Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/ZRv304gpKexLqJvz9FFeSINyCCk.roa
File:                     ZRv304gpKexLqJvz9FFeSINyCCk.roa (raw, json)
Hash identifier:          ZJzYEo356h/EpaKn6G4Yw7pHZcaaAch94dNAgvBuJt4=
Subject key identifier:   65:1B:F7:D3:88:29:29:EC:4B:A8:9B:F3:F4:51:5E:48:83:72:08:29
Certificate issuer:       /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial:       2AA8442A
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/ZRv304gpKexLqJvz9FFeSINyCCk.roa
Signing time:             Sat 01 Jan 2022 09:03:28 +0000
ROA not before:           Sat 01 Jan 2022 09:03:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21314
IP address blocks:        2a02:28f8:fffe::/48 maxlen: 49

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715670570 (0x2aa8442a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8912e418225da95d6a21302407923ff94549572b
        Validity
            Not Before: Jan  1 09:03:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=651bf7d3882929ec4ba89bf3f4515e4883720829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:71:33:ce:07:a5:54:ce:41:b4:4a:79:c9:
                    1b:88:2c:c9:d2:d5:24:7a:cf:cd:31:1b:2a:f4:2f:
                    64:31:6d:9b:fc:fd:b6:77:c9:12:21:8b:2e:80:a3:
                    ef:dc:80:08:89:d8:c0:49:2b:fe:f3:f7:1e:7d:1c:
                    09:d7:5c:b4:78:a5:c3:7f:2f:db:4a:b6:68:9c:96:
                    3b:58:04:15:eb:85:55:f8:88:25:8e:b0:fa:69:c1:
                    65:0c:e3:11:31:07:a3:f1:ff:f5:37:03:5d:1f:0d:
                    b1:47:79:a6:b2:6b:1e:f4:74:c2:c9:99:3d:cc:31:
                    ac:4a:01:77:0b:02:3a:b8:f9:0b:a5:62:39:04:5c:
                    00:25:d4:1d:a1:da:df:5b:16:6e:7a:2c:9f:cd:23:
                    10:79:95:0f:8b:5c:a7:94:5a:e9:ef:1b:cf:8f:5d:
                    55:ad:53:13:58:d4:41:a8:02:e7:a0:6e:55:47:16:
                    0a:e6:8c:fc:b1:6d:60:17:e9:6a:2d:39:57:b0:7d:
                    68:42:ec:3b:b9:1a:eb:61:48:a1:2a:ac:10:ff:d3:
                    ce:99:3d:83:90:0b:ab:7f:c5:70:83:07:e4:33:cc:
                    c7:eb:29:68:14:c9:d8:b2:87:c2:9e:94:39:15:d5:
                    46:62:0a:36:4d:96:84:63:49:55:ca:fd:1c:a7:e2:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:F7:D3:88:29:29:EC:4B:A8:9B:F3:F4:51:5E:48:83:72:08:29
            X509v3 Authority Key Identifier:
                keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/ZRv304gpKexLqJvz9FFeSINyCCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:28f8:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:9b:2c:66:24:02:3e:3e:c1:61:37:99:c3:50:dd:95:e4:
         17:54:9a:b0:14:ba:aa:7c:82:30:29:41:75:b6:79:5f:59:cf:
         13:2f:e3:bf:a6:32:26:9d:28:52:84:81:a0:3f:38:a3:34:6f:
         da:6b:00:57:aa:bb:00:8c:08:b4:4f:40:d3:43:59:d3:d9:3d:
         01:51:75:85:5f:aa:9a:20:63:27:3b:bd:ed:ba:5a:e1:eb:c0:
         50:ec:76:32:38:40:05:a8:41:1b:f5:e3:ca:86:fe:f8:f6:6a:
         87:1d:72:ac:a2:14:76:f6:22:a4:82:16:bd:cb:5e:55:9e:1d:
         14:7d:07:19:48:ca:c8:ef:d8:92:62:58:9b:0f:74:7a:b5:e4:
         65:87:03:20:36:35:70:6e:75:b7:6a:40:bb:22:1d:24:66:f4:
         9a:7b:35:0c:85:f2:9c:2f:b3:10:5e:b1:4c:20:d3:b7:21:34:
         84:88:42:e8:38:18:bd:07:a8:a6:3a:91:33:1f:29:d1:d1:da:
         57:4f:22:50:12:5f:5d:c4:bb:1c:92:77:d6:14:8c:cb:2b:47:
         2b:80:c8:21:99:46:a6:d1:9b:b1:00:30:39:8f:98:50:9b:42:
         81:df:40:5a:56:13:c9:e4:e8:e3:ce:81:cd:72:77:23:04:88:
         3a:e9:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----