Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/m3jNsAfx5ZuXdaqkeMcels19IIU.roa
File:                     m3jNsAfx5ZuXdaqkeMcels19IIU.roa (raw, json)
Hash identifier:          j7rT7kMUpm8cxlLk1/9EUqzhHCgig5GBVJjSjmvupRk=
Subject key identifier:   9B:78:CD:B0:07:F1:E5:9B:97:75:AA:A4:78:C7:1E:96:CD:7D:20:85
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CBEFB0
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/m3jNsAfx5ZuXdaqkeMcels19IIU.roa
Signing time:             Wed 04 May 2022 21:14:51 +0000
ROA not before:           Wed 04 May 2022 21:14:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212504
IP address blocks:        2a10:4646:140::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97251248 (0x5cbefb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b78cdb007f1e59b9775aaa478c71e96cd7d2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:f8:a2:df:9c:f6:cc:01:60:da:df:6d:56:
                    2e:7a:95:48:a7:61:7c:73:4c:93:75:83:f5:01:1e:
                    4c:11:c8:a1:9e:ab:7f:73:d5:e4:16:0f:64:7b:d4:
                    39:f5:2b:d9:df:1f:f4:7e:44:07:3e:c8:59:f3:f0:
                    3c:02:31:1d:d3:eb:07:d0:cc:89:b4:b2:b8:46:45:
                    c4:39:87:17:15:aa:2c:9f:7f:e8:2e:95:dd:60:6d:
                    a6:59:47:ad:50:41:b7:a0:a5:8e:e5:36:47:61:0b:
                    76:00:3d:e3:a6:95:b7:0f:da:7e:72:84:63:19:b6:
                    b8:0e:e0:4f:08:a1:9a:f9:07:64:e4:68:c6:3d:1b:
                    d9:c7:4f:db:7b:38:f8:8f:ad:fd:5a:8b:37:72:9e:
                    60:00:fd:95:77:1d:5d:88:fa:39:f8:31:dd:1a:ab:
                    75:6e:6f:a6:9b:1c:3b:6e:ef:90:34:91:a1:03:ca:
                    49:fa:f8:9c:5f:25:4e:29:d9:6f:c3:fa:31:e8:f1:
                    af:3c:57:10:7b:21:78:b6:bb:f5:bc:e6:53:61:d9:
                    6e:f8:72:1e:7a:b9:15:1f:7a:a9:a9:c7:3e:24:d8:
                    ad:5c:df:51:1e:8d:ba:f7:3b:14:4b:3d:45:53:2c:
                    fd:0d:d8:70:ab:f7:cf:fc:ac:fc:b6:b0:fc:0a:72:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:CD:B0:07:F1:E5:9B:97:75:AA:A4:78:C7:1E:96:CD:7D:20:85
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/m3jNsAfx5ZuXdaqkeMcels19IIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:e9:7e:e4:19:fa:da:38:c3:99:62:f9:6e:bd:6d:01:c8:80:
         74:62:6c:99:f7:54:fc:25:90:ca:b6:59:f2:c1:5d:44:b9:06:
         a3:e8:85:06:35:7e:b0:e2:d3:77:58:c6:a8:d7:5c:31:b9:a8:
         3d:9a:0a:f8:e6:4b:e5:74:b3:2e:f1:d4:4f:cf:a3:ca:73:16:
         50:34:d1:84:cc:2a:8d:4f:1b:f6:f5:2a:68:65:75:8a:df:88:
         4e:5b:89:6e:1d:f7:67:2d:34:3d:c6:d1:e9:87:84:6d:0e:dc:
         89:92:44:80:1f:2e:ed:f0:dd:94:12:73:7f:89:56:21:10:c5:
         f4:9e:d1:8a:fd:2d:69:f8:34:26:5f:a9:5b:dc:60:5b:02:80:
         0c:95:e4:a8:a9:2d:ba:20:63:c6:c2:f3:44:98:46:d6:7f:92:
         66:e8:50:02:d8:c0:e8:9b:a4:19:ce:9b:df:73:5a:a2:f3:3a:
         ba:1f:be:e3:78:47:9d:98:3f:4f:f3:be:f3:bc:79:0a:2b:14:
         0b:b2:51:c7:3a:5b:47:7f:95:c7:13:3b:50:36:1b:71:9c:4b:
         a6:7b:50:47:f9:0a:3c:bf:f0:06:f7:88:56:22:f8:3f:57:6b:
         1d:52:3b:35:08:c2:e5:a2:5d:87:75:e8:70:75:4d:8c:aa:8d:
         6b:05:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----