Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa
File:                     cXQ98IAg_MOjlrMvcVMLL3czuvM.roa (raw, json)
Hash identifier:          0I37AHWE55Qdg987d7GJpaknAQq0P3WWRx2iMS4Lurs=
Subject key identifier:   71:74:3D:F0:80:20:FC:C3:A3:96:B3:2F:71:53:0B:2F:77:33:BA:F3
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       018555EC8474ED4DA85EA8504D00281B75FC
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa
Signing time:             Tue 27 Dec 2022 23:30:41 +0000
ROA not before:           Tue 27 Dec 2022 23:30:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201480
IP address blocks:        2a10:4646:250::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:55:ec:84:74:ed:4d:a8:5e:a8:50:4d:00:28:1b:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Dec 27 23:30:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=71743df08020fcc3a396b32f71530b2f7733baf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:74:a1:18:c5:c4:01:80:72:66:6e:24:d0:
                    de:0b:0f:10:9d:21:a9:5f:20:0d:b2:6d:8b:da:91:
                    4d:38:da:e3:ce:51:01:0d:c7:b4:cc:b2:fa:bf:4e:
                    3b:57:0d:05:e9:b8:16:d2:14:4b:1c:0b:ba:c1:48:
                    55:a8:6f:18:7c:e5:87:4f:e6:2a:a3:4e:05:78:34:
                    35:68:fe:78:bf:c4:f2:a4:99:14:8c:99:24:2c:41:
                    0d:8d:1a:48:6d:e2:0a:8d:f4:2a:ae:12:82:9c:61:
                    c5:38:94:21:7e:ba:a2:76:5a:c1:de:0b:9e:9e:58:
                    c8:83:54:65:07:52:be:ed:47:c5:5b:23:4e:28:16:
                    e4:77:64:36:7a:73:56:55:b0:06:10:46:f3:39:89:
                    10:aa:10:0a:6d:4b:8f:b0:47:f6:03:c1:25:a5:35:
                    b5:a5:11:c5:d4:07:05:90:b8:02:01:6b:48:18:e5:
                    3a:e0:da:fb:63:07:17:16:3f:78:3c:ee:31:3a:18:
                    19:b8:6a:50:ac:53:cd:45:b4:a2:eb:a6:b3:2b:29:
                    f6:69:36:7d:96:41:62:7e:22:e5:20:c1:f2:a7:2c:
                    27:51:9f:9a:d6:40:28:f7:a2:49:50:69:9e:2e:c5:
                    82:f5:3c:51:b8:6d:d8:7a:5c:54:e7:4a:9e:90:d7:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:74:3D:F0:80:20:FC:C3:A3:96:B3:2F:71:53:0B:2F:77:33:BA:F3
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:250::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:a1:ec:cc:c8:14:0f:99:45:bc:55:e5:c0:23:47:ef:61:
         ca:48:f7:83:70:27:48:8b:ef:24:01:13:0b:f9:4b:cd:cb:2d:
         1a:70:2f:31:60:68:1b:68:ee:91:41:12:9f:27:5c:0e:a0:97:
         77:14:47:8c:ea:b4:5e:00:4e:c1:b9:16:8b:30:75:fc:ea:0b:
         5a:4b:38:0e:ac:b7:fb:0f:97:5b:ef:43:c1:6a:9b:ca:a8:6a:
         d2:30:79:b0:4a:47:10:eb:72:b8:e0:a4:d7:9d:44:58:8d:51:
         89:05:5d:ec:7c:e8:63:92:68:44:e2:04:78:e2:6e:7e:be:d0:
         d0:02:d4:5f:53:85:0e:96:79:2c:66:46:d2:b7:1b:95:f0:92:
         f2:bc:62:37:64:05:35:89:a1:89:8c:47:14:9b:f6:15:b0:fe:
         15:09:d8:c7:20:8b:23:8a:51:2d:d4:e4:80:0a:d8:bc:7a:de:
         b7:32:27:e0:be:a3:9a:6e:d5:cb:66:ed:95:5c:3b:c1:e4:b8:
         dd:c1:61:d8:b9:7f:2f:fd:91:2f:f1:14:69:3a:dc:46:dd:eb:
         08:f8:8d:06:46:31:51:50:5b:34:60:e5:a2:b0:47:41:6e:c5:
         fc:2d:96:af:ef:7c:fd:28:d5:8b:a7:0f:24:70:29:4f:57:0d:
         00:95:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----