Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/Vj6U0UwhSZqOsuyjkHy2fG9s-44.roa
File:                     Vj6U0UwhSZqOsuyjkHy2fG9s-44.roa (raw, json)
Hash identifier:          M3gW2TNCDEalC6/esDshRUSW1j8xVivCvnFoY1e+2+w=
Subject key identifier:   56:3E:94:D1:4C:21:49:9A:8E:B2:EC:A3:90:7C:B6:7C:6F:6C:FB:8E
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04A2A987
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/Vj6U0UwhSZqOsuyjkHy2fG9s-44.roa
Signing time:             Sat 01 Jan 2022 10:03:12 +0000
ROA not before:           Sat 01 Jan 2022 10:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210864
IP address blocks:        2a10:4646:a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77769095 (0x4a2a987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=563e94d14c21499a8eb2eca3907cb67c6f6cfb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:1d:70:71:e8:df:7c:d6:46:47:6f:14:59:
                    bf:32:e2:f3:1f:b9:21:02:21:d1:b9:8c:80:d1:fd:
                    a3:17:ce:73:d2:f2:91:8a:46:68:35:d7:fa:d3:06:
                    26:4c:f5:e0:58:20:f8:de:17:24:1d:4e:2b:e3:4a:
                    c5:8f:b0:9f:34:fb:c6:b5:23:4a:cd:80:54:b8:d4:
                    80:ab:75:11:03:6d:70:26:c3:f0:d9:6b:00:99:a5:
                    25:17:9d:47:b4:c5:26:3d:14:b8:81:f3:b7:5f:44:
                    63:2e:27:ae:b2:44:cc:13:32:21:7e:31:52:32:19:
                    7b:dc:fe:a5:51:1a:41:04:bc:8b:c1:e1:0f:ea:0a:
                    6e:b0:3e:84:62:d7:5d:24:55:56:dc:95:a8:8f:fd:
                    e8:e5:9a:f6:5f:b8:84:86:85:c2:5a:89:1b:de:f4:
                    72:56:c5:06:61:a0:c0:d3:44:9f:f9:59:1a:c8:13:
                    ec:13:d9:5d:03:99:6e:99:04:68:fc:81:e7:15:4e:
                    3b:52:a0:73:52:f6:c6:a8:af:53:d3:72:76:f7:8b:
                    1d:75:49:15:47:fb:8d:40:bb:c2:34:b7:95:7b:30:
                    7f:a0:31:cc:00:ec:04:bb:00:72:ce:fc:48:1a:58:
                    90:fd:f6:ef:3a:62:4a:84:c5:e9:1c:5d:d2:d4:88:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:94:D1:4C:21:49:9A:8E:B2:EC:A3:90:7C:B6:7C:6F:6C:FB:8E
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/Vj6U0UwhSZqOsuyjkHy2fG9s-44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:03:e5:79:4a:82:73:c6:9e:a4:83:45:71:c2:ab:ee:99:
         59:03:c1:8d:7c:9e:c1:b0:22:1b:79:3a:4f:15:13:d0:2a:c7:
         cf:cb:4f:79:36:7e:36:81:f3:a9:2e:27:76:62:73:4c:c2:47:
         75:ff:b9:49:61:8a:ac:33:66:c7:54:5b:d4:3d:4d:f4:a1:3c:
         51:08:45:5e:d3:20:5f:0b:22:a3:74:32:45:c3:98:32:56:62:
         20:63:c2:49:e9:b5:01:92:a3:70:77:a3:76:22:3a:fc:f0:c9:
         77:e9:03:3f:46:90:3e:e3:63:4e:cb:45:4a:62:11:e4:5e:e6:
         0a:e4:a5:16:0f:85:b6:94:78:50:7c:13:ea:5d:36:74:cd:2c:
         f6:9b:bc:b7:6a:1d:8b:61:cd:9d:1e:36:0e:e5:be:5b:3d:ba:
         34:57:cb:b5:9a:c1:5a:aa:64:d8:c1:d7:ce:f3:f4:57:e8:0f:
         1d:84:73:3c:be:ca:8c:a5:16:ac:e1:df:54:04:24:05:2e:4c:
         c0:54:47:e8:be:f1:2e:03:3b:58:ef:0f:11:9e:67:8c:82:fd:
         35:fd:ee:b2:24:17:5c:c8:c6:3e:d5:6a:e2:67:4b:19:8f:f1:
         78:19:72:7c:89:c4:0a:9a:75:9f:49:56:99:eb:88:d6:e1:80:
         4e:0b:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----