Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa
File:                     TUwHhERJL27CzrVgke3jv16vCUs.roa (raw, json)
Hash identifier:          Q+Rlt18bzcd4qfM3W5oHY32LZgBRppGKxofWG8aszqw=
Subject key identifier:   4D:4C:07:84:44:49:2F:6E:C2:CE:B5:60:91:ED:E3:BF:5E:AF:09:4B
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       049EF932
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa
Signing time:             Sat 01 Jan 2022 10:03:11 +0000
ROA not before:           Sat 01 Jan 2022 10:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52073
IP address blocks:        2a10:4646:120::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77527346 (0x49ef932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d4c078444492f6ec2ceb56091ede3bf5eaf094b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:24:3a:7f:4a:b1:2c:3e:f9:03:57:10:c1:
                    6e:a4:cd:ea:ea:09:4e:83:7d:42:98:67:fa:1c:17:
                    5d:5d:0d:cd:37:04:6b:92:7f:ee:c7:68:ec:b0:07:
                    64:8f:93:14:cf:fc:76:53:22:c6:b3:b3:00:8e:e5:
                    65:15:96:eb:57:c1:66:69:49:0e:38:f0:80:f1:80:
                    77:89:79:75:11:ec:b4:7d:d5:02:b7:fc:dc:6f:60:
                    dc:99:7d:e2:8b:51:52:07:ec:af:26:ee:4c:73:9a:
                    2a:cd:35:d5:44:ed:5d:09:eb:9a:78:ed:ee:a7:96:
                    74:dd:3b:1c:83:95:21:e7:a3:42:ab:a8:c5:43:3d:
                    15:85:b2:5f:3e:34:a9:66:30:86:68:29:64:ab:40:
                    7d:d2:f1:89:1e:4b:3f:6c:06:ec:4a:41:3a:1e:08:
                    c0:5f:c8:d5:28:73:0e:72:6a:80:14:33:b8:cc:c2:
                    3c:34:5a:11:73:29:82:c8:25:9b:d9:85:c8:7b:4c:
                    fb:11:21:26:1e:ea:85:fe:51:14:f4:75:99:a1:c6:
                    12:78:a0:41:7f:12:1c:57:4a:26:35:29:c4:68:03:
                    f5:a2:e8:f2:b4:3e:70:da:74:8a:a3:1c:e1:e4:97:
                    bc:92:7a:2a:a4:59:4b:1d:1f:53:da:b5:b6:f9:65:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4C:07:84:44:49:2F:6E:C2:CE:B5:60:91:ED:E3:BF:5E:AF:09:4B
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:77:e5:a9:67:98:45:34:08:1f:a2:0d:9f:d3:30:3c:c2:08:
         9c:15:37:19:15:e0:4b:a3:64:ad:cf:f8:70:97:ed:bf:08:eb:
         99:93:91:a0:5b:f8:de:d8:3b:75:88:b4:d2:1b:70:13:d7:3e:
         b5:ba:b7:d4:39:c6:74:1d:86:14:2c:77:11:d4:85:12:ab:c3:
         eb:b0:d5:0f:77:66:ff:ff:f1:fc:d9:ef:6d:5c:6b:27:45:04:
         b3:f1:29:c5:79:ba:e5:36:07:2e:71:d4:dd:1c:2a:b9:e3:a3:
         6e:60:0b:0f:e4:c5:ac:74:3d:f4:53:d8:33:e0:79:92:0c:79:
         b6:b6:5a:0f:85:85:5b:b8:ab:5f:45:17:12:ea:52:65:15:1e:
         e2:0b:e7:6b:e1:f5:50:a6:04:22:0f:d9:85:cd:c3:b5:b3:ab:
         da:2f:69:e1:2c:cf:a4:d6:e7:21:09:1b:67:78:04:5f:09:08:
         67:e3:9f:f8:5a:f7:c1:c9:5a:e5:53:81:49:1e:e9:e4:d4:21:
         9f:39:43:17:78:56:8b:c6:53:8f:d2:f7:75:ab:75:ba:62:69:
         3f:7f:2d:32:10:7c:7c:4f:fe:f2:e3:e9:e3:b6:91:97:01:a8:
         55:82:53:1d:05:2e:4a:60:93:97:d5:57:c6:63:57:1d:c3:82:
         cc:71:50:7b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBJ75MjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzBkMGUxNjZmYTVmMmM3ODU1YjAyNGIzNWM0N2U1N2JkYzU1NjU2MB4XDTIyMDEw
MTEwMDMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQ0YzA3ODQ0NDQ5
MmY2ZWMyY2ViNTYwOTFlZGUzYmY1ZWFmMDk0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWVJDp/SrEsPvkDVxDBbqTN6uoJToN9Qphn+hwXXV0NzTcE
a5J/7sdo7LAHZI+TFM/8dlMixrOzAI7lZRWW61fBZmlJDjjwgPGAd4l5dRHstH3V
Arf83G9g3Jl94otRUgfsrybuTHOaKs011UTtXQnrmnjt7qeWdN07HIOVIeejQquo
xUM9FYWyXz40qWYwhmgpZKtAfdLxiR5LP2wG7EpBOh4IwF/I1ShzDnJqgBQzuMzC
PDRaEXMpgsglm9mFyHtM+xEhJh7qhf5RFPR1maHGEnigQX8SHFdKJjUpxGgD9aLo
8rQ+cNp0iqMc4eSXvJJ6KqRZSx0fU9q1tvllXOsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRNTAeEREkvbsLOtWCR7eO/Xq8JSzAfBgNVHSMEGDAWgBS3DQ4Wb6Xyx4Vb
Aks1xH5XvcVWVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R3ME9GbS1sOHNlRld3SkxOY1ItVjczRlZsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvYzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8x
L1RVd0hoRVJKTDI3Q3pyVmdrZTNqdjE2dkNVcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
YzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8xL3R3ME9GbS1sOHNl
Rld3SkxOY1ItVjczRlZsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoQRkYBIDANBgkqhkiG9w0BAQsF
AAOCAQEAvHflqWeYRTQIH6INn9MwPMIInBU3GRXgS6Nkrc/4cJftvwjrmZORoFv4
3tg7dYi00htwE9c+tbq31DnGdB2GFCx3EdSFEqvD67DVD3dm///x/NnvbVxrJ0UE
s/EpxXm65TYHLnHU3RwqueOjbmALD+TFrHQ99FPYM+B5kgx5trZaD4WFW7irX0UX
EupSZRUe4gvna+H1UKYEIg/Zhc3DtbOr2i9p4SzPpNbnIQkbZ3gEXwkIZ+Of+Fr3
wcla5VOBSR7p5NQhnzlDF3hWi8ZTj9L3dat1umJpP38tMhB8fE/+8uPp47aRlwGo
VYJTHQUuSmCTl9VXxmNXHcOCzHFQew==
-----END CERTIFICATE-----