Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/gJv0DBwLDSLWxXy6yH6QQA7_Ytk.roa
File:                     gJv0DBwLDSLWxXy6yH6QQA7_Ytk.roa (raw, json)
Hash identifier:          DbnK8AdHWIGAxAAEN89tiGurCjBmnLtYER/GrXC0mpY=
Subject key identifier:   80:9B:F4:0C:1C:0B:0D:22:D6:C5:7C:BA:C8:7E:90:40:0E:FF:62:D9
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       09E8732D
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/gJv0DBwLDSLWxXy6yH6QQA7_Ytk.roa
Signing time:             Sat 01 Jan 2022 04:56:14 +0000
ROA not before:           Sat 01 Jan 2022 04:56:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207480
IP address blocks:        2a06:1e82::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166228781 (0x9e8732d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 04:56:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=809bf40c1c0b0d22d6c57cbac87e90400eff62d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:4a:1a:e5:61:3a:2b:b4:84:bb:18:90:14:
                    ce:0f:b2:53:56:24:0e:86:07:d9:e5:65:47:fc:44:
                    54:26:7f:d3:03:e0:82:ce:12:e1:04:34:1e:22:e0:
                    d3:99:d6:83:e3:15:e7:9c:4b:6b:55:cf:67:76:01:
                    5b:0c:7d:30:d8:7f:1f:b7:1e:e8:f2:30:90:f5:75:
                    ae:6d:9d:97:c5:70:5b:8b:dc:41:ca:dc:25:47:62:
                    86:e0:70:22:ee:00:b5:44:7c:c9:24:91:41:4d:3e:
                    d4:a0:64:d5:e6:7e:15:9b:64:b9:07:22:09:6a:ce:
                    05:aa:e2:b4:3c:97:77:d5:8d:d3:68:e0:d8:87:e8:
                    4a:63:ef:73:41:40:fd:18:81:07:88:02:fc:70:e6:
                    38:67:3e:1f:35:2f:85:72:78:5e:6e:ba:3e:bf:33:
                    73:07:ae:a4:f8:03:2e:cb:e0:53:54:ed:a5:57:ec:
                    5b:88:49:90:84:63:fc:0d:82:2b:5a:4d:f2:9d:d5:
                    50:e9:61:a4:e7:52:7b:4e:3a:80:64:2a:01:ad:55:
                    de:66:62:2c:9f:a8:a9:53:03:5e:39:06:c2:03:03:
                    b1:db:29:7e:88:ee:55:39:c7:3b:46:66:f2:b3:83:
                    ee:6e:8c:11:ab:ba:71:de:a7:71:f5:fc:cb:28:fb:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:F4:0C:1C:0B:0D:22:D6:C5:7C:BA:C8:7E:90:40:0E:FF:62:D9
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/gJv0DBwLDSLWxXy6yH6QQA7_Ytk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1e82::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:15:eb:30:45:86:11:b4:b5:d3:40:23:e3:8c:cd:d2:a6:
         06:e3:59:3c:8d:dd:44:05:e8:3f:dc:eb:2b:ce:e9:20:3a:27:
         02:32:ff:dd:88:48:ce:6b:f3:65:cd:2d:be:25:cf:24:01:68:
         be:c7:16:09:4d:98:04:e8:c3:9f:48:c7:ae:72:4c:f5:9d:70:
         c3:c4:2d:b3:02:17:b7:5e:8d:8a:34:e2:57:48:40:6c:df:ff:
         cb:27:2b:31:0d:b0:f3:90:69:ac:65:81:ca:34:19:32:8b:ad:
         8b:5f:f1:99:55:9d:a7:30:2a:e0:05:a6:07:ab:4f:3c:43:ab:
         f2:d3:75:7b:42:f5:3f:3e:a7:57:c9:3f:d4:1a:8d:82:fa:32:
         b6:77:d3:c9:e5:ef:cd:4a:6b:98:47:24:fe:37:55:c2:12:65:
         0b:1f:af:22:84:ed:ec:43:a1:6e:93:95:0a:ef:c7:2e:e5:15:
         97:9c:a5:3d:5b:38:86:82:66:35:30:25:90:d6:ae:f6:49:4d:
         2d:da:0a:4e:38:8e:18:76:ba:3e:78:81:a2:2e:0f:9f:1d:7f:
         35:0c:9d:87:be:09:ba:b3:31:87:5e:61:7f:b0:dd:35:e3:15:
         de:7f:b8:ad:7d:80:a4:b1:90:99:15:22:ff:1d:0a:9e:64:62:
         16:8e:b9:14
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECehzLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2M4ZDhiYmYwNTc5N2E3NWE0OWM1ZDcwZjU5NzFlY2RlYzZkZDkzMB4XDTIyMDEw
MTA0NTYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODA5YmY0MGMxYzBi
MGQyMmQ2YzU3Y2JhYzg3ZTkwNDAwZWZmNjJkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO48ShrlYTortIS7GJAUzg+yU1YkDoYH2eVlR/xEVCZ/0wPg
gs4S4QQ0HiLg05nWg+MV55xLa1XPZ3YBWwx9MNh/H7ce6PIwkPV1rm2dl8VwW4vc
QcrcJUdihuBwIu4AtUR8ySSRQU0+1KBk1eZ+FZtkuQciCWrOBaritDyXd9WN02jg
2IfoSmPvc0FA/RiBB4gC/HDmOGc+HzUvhXJ4Xm66Pr8zcweupPgDLsvgU1TtpVfs
W4hJkIRj/A2CK1pN8p3VUOlhpOdSe046gGQqAa1V3mZiLJ+oqVMDXjkGwgMDsdsp
fojuVTnHO0Zm8rOD7m6MEau6cd6ncfX8yyj7mbkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSAm/QMHAsNItbFfLrIfpBADv9i2TAfBgNVHSMEGDAWgBR3yNi78FeXp1pJ
xdcPWXHs3sbdkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q4all1X0JYbDZkYVNjWFhEMWx4N043RzNaTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8x
L2dKdjBEQndMRFNMV3hYeTZ5SDZRUUE3X1l0ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
NDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8xL2Q4all1X0JYbDZk
YVNjWFhEMWx4N043RzNaTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGHoIAADANBgkqhkiG9w0BAQsF
AAOCAQEAK3IV6zBFhhG0tdNAI+OMzdKmBuNZPI3dRAXoP9zrK87pIDonAjL/3YhI
zmvzZc0tviXPJAFovscWCU2YBOjDn0jHrnJM9Z1ww8QtswIXt16NijTiV0hAbN//
yycrMQ2w85BprGWByjQZMouti1/xmVWdpzAq4AWmB6tPPEOr8tN1e0L1Pz6nV8k/
1BqNgvoytnfTyeXvzUprmEck/jdVwhJlCx+vIoTt7EOhbpOVCu/HLuUVl5ylPVs4
hoJmNTAlkNau9klNLdoKTjiOGHa6PniBoi4Pnx1/NQydh74JurMxh15hf7DdNeMV
3n+4rX2ApLGQmRUi/x0KnmRiFo65FA==
-----END CERTIFICATE-----