Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/YRxlMVlGhWO971WHby39Ki8_GP4.roa
File:                     YRxlMVlGhWO971WHby39Ki8_GP4.roa (raw, json)
Hash identifier:          tVE3OeMSxbiKqo2jeX3DwHw2wM45NZa0KHSGGaJy8mE=
Subject key identifier:   61:1C:65:31:59:46:85:63:BD:EF:55:87:6F:2D:FD:2A:2F:3F:18:FE
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04ACEE0C
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/YRxlMVlGhWO971WHby39Ki8_GP4.roa
Signing time:             Sat 01 Jan 2022 10:03:18 +0000
ROA not before:           Sat 01 Jan 2022 10:03:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212106
IP address blocks:        2a10:4646:60::/44 maxlen: 44
                          2a10:4646:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78441996 (0x4acee0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=611c653159468563bdef55876f2dfd2a2f3f18fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:ec:87:73:83:34:af:bc:c6:60:0a:e6:0e:
                    d2:7e:cf:b9:a0:3a:8d:c3:50:60:8b:3c:93:ae:57:
                    39:45:bd:79:12:0a:1b:1a:64:a1:96:bf:64:42:3b:
                    86:21:07:19:b5:57:c1:71:f4:c9:fe:65:d8:4e:20:
                    1f:cf:16:8e:1e:f0:9e:3d:72:f9:7d:65:77:16:a2:
                    3c:08:c4:b4:b9:fb:9e:16:a4:39:ef:ba:95:6e:84:
                    43:d9:78:76:d0:e6:5c:50:60:ac:cd:aa:a3:c1:98:
                    00:6c:ea:ae:ca:f9:e6:b5:8b:a4:df:79:db:a2:5c:
                    85:41:f7:29:de:37:e4:c2:5b:60:3b:9c:b8:dc:8d:
                    29:30:60:cc:52:75:0e:e3:5a:b2:fd:a7:c9:bf:7e:
                    b5:2a:db:ef:bc:64:29:10:a3:ca:55:ea:cb:0c:38:
                    e3:55:f9:f5:bc:3c:0b:23:e8:68:d7:d1:85:b7:6f:
                    63:db:7b:a9:3f:e6:7c:b0:40:ae:51:ac:a5:0f:d1:
                    07:f4:74:95:ed:d3:2b:71:c2:8a:33:cf:3d:bf:27:
                    a0:3d:bd:2f:43:c5:b3:8d:f2:0f:31:ff:30:7c:13:
                    30:ee:f2:e5:28:85:3f:82:95:00:5a:b9:d2:10:91:
                    f8:a2:89:e2:30:30:b1:ec:45:2f:fb:ec:22:82:cc:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:65:31:59:46:85:63:BD:EF:55:87:6F:2D:FD:2A:2F:3F:18:FE
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/YRxlMVlGhWO971WHby39Ki8_GP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:11::/48
                  2a10:4646:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:29:a5:4f:e7:a2:c3:69:2f:21:87:37:f2:c0:77:2c:42:
         96:2f:3c:ff:f2:e5:15:03:85:d5:7e:7d:03:69:bf:24:34:95:
         9a:9e:0d:e3:56:22:cc:03:a2:96:3f:39:7c:b3:a8:37:f6:8d:
         02:a7:2c:2c:96:29:7b:26:06:9b:9b:b0:df:eb:3c:27:ec:fd:
         d1:97:bc:2c:57:4c:72:ef:22:71:91:60:71:36:c7:43:0c:50:
         ef:14:f6:22:67:d4:b6:b1:36:24:63:ef:4c:0b:f1:af:d3:ea:
         11:26:0a:9d:9f:d8:70:c6:6b:f2:77:57:7a:21:b2:31:90:38:
         cc:f9:4f:9b:88:a2:28:31:0a:d2:a3:f7:52:ec:3e:47:61:6f:
         ff:06:79:e9:78:dc:41:80:3c:10:b7:85:fc:0b:dc:b9:cd:8a:
         1b:8e:87:b6:e7:19:a7:0a:44:c7:14:8e:7b:ae:21:47:1e:4d:
         5b:18:fd:8a:0b:95:5b:37:51:87:89:80:50:9b:61:c8:e0:2f:
         e7:2a:de:15:74:b5:2c:0b:e3:d7:b3:24:c4:5f:12:4c:7a:4c:
         14:f1:bb:10:47:b9:76:52:be:b8:9a:3e:2b:73:92:ab:aa:f6:
         66:16:57:f0:e2:d1:f0:0e:e0:ee:01:2f:27:21:fc:af:70:aa:
         a3:60:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----