Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/NWKIgc6fc9cWezSTWnr9fInCBF8.roa
File:                     NWKIgc6fc9cWezSTWnr9fInCBF8.roa (raw, json)
Hash identifier:          lGJEhKj6MqmHeR7qWO1DCECXlv+0aL6tpaljlNgr4XQ=
Subject key identifier:   35:62:88:81:CE:9F:73:D7:16:7B:34:93:5A:7A:FD:7C:89:C2:04:5F
Certificate issuer:       /CN=425c6104aae83931281e004fad5d9f76232c0978
Certificate serial:       01B20A
Authority key identifier: 42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/NWKIgc6fc9cWezSTWnr9fInCBF8.roa
Signing time:             Wed 01 Jun 2022 17:53:20 +0000
ROA not before:           Wed 01 Jun 2022 17:53:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203025
IP address blocks:        2a09:ef40::/29 maxlen: 29
                          2a02:c580::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111114 (0x1b20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425c6104aae83931281e004fad5d9f76232c0978
        Validity
            Not Before: Jun  1 17:53:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=35628881ce9f73d7167b34935a7afd7c89c2045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:44:33:df:25:6f:c1:5f:67:f7:91:6a:5b:
                    63:b2:b8:b7:c5:49:3a:27:c2:c2:02:bc:83:2f:7e:
                    a0:22:a0:d3:47:74:f2:98:c6:b4:8e:93:82:07:d5:
                    59:eb:df:ea:68:71:ee:bc:b2:eb:7a:d2:e0:d7:ff:
                    28:b8:83:ab:ac:5a:7f:66:fa:d8:7e:a4:7a:c8:92:
                    78:25:6b:e2:87:82:55:4e:ec:08:01:a9:28:4b:29:
                    95:3d:25:68:ff:d6:16:53:f5:fc:37:37:6c:5a:ed:
                    5e:95:5d:19:79:fb:5c:f2:ee:4e:6e:14:e0:c4:34:
                    f9:b4:80:55:91:a7:23:da:98:4c:1f:ef:b2:82:c7:
                    a5:c3:15:2f:ee:e1:bf:f9:4b:04:44:a4:e9:4a:84:
                    b0:9a:0f:99:97:01:7c:d8:e9:2a:c3:cd:78:ec:ad:
                    02:31:8b:6e:f9:e9:fb:11:64:0d:f3:57:1f:6b:d9:
                    2e:19:d9:23:ee:f6:18:fc:33:14:d5:08:5d:4e:e3:
                    c8:de:ac:ee:c4:73:39:9b:13:2e:cc:53:72:e9:62:
                    8f:87:d9:65:98:17:b7:ad:f9:6d:5a:a9:bf:3e:6f:
                    15:f3:69:f6:54:43:d7:e7:9e:b5:83:09:7d:eb:52:
                    54:0b:1c:1d:ba:7f:08:e3:c0:1d:4a:c1:ec:9a:5e:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:62:88:81:CE:9F:73:D7:16:7B:34:93:5A:7A:FD:7C:89:C2:04:5F
            X509v3 Authority Key Identifier:
                keyid:42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/NWKIgc6fc9cWezSTWnr9fInCBF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:c580::/29
                  2a09:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:2a:bb:57:aa:64:92:7d:f0:28:40:ec:f2:03:59:b7:72:
         42:d8:d9:3d:94:77:0e:c0:c0:5b:3d:ef:64:ae:0a:90:50:58:
         9f:f5:17:19:e6:3c:57:7b:c2:65:5b:d6:0c:cc:a9:4e:37:85:
         ab:78:67:69:5e:bd:c6:c9:27:8e:dc:a0:03:8f:26:c1:cd:b8:
         8c:cc:8a:95:cc:dd:86:6b:83:71:bd:32:9b:d1:4a:b8:5f:83:
         b8:ed:6b:dd:c8:a8:65:57:ca:ea:13:3e:04:e4:79:33:ef:5e:
         a3:78:0d:fc:21:3c:4a:9a:26:95:e8:eb:b2:9f:ab:4b:5c:2c:
         4c:66:f3:bd:4e:a5:f6:f0:de:66:2a:9b:7f:22:bf:30:d1:55:
         e7:80:d4:7f:1c:6d:3c:64:60:8c:07:7c:b8:b3:65:78:d3:92:
         c9:e0:02:42:36:26:3a:05:8a:ab:9e:a3:e7:82:89:17:28:eb:
         5e:79:77:71:1f:0c:6f:b7:91:29:dd:bf:37:ed:5b:31:1c:d9:
         68:67:22:04:f3:8b:59:60:e9:61:7c:68:b9:f3:41:46:60:08:
         0e:a2:3c:d2:92:ce:28:84:77:d1:6c:3c:59:3a:24:be:d1:8f:
         d1:7f:f5:f8:fb:39:a8:91:56:91:39:ba:c0:b6:ff:9e:3a:cb:
         95:e8:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----