Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/ijGKrwJFAduTmwI79Lnm9uSCZGg.roa
File:                     ijGKrwJFAduTmwI79Lnm9uSCZGg.roa (raw, json)
Hash identifier:          Sx+uaPqZOLrh47bDMvPuLR2qytNY7xZXqxqSpu3jH88=
Subject key identifier:   8A:31:8A:AF:02:45:01:DB:93:9B:02:3B:F4:B9:E6:F6:E4:82:64:68
Certificate issuer:       /CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
Certificate serial:       0182F88D3F9BFB2B451F562E14909542E739
Authority key identifier: A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/ijGKrwJFAduTmwI79Lnm9uSCZGg.roa
Signing time:             Thu 01 Sep 2022 10:16:22 +0000
ROA not before:           Thu 01 Sep 2022 10:16:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208069
IP address blocks:        2a0f:bf00:40::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:8d:3f:9b:fb:2b:45:1f:56:2e:14:90:95:42:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
        Validity
            Not Before: Sep  1 10:16:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a318aaf024501db939b023bf4b9e6f6e4826468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:a4:24:35:6b:b3:33:2f:93:5e:1f:6b:8c:
                    e3:dc:7e:03:91:95:00:7a:b6:4e:bf:4b:f6:36:47:
                    43:3f:b0:7e:b3:77:cc:f0:3a:72:9d:f0:58:af:7b:
                    d2:2f:dc:ae:a2:dc:c7:7c:ce:3e:c9:11:80:46:1f:
                    7e:02:65:5f:69:07:cd:a1:ee:e4:43:19:03:67:0b:
                    4b:06:63:76:1f:fd:68:ec:08:c0:7a:ea:e0:a2:41:
                    44:f2:5a:d0:38:1b:12:48:26:9d:94:36:3c:4a:94:
                    c9:d4:65:f1:22:d7:a8:d4:6c:91:5d:e5:e6:d6:71:
                    96:e6:c1:7c:52:3c:51:ca:fd:e0:df:27:8e:2a:d6:
                    85:fa:b6:a4:f2:27:76:04:0e:80:ff:08:56:40:80:
                    5b:61:4c:cd:60:01:d6:ea:1b:06:48:bd:d4:57:ab:
                    b5:2a:7b:53:7d:c0:de:03:e7:81:1a:e0:b0:2c:6a:
                    fa:8b:e0:6f:e7:0e:6f:14:fd:21:27:15:0d:96:ac:
                    bc:0e:b0:ba:b0:ab:59:19:31:4c:58:30:ee:af:16:
                    ea:2e:2c:b6:1e:74:61:d1:cf:4e:4b:b3:63:69:63:
                    fc:bc:24:a8:3f:a7:f4:5b:7f:d5:ff:f6:58:cd:e4:
                    fb:d3:e5:f8:ce:2f:86:6d:ed:32:5a:97:da:5a:6c:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:31:8A:AF:02:45:01:DB:93:9B:02:3B:F4:B9:E6:F6:E4:82:64:68
            X509v3 Authority Key Identifier:
                keyid:A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/ijGKrwJFAduTmwI79Lnm9uSCZGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:bf00:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         b2:61:8d:84:f3:40:b6:75:1e:76:ea:02:24:68:53:3d:1f:3e:
         4b:7d:56:3f:56:69:fe:59:66:36:47:29:4a:7a:4f:7a:b1:8a:
         5d:c8:87:de:21:d1:05:a2:1f:4d:d5:45:83:3b:bb:94:68:c8:
         c0:db:9c:f5:cc:86:bf:d1:fd:74:99:74:e4:44:06:cd:69:da:
         f8:10:14:73:4c:dd:5e:5e:50:81:96:a9:3e:4f:40:39:62:c3:
         58:17:94:c8:82:cc:21:a6:a8:57:0c:68:47:6d:5f:68:ed:9d:
         f1:d7:33:ff:a2:3b:7c:8b:8e:e4:a7:b2:ba:85:42:eb:ac:07:
         cd:f1:99:67:da:89:98:25:c0:b9:07:59:cf:2b:5b:c9:20:e7:
         2b:9b:a1:20:c6:29:e0:8a:cd:80:f3:82:a6:ab:c6:49:ec:ad:
         c9:c5:bd:a0:88:9f:5b:8a:63:86:af:f9:8e:e4:fb:5f:63:f8:
         94:a0:9d:8b:da:da:99:8a:a0:e0:d4:10:67:63:c6:1d:6f:91:
         55:2d:15:c8:18:ed:a1:2f:d3:6a:d1:20:a1:14:43:cf:36:f2:
         2b:cd:eb:59:7e:87:9d:5b:95:f2:f4:bc:f9:ca:85:6e:b3:7f:
         09:24:73:6e:97:9a:3a:15:c7:41:51:50:4c:4c:f3:0a:1e:cb:
         70:3c:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----