Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/bPg6sbrgG5itAldkamQj6Ly6s6k.roa
File:                     bPg6sbrgG5itAldkamQj6Ly6s6k.roa (raw, json)
Hash identifier:          Qxg/V5CCSGS62eRZcEGd4ZpKBTgftSKTLOrkEULA+kU=
Subject key identifier:   6C:F8:3A:B1:BA:E0:1B:98:AD:02:57:64:6A:64:23:E8:BC:BA:B3:A9
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CBE135
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/bPg6sbrgG5itAldkamQj6Ly6s6k.roa
Signing time:             Wed 04 May 2022 21:14:51 +0000
ROA not before:           Wed 04 May 2022 21:14:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211448
IP address blocks:        2a10:4646:190::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97247541 (0x5cbe135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6cf83ab1bae01b98ad0257646a6423e8bcbab3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:ee:a9:13:1a:d8:6f:6b:7c:b6:f1:14:b2:
                    a3:5a:17:ec:67:e8:cb:02:a7:5b:53:3c:e0:bd:71:
                    87:ba:e0:87:64:73:21:8b:5e:fe:7a:ab:1d:94:df:
                    63:e4:a5:e3:b7:52:96:63:bb:82:0b:1c:5b:bf:33:
                    76:c4:91:dd:0c:4f:cb:75:48:9b:9b:49:f8:b1:0a:
                    95:31:70:1c:71:cf:6b:37:8f:81:05:96:f0:a6:da:
                    54:21:96:46:12:01:44:01:cc:ad:19:bc:dd:f5:ac:
                    27:cb:ab:cc:d2:80:89:78:14:71:f8:a9:06:f7:f2:
                    12:0a:08:55:e8:6f:bf:d6:50:10:64:ae:ed:8e:e4:
                    d4:e7:77:0f:f5:27:fb:0a:79:73:af:ec:21:08:a5:
                    8a:71:63:dd:ee:3f:6f:1c:b1:b9:17:6d:d8:53:d7:
                    18:8d:1d:18:39:0d:2d:d3:af:99:47:28:97:f1:12:
                    b1:1b:f2:86:46:3e:68:da:1e:7a:26:9a:bf:03:67:
                    5d:9c:27:c9:05:20:0a:5b:33:89:13:53:f7:7d:2d:
                    d8:99:0e:04:4b:a9:ea:53:44:d1:ee:5f:ac:81:3e:
                    d4:94:9a:c5:a9:c4:1d:52:e9:b5:aa:bd:6b:0d:f6:
                    88:f9:69:72:7f:0e:21:2b:9b:4a:dc:b0:5c:db:82:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:3A:B1:BA:E0:1B:98:AD:02:57:64:6A:64:23:E8:BC:BA:B3:A9
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/bPg6sbrgG5itAldkamQj6Ly6s6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:190::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:34:62:9e:f7:fb:b2:3e:a3:87:32:48:85:56:a1:33:54:
         09:cc:d3:6a:4d:05:8c:88:2e:68:a4:43:e2:de:74:6d:9a:d5:
         ed:cf:07:56:e5:c7:d3:c4:04:da:4b:7b:ac:19:0b:df:b4:2f:
         a9:fd:fd:85:10:b9:ed:69:49:00:34:39:56:e0:8d:74:8c:31:
         8c:e8:24:f8:e9:5c:89:ae:b4:34:55:2b:75:ba:a1:a7:11:df:
         88:23:c1:0b:7c:14:f0:e1:74:79:29:04:3d:ff:70:63:2e:fe:
         63:90:03:a9:42:52:b8:5a:93:69:f5:27:50:8f:a3:5b:5e:8e:
         61:77:24:59:96:de:b9:de:aa:78:46:5b:1a:17:b9:6f:84:d6:
         ec:35:ce:39:9a:de:7d:5e:b0:1f:9d:14:47:3d:41:c8:16:51:
         6c:8e:3c:cb:40:be:8e:2a:19:70:8d:66:50:ca:26:33:71:42:
         51:99:94:a8:f9:71:0a:1c:20:e3:de:00:77:99:6e:57:10:d5:
         d6:8b:36:98:90:cb:94:28:e3:49:b5:6f:b1:53:e1:92:46:13:
         e5:51:cf:34:58:61:92:70:a5:3b:13:e4:89:fc:56:58:12:a4:
         2c:94:4e:f5:eb:18:96:c2:9b:64:a8:11:8f:35:fa:86:34:26:
         98:cd:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----