Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/sMxwbordcOAMyAyxD9DLbRLCmvk.roa
File:                     sMxwbordcOAMyAyxD9DLbRLCmvk.roa (raw, json)
Hash identifier:          3r1/5trUn2hzh8yyZiwYIxIWBlEInMy1yARTr1urbI4=
Subject key identifier:   B0:CC:70:6E:8A:DD:70:E0:0C:C8:0C:B1:0F:D0:CB:6D:12:C2:9A:F9
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       078A9C85
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/sMxwbordcOAMyAyxD9DLbRLCmvk.roa
Signing time:             Sat 19 Feb 2022 21:25:58 +0000
ROA not before:           Sat 19 Feb 2022 21:25:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209188
IP address blocks:        2a0f:85c1:200::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126524549 (0x78a9c85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Feb 19 21:25:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0cc706e8add70e00cc80cb10fd0cb6d12c29af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:0d:23:9c:c7:aa:bc:db:a5:ad:52:16:21:
                    fe:57:05:b8:7e:64:df:e6:d1:0e:f3:b8:a5:99:3e:
                    90:fd:11:4d:c7:8b:c6:0b:f3:59:d7:f8:ce:c2:06:
                    45:ad:9d:95:e5:92:7e:35:e4:a0:84:f7:50:6e:51:
                    30:aa:ef:98:66:e2:9c:9c:7f:70:5d:be:bf:3b:4b:
                    36:ef:55:a9:d3:4d:be:7a:cf:d5:0a:38:44:ce:c3:
                    d6:9d:c8:ad:70:b8:1c:e8:af:3d:35:3b:21:bd:b5:
                    f0:8b:c5:7e:8a:00:6d:b7:d3:9f:0b:3b:98:ff:e9:
                    f5:4f:cb:12:bc:04:c0:06:ca:2b:a9:21:ca:2f:42:
                    98:2c:0c:1b:5a:c1:20:1b:e6:f4:70:02:a2:0d:8f:
                    f2:51:50:c6:50:18:72:27:44:04:0f:39:50:30:38:
                    17:5a:63:d5:a7:26:05:be:6a:35:ed:e5:b4:ef:8e:
                    6d:61:ce:37:a1:22:2b:a0:78:fa:41:2d:9d:9e:66:
                    b7:e7:86:17:a3:16:af:c2:43:a9:44:c1:e9:8d:ce:
                    ee:7b:4f:49:f7:cf:d6:63:37:2c:1c:3f:80:58:38:
                    cb:55:ed:f8:cd:bd:dc:fb:71:df:97:91:c4:b1:30:
                    71:ae:81:ed:66:08:ca:2d:52:b3:4f:08:90:90:e5:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CC:70:6E:8A:DD:70:E0:0C:C8:0C:B1:0F:D0:CB:6D:12:C2:9A:F9
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/sMxwbordcOAMyAyxD9DLbRLCmvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:14:2f:f9:79:5b:34:a3:fb:e7:f8:df:01:e5:cd:6f:54:
         cc:6e:53:49:2d:d1:c3:06:42:ad:59:0d:3f:d7:f5:7f:d0:28:
         a5:e0:14:4b:3d:42:42:da:89:62:54:86:f5:e1:ad:1c:d8:73:
         97:46:8c:cd:47:77:21:c3:bb:dd:94:e7:cc:70:b7:54:93:7b:
         a8:69:76:e1:42:06:7d:fd:3c:a2:eb:71:ce:c9:78:6a:57:ce:
         a3:14:64:53:21:51:f3:64:e2:c9:6c:96:f4:60:c9:32:90:60:
         37:82:49:13:b5:44:a4:d2:aa:e8:77:b5:25:0a:4d:55:86:da:
         18:f7:c1:e2:f5:98:81:4b:7a:54:37:b2:f7:a9:90:82:95:19:
         86:33:30:01:11:0c:b8:44:d9:4c:f3:dd:0b:b7:6c:ea:cc:92:
         fc:23:ae:77:17:db:db:cb:4b:af:39:91:ad:23:7e:f6:f0:7e:
         0c:8b:d7:4a:48:42:34:e7:f1:c1:f6:a2:88:38:26:e6:59:db:
         7e:c0:40:9a:16:f1:2f:b3:a0:4c:58:33:b3:54:9f:44:23:b1:
         a9:3f:0b:7f:15:0d:6a:c4:8e:1d:e5:d0:24:34:ea:f1:b5:9c:
         1b:bf:27:92:14:10:8b:fd:c9:65:76:5b:91:0b:56:5a:2b:d1:
         4f:ba:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----