Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa
File:                     GP8L0Brk6miWIr_jzrgxwfSb7pc.roa (raw, json)
Hash identifier:          5eh3fwoyj7ZQsdhbCIvKwypEwbcE25yEo3e6LGB7Bjk=
Subject key identifier:   18:FF:0B:D0:1A:E4:EA:68:96:22:BF:E3:CE:B8:31:C1:F4:9B:EE:97
Certificate issuer:       /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial:       012DC281
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa
Signing time:             Tue 08 Feb 2022 09:37:59 +0000
ROA not before:           Tue 08 Feb 2022 09:37:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34734
IP address blocks:        2a11:3880::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19776129 (0x12dc281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
        Validity
            Not Before: Feb  8 09:37:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18ff0bd01ae4ea689622bfe3ceb831c1f49bee97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:bd:97:3a:94:f9:2e:1f:e2:a3:5b:97:99:
                    3e:d5:e4:db:4e:02:c1:23:ba:fd:86:e2:5e:35:f5:
                    51:e1:76:82:4b:10:21:26:fd:84:65:f5:b3:cf:77:
                    25:48:21:4d:9f:7b:1e:c4:6b:04:c6:9d:ff:5d:ef:
                    b9:6e:4b:5e:b4:58:5a:ef:dc:3f:b4:72:3d:33:f7:
                    36:a0:ea:9e:03:56:b0:0c:bb:cc:d8:0a:2d:0c:85:
                    f6:de:b7:8b:61:eb:1e:42:f2:82:79:98:c8:d3:82:
                    39:f6:8f:78:9c:44:b4:51:a7:f8:4f:ed:6d:e9:40:
                    18:bf:6b:19:34:c5:75:01:a4:a9:88:9b:f2:8c:24:
                    ac:0e:78:4c:f6:be:2d:59:fe:5a:c0:d8:19:53:97:
                    55:6f:cb:50:29:6b:fe:f3:0c:61:70:e2:df:79:eb:
                    ee:ae:45:bb:a8:b4:ea:be:2b:00:54:4f:9e:71:ea:
                    00:a5:01:21:e0:dd:e7:00:e3:a2:d4:ae:12:27:41:
                    52:96:c9:74:e3:08:7a:a1:16:cf:0c:eb:4e:36:58:
                    08:5b:5e:f9:70:e3:8d:0a:0b:92:8a:ef:56:c8:84:
                    f1:1d:52:e6:36:f9:72:11:0e:ca:fc:e7:92:cc:88:
                    4a:bb:fd:99:1e:ae:9d:92:67:1a:cd:a8:11:b9:62:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:0B:D0:1A:E4:EA:68:96:22:BF:E3:CE:B8:31:C1:F4:9B:EE:97
            X509v3 Authority Key Identifier:
                keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3880::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:f9:56:57:61:9d:a1:5c:c3:e3:0e:01:d2:2e:19:72:e5:
         32:09:3d:5f:fa:f0:a7:1b:ba:f1:56:83:5a:79:5e:8a:c8:8a:
         df:84:ab:7a:79:08:17:25:92:82:a8:f4:dd:ea:54:2e:4a:2b:
         01:5b:67:ff:e1:6e:3a:c7:da:24:bd:96:9a:8a:27:3b:53:89:
         95:cf:92:70:d2:e4:27:de:34:b1:aa:08:5e:78:46:76:e6:1c:
         98:a6:5c:aa:b4:47:43:45:bd:de:93:08:9e:07:8c:84:51:95:
         50:2b:d4:35:77:a1:71:21:46:07:42:02:67:31:e8:e6:57:2c:
         38:4e:46:65:27:6d:0a:41:d3:8b:a3:74:b7:7d:6c:cf:77:10:
         5e:ec:a5:bb:e3:b5:12:0a:bf:9a:d4:70:7b:d1:e0:6e:7c:7b:
         70:09:e6:a1:d8:45:3a:44:4c:31:a8:7e:31:e6:2b:62:5c:7f:
         c8:39:69:b0:00:fa:80:8d:b6:96:a2:92:ab:81:12:d6:85:60:
         29:07:3a:a4:b8:53:03:b3:c1:99:31:01:28:b6:27:a7:18:6c:
         70:71:69:44:6f:30:14:04:95:5e:a8:2d:9b:f9:cb:fb:82:05:
         2e:f4:3f:3e:44:43:e1:a1:c5:95:7b:59:68:77:19:40:31:13:
         81:29:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----