhkiG9w0BAQsF
AAOCAQEAAaYPpZSjT251vDpxAqwQuh7BYDzK3bLxEr2IDYeTR9CqWimKZ7pDbGT2
CFuQf9bM2FJ5Ktka0Hl9w/Lk/2F8TVX/Jjhw+7zMFUVxIYiYsf8OT4G0Y6vCB+Ow
6EBJuPT7PDNH2kkPIa/1EQC9CBcdtyttXZCkqWLF1vfyFw5eb3hsNEHbZ1naXato
xWP82EpUJEaz02dybHpVRjhm/N32sgh/22xxLLV459HxBrVquusviLa0GLlHOtdi
MJWWUe9FW6bMXmRfYFRKOrN0jOPShANmYJfCWwJEuwaiAo94lkzkXGkdENTEfsiT
xQgOT04IFUUqJORu5JIniuA5wB+WIQ==
-----END CERTIFICATE-----