Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Lr4TmkcLk03efbKIqoSZcc4AUw8.roa
File:                     Lr4TmkcLk03efbKIqoSZcc4AUw8.roa (raw, json)
Hash identifier:          GSQRThEdaPyGP2C3Po0R6rIrDUlGqVKG6WrxI1Zxsv4=
Subject key identifier:   2E:BE:13:9A:47:0B:93:4D:DE:7D:B2:88:AA:84:99:71:CE:00:53:0F
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       07A73067
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Lr4TmkcLk03efbKIqoSZcc4AUw8.roa
Signing time:             Wed 02 Mar 2022 15:29:00 +0000
ROA not before:           Wed 02 Mar 2022 15:29:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209401
IP address blocks:        2a0f:85c1:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128397415 (0x7a73067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Mar  2 15:29:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ebe139a470b934dde7db288aa849971ce00530f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:b4:c2:7c:3d:c8:db:56:9b:dd:c5:99:3b:
                    b2:45:96:11:a2:bb:df:09:0d:ed:d0:a5:00:4a:91:
                    84:db:60:17:29:d5:bd:84:f1:9a:7d:5d:57:62:59:
                    7e:0b:06:45:b4:fd:1b:e3:c0:86:91:9d:ea:ee:b7:
                    65:4c:e6:ea:e7:82:f1:97:c1:db:36:0b:81:0f:fd:
                    2b:bc:a1:b2:2f:20:6d:90:ba:86:29:cd:cf:0f:89:
                    85:0c:89:10:81:5f:83:72:20:e4:56:25:9c:94:6e:
                    10:45:2a:c8:a6:0a:32:46:9b:85:ec:4d:7f:37:54:
                    84:7c:24:3e:6a:0e:b9:70:6f:af:18:f1:9d:a0:c4:
                    d0:43:51:db:8c:6a:48:73:ae:7c:f0:e5:59:52:cf:
                    18:63:45:c5:3b:11:f0:4e:d4:9f:a9:52:c5:3a:a9:
                    d2:e9:2a:b0:38:89:48:68:e8:43:ba:36:bd:93:6f:
                    a0:e4:45:df:dc:3b:d3:55:05:e2:d0:fa:d3:06:7e:
                    b1:4a:c4:f8:b3:4d:e3:de:80:fe:57:e2:69:b8:f1:
                    75:58:97:b6:bc:f9:8b:92:cb:75:f7:19:cf:b9:4a:
                    e5:43:09:f3:0b:06:6e:c8:da:42:85:33:57:6e:bd:
                    b8:d1:5b:01:67:f7:36:bd:3a:b4:09:6d:05:50:c9:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:13:9A:47:0B:93:4D:DE:7D:B2:88:AA:84:99:71:CE:00:53:0F
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Lr4TmkcLk03efbKIqoSZcc4AUw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:fc:a6:24:bb:76:17:52:28:34:6f:4a:60:b8:98:b6:a5:
         8b:66:d4:ab:f2:ad:5f:1f:19:14:8b:84:d5:0e:4e:e2:2b:0c:
         0c:9a:71:d6:07:8c:b9:81:c1:72:f9:90:8e:84:54:f4:3d:9d:
         fe:34:be:28:f9:b8:ea:d8:3c:0d:2e:e2:a6:26:48:56:f1:dc:
         3f:43:0e:1b:6d:10:45:bc:5a:85:e3:02:a4:da:32:46:fc:f5:
         15:0f:1c:93:6b:33:ef:5d:0b:45:78:14:f3:30:c4:ce:90:8c:
         b8:b4:13:a7:3b:8a:fc:62:16:52:43:12:af:63:38:62:a1:56:
         74:71:e0:2c:a3:b0:b0:e5:96:51:94:eb:a5:91:63:95:a5:f2:
         82:99:0d:54:26:87:7b:30:83:b3:15:8e:34:cf:f8:71:0c:e0:
         c8:16:da:47:48:21:81:77:76:de:a8:31:ae:d6:85:b5:35:4f:
         56:b0:77:1a:32:03:19:ad:f6:0d:a3:0a:e8:7b:63:8e:5e:ec:
         59:33:72:a5:b3:0b:99:ab:a0:90:92:7c:e9:da:3d:57:03:71:
         18:63:a9:49:fb:db:ad:f8:f7:48:d8:28:05:2c:8d:19:0e:8c:
         e9:e9:68:f3:34:a2:9b:26:d8:39:0e:7e:11:e9:37:24:4b:24:
         57:97:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----