Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/kZMXhnvjcZIOx8WwUBaPcyw1aPQ.roa
File:                     kZMXhnvjcZIOx8WwUBaPcyw1aPQ.roa (raw, json)
Hash identifier:          OSnz+5MYBxF2bbsv6YHiVWJv/5w8v9rmlFqtRb8gtm4=
Subject key identifier:   91:93:17:86:7B:E3:71:92:0E:C7:C5:B0:50:16:8F:73:2C:35:68:F4
Certificate issuer:       /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial:       14877605
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/kZMXhnvjcZIOx8WwUBaPcyw1aPQ.roa
Signing time:             Mon 17 Jan 2022 10:28:08 +0000
ROA not before:           Mon 17 Jan 2022 10:28:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212149
IP address blocks:        2a11:5701:b00b::/48 maxlen: 48
                          2a11:5706:b00b::/48 maxlen: 48
                          2a11:5703:b00b::/48 maxlen: 48
                          2a11:5704:b00b::/48 maxlen: 48
                          2a11:5707:b00b::/48 maxlen: 48
                          2a11:5700:b00b::/48 maxlen: 48
                          2a11:5705:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344421893 (0x14877605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
        Validity
            Not Before: Jan 17 10:28:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=919317867be371920ec7c5b050168f732c3568f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:a3:cf:a7:68:9d:1e:18:12:98:d0:96:41:
                    c9:ce:b3:d0:50:0d:03:16:8f:d4:fd:5d:6a:c9:b5:
                    34:db:b9:48:d7:1a:98:c1:42:4b:50:4c:7b:17:95:
                    ec:c4:1d:3c:c1:64:fd:3b:50:8e:58:39:6c:ac:fd:
                    49:66:8f:5d:28:65:08:32:ab:96:46:e4:ae:e6:87:
                    3a:e8:93:62:b4:f3:f7:8e:c1:91:c8:dc:9f:a6:79:
                    79:f4:f2:9c:07:bd:a8:01:6c:a8:7f:72:74:f3:cf:
                    98:bf:e6:ee:70:0e:7b:eb:7e:97:83:78:67:1b:05:
                    e9:cd:0f:b3:07:8f:eb:6a:83:8d:52:bc:ab:8c:9d:
                    c3:27:1b:ef:ae:04:80:73:66:13:8a:9b:b1:49:a5:
                    20:b1:ca:5b:3b:b2:69:4e:e6:83:1f:5a:1e:30:3a:
                    d3:22:06:36:13:a7:7d:a4:4f:14:02:d5:2a:d9:8d:
                    80:b8:52:aa:e5:81:b0:ed:b4:b0:4a:6e:ac:65:12:
                    c1:24:02:62:5e:97:e3:76:14:d2:55:e4:9f:f6:08:
                    0a:a9:27:7d:32:1a:26:d3:75:ca:b3:1b:89:08:f4:
                    18:69:c9:d7:a7:9a:ad:6c:e6:48:5d:cd:a9:f9:3d:
                    65:fe:9a:af:7d:80:f0:2a:75:88:37:54:7e:04:14:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:17:86:7B:E3:71:92:0E:C7:C5:B0:50:16:8F:73:2C:35:68:F4
            X509v3 Authority Key Identifier:
                keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/kZMXhnvjcZIOx8WwUBaPcyw1aPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:5700:b00b::/48
                  2a11:5701:b00b::/48
                  2a11:5703:b00b::/48
                  2a11:5704:b00b::/48
                  2a11:5705:b00b::/48
                  2a11:5706:b00b::/48
                  2a11:5707:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:ee:fd:cf:21:54:16:14:48:45:7f:13:d7:01:e1:68:12:
         47:c4:c8:c1:45:4a:ab:d0:81:20:6c:17:a3:9f:aa:86:57:31:
         dc:6b:a8:9b:69:de:9d:3e:3a:71:64:0b:e2:b1:3c:31:e9:8d:
         d9:6f:1a:0d:0f:c7:11:47:aa:16:22:63:a1:5d:b2:65:39:6a:
         cd:b9:f6:90:53:b5:95:6b:2f:34:00:6b:2a:25:07:f4:e7:83:
         06:7c:47:94:6b:2b:43:51:33:b5:4b:0f:5b:28:fe:93:0a:ad:
         5d:69:41:05:82:bb:38:95:05:d9:13:c5:00:cb:d5:84:02:54:
         e4:d5:de:ee:55:6b:3f:6c:02:1f:f7:cd:8d:f2:f5:df:a0:b8:
         70:9e:51:53:63:8f:0c:93:0f:f8:a3:7e:73:d9:32:77:4d:65:
         25:64:24:46:58:98:96:48:0e:36:e8:82:ba:43:24:a4:be:bc:
         5b:68:d9:7c:aa:7e:7b:2b:24:bf:93:c1:3a:0e:18:aa:c8:72:
         c7:1b:3d:18:84:08:cd:52:dd:d7:00:20:d7:dd:c2:f1:d1:30:
         f1:bc:5a:53:89:c3:59:cc:6d:72:89:2d:c9:d5:0b:48:b6:ec:
         e4:d1:0c:3a:01:6b:26:4f:e7:c7:6b:81:96:74:3e:b5:d8:69:
         41:ea:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----