Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fuxz2cUMYIiFXFjiA1y7AUcVDgY.roa
File:                     fuxz2cUMYIiFXFjiA1y7AUcVDgY.roa (raw, json)
Hash identifier:          DNoCvVT/Uq7JoWW2sBcZtvUz0lIABgTPSiw2xQC1uts=
Subject key identifier:   7E:EC:73:D9:C5:0C:60:88:85:5C:58:E2:03:5C:BB:01:47:15:0E:06
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CA71E0
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fuxz2cUMYIiFXFjiA1y7AUcVDgY.roa
Signing time:             Wed 04 May 2022 21:14:50 +0000
ROA not before:           Wed 04 May 2022 21:14:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57080
IP address blocks:        2a10:4646:1c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97153504 (0x5ca71e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eec73d9c50c6088855c58e2035cbb0147150e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:ea:08:cf:2e:d7:83:db:fc:55:b3:7e:84:
                    46:f7:7d:86:83:99:d2:fe:ec:ca:2d:83:02:14:15:
                    2c:96:11:83:8f:51:ad:0b:cf:3b:ee:c3:b7:0e:d2:
                    c4:8f:a3:f7:29:15:67:b1:94:90:b4:bd:29:38:c4:
                    f4:39:1f:e7:29:e5:9a:49:c9:7f:e4:7f:7e:5b:4d:
                    7e:5d:07:ca:16:45:f2:95:24:94:d9:f9:15:39:e4:
                    dd:32:54:24:86:c4:a6:94:3f:d4:5b:67:d8:27:27:
                    1c:c9:55:98:8c:3d:26:af:6d:e8:d5:92:bd:4d:c6:
                    bc:e6:b9:fb:61:cc:f4:dd:b5:35:5f:2d:3d:8a:f1:
                    f2:6d:fe:10:ba:5d:90:26:43:9f:54:39:30:66:d1:
                    0d:40:a9:cb:95:80:be:e2:76:00:ad:16:da:13:a3:
                    7e:d9:dd:12:dc:9a:80:31:7b:ec:d5:31:ad:a5:86:
                    43:e2:7d:cc:98:6e:d5:dc:aa:5d:f1:fc:bd:b5:9d:
                    3e:e1:90:ad:46:33:c6:f7:d8:86:27:dd:d9:5c:0f:
                    0a:78:b8:f8:e4:f7:b4:e5:f5:ec:d5:8e:41:bd:67:
                    9e:36:8a:c8:9a:da:3c:5f:81:6b:a5:18:a7:ae:d6:
                    82:cf:9c:9c:e0:9c:ef:d9:a8:18:cc:99:25:a0:91:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:73:D9:C5:0C:60:88:85:5C:58:E2:03:5C:BB:01:47:15:0E:06
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/fuxz2cUMYIiFXFjiA1y7AUcVDgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:07:06:22:de:fe:96:61:d5:5b:8a:9b:33:69:5a:b8:64:
         ec:6f:d8:3f:d7:bb:64:12:4c:97:b2:3b:ff:4d:ff:a8:3d:08:
         a9:6f:8a:ef:ce:e3:b8:02:9c:dc:26:0e:4b:18:e7:90:8c:f6:
         a9:42:c3:8a:65:99:25:e4:24:c5:3e:3a:7d:74:db:41:9f:b9:
         ad:71:10:03:44:5e:b2:8f:52:97:83:6a:5e:07:60:5b:2c:0c:
         66:78:b2:56:8e:ad:60:0b:ba:e2:57:eb:85:62:08:c4:7f:6d:
         8f:a9:52:f0:87:4b:84:a1:70:e0:0b:66:8a:11:79:91:cd:2a:
         0c:e1:01:54:36:55:69:44:ec:b5:db:0f:89:eb:98:c3:7c:5e:
         e2:a5:4e:20:7d:5d:4f:d7:a3:39:f3:d4:0e:f8:e4:65:9d:88:
         be:8b:af:03:10:2e:bb:6f:8e:7f:0b:e2:51:4f:4d:5a:50:98:
         c9:23:e7:91:6c:8a:81:2c:c9:03:96:9a:e6:65:c8:bc:33:25:
         50:7a:46:f8:65:a6:fa:7b:11:3c:6b:f1:a2:66:6d:6a:6d:fa:
         b0:df:3e:c3:89:aa:c2:35:52:e4:fb:b0:f7:32:3f:7b:02:10:
         74:a2:e7:85:8a:ea:17:92:e9:c8:ce:c1:65:54:66:cc:03:70:
         0a:d6:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----