Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/tin_EjxzwYLlmZwYvFz1MDJZ0X4.roa
File:                     tin_EjxzwYLlmZwYvFz1MDJZ0X4.roa (raw, json)
Hash identifier:          tEpjJs9ANd0pyqXT62fCaVK3gP7yoZkRsfbrdfK3neg=
Subject key identifier:   B6:29:FF:12:3C:73:C1:82:E5:99:9C:18:BC:5C:F5:30:32:59:D1:7E
Certificate issuer:       /CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Certificate serial:       07911E92
Authority key identifier: 27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/tin_EjxzwYLlmZwYvFz1MDJZ0X4.roa
Signing time:             Sat 01 Jan 2022 06:59:51 +0000
ROA not before:           Sat 01 Jan 2022 06:59:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210274
IP address blocks:        2a0d:51c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126951058 (0x7911e92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
        Validity
            Not Before: Jan  1 06:59:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b629ff123c73c182e5999c18bc5cf5303259d17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:63:11:2b:40:b6:41:cd:52:d3:3f:94:8a:
                    4b:c6:01:48:1e:a4:1d:f8:c0:58:78:ed:25:6b:84:
                    83:da:3a:2d:3b:40:3b:d3:82:57:2c:df:f9:61:3a:
                    95:4b:bb:1f:64:9b:b9:5f:5e:2a:53:56:30:f7:b2:
                    98:ff:41:14:82:0f:6d:da:ee:f6:48:b6:33:d1:0f:
                    96:ba:b7:b5:70:b4:34:48:00:41:ec:e0:b3:1f:5c:
                    93:94:54:9f:31:c3:68:29:6e:90:e0:d8:f5:a5:ff:
                    45:88:13:8f:fb:27:83:12:1e:87:a6:b8:43:d5:f4:
                    59:77:c2:2b:d5:4f:55:23:f2:f6:9c:14:8c:97:a8:
                    4c:29:2d:c2:fb:96:d1:e1:51:6c:78:c1:19:3b:f7:
                    1c:57:50:ca:86:fa:58:8d:95:5e:b7:11:fa:c5:82:
                    f2:ca:10:73:0d:1e:b6:22:2e:e3:c0:15:36:38:ab:
                    56:61:05:aa:db:be:92:f5:21:9f:20:4e:81:47:e2:
                    0f:ee:05:9a:19:45:bc:7c:52:8a:0e:f9:b3:24:ca:
                    7b:d6:5b:14:e2:81:0a:38:07:93:6a:ad:ce:32:39:
                    6b:a3:c5:32:17:ec:0d:93:7e:5f:af:1b:44:0d:10:
                    b0:b8:eb:0d:78:1a:be:9a:df:f4:f3:dd:7c:47:0a:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:29:FF:12:3C:73:C1:82:E5:99:9C:18:BC:5C:F5:30:32:59:D1:7E
            X509v3 Authority Key Identifier:
                keyid:27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/tin_EjxzwYLlmZwYvFz1MDJZ0X4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:51c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:91:cb:73:82:e6:6b:ae:78:32:16:6b:27:7a:84:ea:06:
         fd:f3:3d:98:c8:01:df:d7:09:22:e0:f6:99:ad:d2:2e:be:34:
         4b:37:5c:42:be:9a:0b:bc:00:92:7e:9b:67:86:2a:84:55:a1:
         23:f8:8e:4a:71:16:8c:c1:df:d0:02:00:1a:1e:0b:54:46:8a:
         74:f1:dd:f5:e3:a0:98:8e:22:8b:0b:b2:2c:8a:01:84:a9:5e:
         45:e3:7f:15:d4:c0:6c:93:c7:c8:e0:74:c7:90:71:c1:cf:55:
         86:a5:ca:e6:bc:04:4e:c1:3f:5d:58:86:a2:08:1d:fb:81:2f:
         71:14:9e:c0:0e:1f:72:35:b2:e5:37:bd:f7:c6:68:ee:62:b4:
         43:a0:3e:f1:6b:75:53:94:9f:90:e8:50:20:2e:24:15:3c:b5:
         e5:35:5c:94:86:91:18:d5:00:b3:aa:4a:4e:f4:4c:b0:42:64:
         bf:e8:c5:46:60:a9:13:ff:04:a1:4a:24:d3:66:be:7b:d7:cc:
         ff:4c:0d:7d:00:98:67:b5:12:57:23:db:07:6b:cc:ee:65:37:
         19:c7:08:a5:d2:46:4f:70:11:ed:63:2e:a8:e6:96:a5:7d:a3:
         ff:cf:19:f7:1a:41:a1:5e:43:f6:02:2e:eb:b3:53:bf:3b:81:
         c5:5f:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----