Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fHTa17K600H7Qq-PeeWrNemxo1s.roa
File:                     fHTa17K600H7Qq-PeeWrNemxo1s.roa (raw, json)
Hash identifier:          iqomtH6U7ue7oKgPRRYd1XHjcLzLdBf9cTPCatWd3+0=
Subject key identifier:   7C:74:DA:D7:B2:BA:D3:41:FB:42:AF:8F:79:E5:AB:35:E9:B1:A3:5B
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CA0EDA
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fHTa17K600H7Qq-PeeWrNemxo1s.roa
Signing time:             Wed 04 May 2022 21:14:50 +0000
ROA not before:           Wed 04 May 2022 21:14:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47157
IP address blocks:        2a10:4646:13::/48 maxlen: 48
                          2a10:4646:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97128154 (0x5ca0eda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c74dad7b2bad341fb42af8f79e5ab35e9b1a35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:95:cb:b2:a6:32:6b:60:8c:19:fe:7d:aa:
                    28:78:44:13:38:d5:8b:a5:4b:b7:83:5e:61:c9:79:
                    d0:ad:7c:75:c4:74:48:a1:20:c8:1c:b7:4e:a0:e8:
                    0d:ac:43:3d:df:52:7b:cc:f5:1d:53:96:17:00:35:
                    dd:31:8b:86:33:a0:2b:c5:e6:55:50:61:a3:a9:df:
                    ff:eb:b9:ed:fd:d0:45:7e:3e:cb:f1:16:d9:ca:34:
                    86:81:b8:ff:ee:74:8d:fa:a2:68:6e:67:83:8a:31:
                    c5:54:0a:c4:ca:e6:13:d6:bb:0c:f1:68:da:f7:2b:
                    1c:b6:96:a7:15:d8:bc:5e:9e:00:1a:b9:00:e0:65:
                    6e:8a:b2:75:3e:38:2f:25:c2:ac:31:69:5c:76:76:
                    97:1b:ec:06:06:2f:ff:42:23:33:b4:dc:ae:a5:d2:
                    d7:2f:ee:9b:98:06:82:2d:92:04:76:3a:22:9c:20:
                    24:77:46:7f:2d:c5:7a:00:9e:e9:12:55:69:e4:f2:
                    2a:f6:31:2c:3d:2c:fd:56:ae:05:19:e3:e8:8d:b2:
                    50:10:3b:1d:85:78:e2:b3:17:61:94:d5:f9:37:61:
                    8a:64:12:84:28:ea:b0:f3:7a:44:29:d1:72:dc:77:
                    78:c5:01:87:50:14:4e:aa:78:ac:f5:17:48:4d:c5:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:DA:D7:B2:BA:D3:41:FB:42:AF:8F:79:E5:AB:35:E9:B1:A3:5B
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fHTa17K600H7Qq-PeeWrNemxo1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         95:89:03:23:17:84:b6:04:ae:c6:9f:1e:63:3e:5e:a5:33:8d:
         a9:2d:a3:0f:23:5a:a6:68:61:df:e2:0c:ce:07:48:59:b3:b1:
         d0:a2:44:d6:e4:78:15:d4:18:8c:a9:19:61:db:d7:2b:29:01:
         af:95:c3:42:58:4d:20:1f:3a:93:67:c8:c8:70:4c:60:23:18:
         07:68:0e:c9:9e:e5:45:2d:29:74:e4:40:d1:87:cc:29:35:d6:
         6d:31:ef:9a:60:eb:25:73:54:12:1f:e1:b7:d8:ba:56:1b:cf:
         f0:50:39:5a:81:a6:88:3c:4d:54:e8:9d:60:76:c6:08:c5:0a:
         b3:a8:bc:7c:43:3b:ea:5c:55:fc:49:d4:4d:d8:ee:5d:3b:89:
         16:df:3d:33:8b:43:82:67:ca:87:bb:d3:98:c2:58:e3:44:d6:
         75:07:7c:6e:8d:78:2d:ca:6b:6f:e8:7a:61:61:7f:87:93:c9:
         67:0e:3a:67:61:dc:10:01:3c:b8:13:8c:05:c2:e7:95:03:a6:
         92:71:9a:b1:f8:bd:74:ab:5e:15:f5:3b:80:0c:a0:30:51:7b:
         4d:4a:84:68:a2:01:1b:03:ef:ef:c2:91:94:34:ab:01:34:75:
         57:07:9f:8b:be:05:a7:b5:1a:9f:57:2c:dc:a8:89:13:40:e1:
         1c:aa:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----