Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa
File:                     OlR5am2uiatO7gmC0OvfjmbV0ho.roa (raw, json)
Hash identifier:          wwNxI0QHVPK1H87+5g66ZUe8k81uMPi8oXF6sGkGhTQ=
Subject key identifier:   3A:54:79:6A:6D:AE:89:AB:4E:EE:09:82:D0:EB:DF:8E:66:D5:D2:1A
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04AD03D5
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa
Signing time:             Sat 01 Jan 2022 10:03:19 +0000
ROA not before:           Sat 01 Jan 2022 10:03:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212124
IP address blocks:        2a10:4646:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78447573 (0x4ad03d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a54796a6dae89ab4eee0982d0ebdf8e66d5d21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:58:bf:b1:72:da:6e:cd:9a:96:ff:55:c7:
                    2e:37:2e:d0:32:69:55:97:4e:88:b6:e0:ee:f8:69:
                    78:26:fb:dd:55:4a:b1:a0:f3:6d:0e:e4:3e:90:90:
                    bb:bb:a7:a4:ec:76:6a:af:7f:b4:03:1c:1b:98:28:
                    07:29:dd:ea:e8:37:eb:5b:d2:27:18:a2:18:90:d2:
                    b1:72:2a:01:87:22:27:3c:0c:65:87:97:77:fe:37:
                    39:a3:1a:99:6a:81:d0:53:c3:a5:01:b6:a1:46:13:
                    ab:cc:74:ac:80:c4:5a:8d:1a:db:bd:5a:c3:4c:9e:
                    63:92:2c:95:19:7f:1e:3a:ce:17:80:e2:61:c6:be:
                    a1:5a:90:01:78:a5:2f:da:cd:83:a5:bf:0e:b7:87:
                    9e:e6:3a:63:45:7e:bd:59:4e:29:6b:eb:d3:d6:b3:
                    bc:4b:3d:e9:3e:25:08:12:c0:62:8f:82:fb:2b:4b:
                    ff:fe:c3:77:53:5d:d5:3b:72:38:fb:ce:0e:93:d0:
                    0b:20:ae:df:cb:a4:81:e2:8d:89:6a:e5:f0:54:ab:
                    c4:53:e4:c6:3a:85:be:ba:82:bc:05:08:85:b3:b7:
                    7d:0e:46:04:8f:50:f9:f2:6c:60:2a:c0:c2:78:ae:
                    9e:b7:af:48:b2:2d:ed:aa:15:f8:ba:46:f9:12:f0:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:54:79:6A:6D:AE:89:AB:4E:EE:09:82:D0:EB:DF:8E:66:D5:D2:1A
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:a5:a8:ba:bf:41:ac:11:9f:42:a2:46:4f:5f:bf:91:a7:
         5c:d1:6c:df:37:cc:44:84:c1:92:c1:24:85:1e:7f:b2:12:cf:
         f1:93:e7:e0:d0:28:7f:e8:28:75:a5:44:1a:a9:42:8e:55:ac:
         f4:5c:c1:bb:6a:a4:e5:89:9d:35:20:84:97:b1:19:71:fc:32:
         0b:a7:71:4a:ee:43:9b:d9:6a:04:e8:09:d3:d2:3b:00:37:7e:
         b4:ae:28:22:d8:4c:84:29:56:5b:4f:be:3b:34:34:08:95:12:
         04:7f:96:7a:3a:13:76:e8:90:8b:d0:8c:0d:37:c4:b9:d6:06:
         ea:ff:d7:42:18:22:9b:d1:65:dc:47:56:56:f9:ed:ca:38:29:
         ec:60:ad:b6:bb:9f:f4:c2:d3:8a:d9:61:b0:b7:b4:b2:0b:8b:
         b0:79:d9:fd:87:22:cd:0c:78:37:60:a7:72:09:67:dd:e8:f5:
         ce:36:a3:de:61:eb:14:2d:d1:3e:b1:83:d3:d1:ac:cf:9e:ce:
         0c:61:27:4e:8d:6a:94:5f:94:4d:c2:74:ec:22:31:55:13:1d:
         74:e4:b1:86:29:43:7b:b9:cb:8a:9c:7e:31:2c:fd:d3:82:91:
         2c:d9:b1:fe:a3:1a:cb:c3:30:41:f7:54:73:3c:51:e3:65:8f:
         67:68:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----