Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/R6gyZxxtCWFtnyxJJxX2mZboYHs.roa
File:                     R6gyZxxtCWFtnyxJJxX2mZboYHs.roa (raw, json)
Hash identifier:          AmclBVX+pPAb1NjWE0hFvxsha6t8qLze5x7LdUvNMOA=
Subject key identifier:   47:A8:32:67:1C:6D:09:61:6D:9F:2C:49:27:15:F6:99:96:E8:60:7B
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       070DD6CE
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/R6gyZxxtCWFtnyxJJxX2mZboYHs.roa
Signing time:             Sat 01 Jan 2022 00:56:46 +0000
ROA not before:           Sat 01 Jan 2022 00:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212149
IP address blocks:        2a0f:85c1:40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118347470 (0x70dd6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Jan  1 00:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47a832671c6d09616d9f2c492715f69996e8607b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:19:38:dd:04:59:97:3b:b8:ce:00:3e:1e:
                    8e:94:81:25:f7:eb:7b:0e:af:c4:93:3a:2d:d1:03:
                    4c:36:dc:3a:ae:a4:1d:14:b5:8d:b2:f9:5b:72:21:
                    82:66:a5:08:20:6d:52:45:99:22:58:b8:67:a5:a3:
                    06:2e:80:2e:0b:00:10:41:fa:b7:45:3c:a0:a3:20:
                    6b:ce:ea:2c:fe:98:49:db:40:ce:6e:b1:45:47:6c:
                    07:a4:a8:15:2e:07:74:45:61:e1:b9:3a:a3:f6:a6:
                    ae:32:08:f2:79:eb:3d:7d:41:37:e0:f9:b7:67:8c:
                    8b:81:e1:ae:5e:4a:a0:5f:3e:fd:ab:26:52:ba:c7:
                    b3:01:12:85:a0:a9:f1:33:a1:8c:5f:46:73:86:c6:
                    2e:b9:54:bb:53:d9:eb:44:1f:62:f4:fe:44:f6:6e:
                    f8:d7:cb:44:88:88:6c:c2:48:16:1d:43:e0:b0:bc:
                    23:5b:c9:c8:a8:ff:33:c7:74:8a:75:9a:cf:72:1b:
                    5a:98:7a:52:bf:4d:6d:e6:9f:bf:5a:b1:56:2f:56:
                    e6:75:b7:c8:ca:72:44:3b:2c:d3:6b:1e:37:1d:c7:
                    8b:f0:29:3f:5f:e4:c3:d7:5a:1d:9b:87:16:38:f7:
                    3e:d7:09:8a:55:19:1d:a6:b4:ca:39:53:ca:e5:dd:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:32:67:1C:6D:09:61:6D:9F:2C:49:27:15:F6:99:96:E8:60:7B
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/R6gyZxxtCWFtnyxJJxX2mZboYHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:fb:9a:8a:bc:ab:2d:60:1a:92:e3:ff:8f:9c:04:c4:dc:
         af:f1:3a:06:fb:4c:61:f0:e6:1d:70:97:75:78:27:22:c9:53:
         12:bd:e1:5f:7b:d5:39:8c:e0:f1:8d:0f:87:a5:cd:e9:98:e8:
         b0:98:fa:b4:b3:04:85:a6:bc:6d:f0:82:43:36:f7:49:16:e4:
         87:5b:d8:e0:37:33:41:13:25:1b:0a:82:f1:ee:bb:e5:3c:4d:
         7d:8d:ef:7f:11:cf:82:2f:50:11:77:31:4a:f2:01:82:8e:97:
         af:0c:d0:6b:2a:c3:c2:95:39:e7:4c:a3:22:df:c2:a4:f0:2b:
         b0:c6:ec:ab:f8:dd:c4:9b:f2:f3:90:bc:0c:b1:31:97:b5:13:
         9b:de:51:18:89:b9:46:87:40:19:49:95:2e:b6:47:5f:cf:e8:
         69:c0:a0:9e:36:9a:c5:e3:86:48:b6:23:c8:42:f3:5d:91:b4:
         9f:98:cf:1a:4e:16:a4:80:de:a0:90:57:32:da:2b:35:f0:23:
         e7:19:1b:b7:6e:e4:fe:f8:af:64:d2:a1:f9:aa:a4:3c:4a:0d:
         04:74:b6:09:34:de:9d:9a:ac:fd:7b:94:80:c9:ac:e2:36:2a:
         ec:ce:a0:f1:a1:83:fb:4e:f6:13:9c:cf:40:ed:75:79:0c:10:
         70:a8:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----