Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yZ3bzjxv0dwDqkejmVAwKvBSi84.roa
File:                     yZ3bzjxv0dwDqkejmVAwKvBSi84.roa (raw, json)
Hash identifier:          S5CqkT3qoeqCSjeKojaTw0Iih+yT0pUp6LwXNLbN4g4=
Subject key identifier:   C9:9D:DB:CE:3C:6F:D1:DC:03:AA:47:A3:99:50:30:2A:F0:52:8B:CE
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05385627
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yZ3bzjxv0dwDqkejmVAwKvBSi84.roa
Signing time:             Thu 03 Mar 2022 00:41:35 +0000
ROA not before:           Thu 03 Mar 2022 00:41:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48732
IP address blocks:        2a10:4646:150::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87578151 (0x5385627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Mar  3 00:41:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c99ddbce3c6fd1dc03aa47a39950302af0528bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:64:98:cb:7b:18:5f:a7:69:24:7d:4f:20:
                    8a:b7:d8:6c:87:0d:5a:11:e0:0e:0d:52:4a:0b:97:
                    48:e3:6c:6f:46:5f:23:fe:a1:07:50:82:3b:3a:5c:
                    83:d0:8d:54:24:3c:9d:c0:a0:b4:b0:c0:fa:f4:54:
                    33:a9:50:68:57:7f:05:33:6b:cf:7e:ec:ed:92:0e:
                    81:40:1a:8d:d7:21:98:9f:4d:fa:21:d2:fd:54:89:
                    77:e6:bc:f8:dc:e5:73:f0:0a:c2:4d:06:4a:43:b1:
                    af:b7:19:e2:76:a3:90:e4:3e:4c:9d:8d:87:f7:b1:
                    28:0d:db:fd:66:98:90:6c:f9:49:72:73:01:3b:9b:
                    5d:70:d9:41:4b:91:b7:a6:a0:d1:af:da:0f:45:57:
                    6d:0d:d1:9d:c1:0c:7b:a3:60:44:76:29:c4:f1:aa:
                    10:f9:ff:05:17:9e:83:a5:56:96:1c:22:b0:ff:d0:
                    c2:4c:1e:a3:33:e6:4e:7d:ce:49:46:5f:d1:c2:a5:
                    6a:0d:97:46:d5:76:7d:e4:11:11:7e:65:7b:0d:9d:
                    30:29:86:93:94:29:e2:f4:0c:b5:e2:31:f7:3b:cd:
                    27:a7:cc:c0:29:6a:37:3e:24:ee:c1:f7:92:da:3d:
                    f4:05:1a:56:70:10:3b:2b:ec:4f:e0:a1:59:66:66:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:DB:CE:3C:6F:D1:DC:03:AA:47:A3:99:50:30:2A:F0:52:8B:CE
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yZ3bzjxv0dwDqkejmVAwKvBSi84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:87:f7:22:e9:fe:2e:30:3f:ff:cc:7b:c9:f7:b2:5f:e7:59:
         5e:56:ad:e4:e1:81:7c:c9:2d:6c:1e:c3:d4:ff:20:73:e8:1c:
         1f:11:0b:c0:c4:93:a8:b0:40:06:73:2d:da:17:a2:a7:cf:3f:
         de:98:df:56:61:90:79:e9:0e:30:55:ea:17:8c:2d:b1:e0:58:
         fa:23:82:92:f9:1d:2a:1c:9c:8c:6d:e5:26:07:ba:d7:d9:7a:
         12:5f:dd:78:ad:16:70:23:29:75:07:a7:ff:7a:f4:4b:6e:c5:
         f4:99:66:00:d5:4a:24:d7:1f:33:8f:ec:91:db:a9:6e:5f:bb:
         40:67:58:a8:79:f7:7d:45:c1:cb:bf:bc:eb:80:98:1f:4d:2f:
         d8:02:b8:17:44:19:1c:50:a0:6d:c9:29:19:4c:66:20:ea:d6:
         e2:0c:3e:92:ed:f2:03:08:7d:f9:52:ef:6f:da:8e:80:92:ea:
         12:1a:e0:0b:a5:17:c2:4f:d6:89:0f:5a:36:72:8b:a8:a4:e8:
         cd:04:21:dc:aa:10:db:2d:4f:05:19:b1:a1:80:6b:3a:dd:40:
         a4:a7:8c:b1:7d:48:14:bf:11:84:cb:85:01:d9:4f:f7:bc:18:
         03:d9:7c:ee:49:9a:d1:2e:d0:af:b1:15:c1:ae:07:07:c8:d0:
         d3:12:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----