Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa
File:                     rMjh7OIhGyncPXj0UIarEO3B-EU.roa (raw, json)
Hash identifier:          rGJvuIWrUZnilWSNaFLMjX9pr/5w4TW+rLWCwZnnIRU=
Subject key identifier:   AC:C8:E1:EC:E2:21:1B:29:DC:3D:78:F4:50:86:AB:10:ED:C1:F8:45
Certificate issuer:       /CN=672b4a95678d98d408e3788e822f84a74d7738ef
Certificate serial:       01856B81068DF99EFA91B6CD5E5BB3D086FD
Authority key identifier: 67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa
Signing time:             Sun 01 Jan 2023 04:04:56 +0000
ROA not before:           Sun 01 Jan 2023 04:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200774
IP address blocks:        2a00:58c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:81:06:8d:f9:9e:fa:91:b6:cd:5e:5b:b3:d0:86:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672b4a95678d98d408e3788e822f84a74d7738ef
        Validity
            Not Before: Jan  1 04:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acc8e1ece2211b29dc3d78f45086ab10edc1f845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:60:5d:9b:12:65:bb:5f:fc:d0:99:8a:98:
                    f5:57:ef:41:7a:4b:71:ad:52:b4:bb:09:8d:c3:a9:
                    69:d4:94:69:7b:fd:4a:47:79:4b:1f:c6:fe:17:c0:
                    49:cb:be:05:22:3d:13:52:af:d7:e7:c7:2c:e2:78:
                    b4:4d:15:d5:f3:02:57:33:0c:ce:9d:8e:33:d8:58:
                    ae:33:80:fa:97:99:ff:8b:5c:7f:f1:88:ac:e6:7a:
                    b6:8f:81:93:3b:b5:18:a2:1d:13:f7:71:a1:1c:5e:
                    1e:af:2c:26:28:a1:4b:bd:f0:a0:f8:4a:45:ab:9d:
                    62:77:b9:32:46:36:ea:9e:9f:93:33:ac:b1:13:2e:
                    20:1f:ac:4f:8a:55:2e:06:8e:8d:bb:d3:bd:94:e2:
                    22:79:6e:3f:f4:b7:20:83:f8:53:87:96:b3:bf:27:
                    f8:ed:f1:da:43:04:59:03:60:23:b4:06:4b:f7:59:
                    91:68:70:d6:f5:52:dc:1c:c9:a5:8c:93:7c:06:ea:
                    d5:98:e1:6b:ec:e4:b7:99:48:c9:c5:65:77:bc:b7:
                    ec:ee:29:40:a6:da:5f:f0:61:39:8c:e4:67:57:9d:
                    77:7d:cc:97:90:8f:af:fa:00:11:8d:78:7d:dd:cc:
                    85:20:8e:8b:1a:97:61:c1:ec:ba:ed:7c:83:f3:25:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:E1:EC:E2:21:1B:29:DC:3D:78:F4:50:86:AB:10:ED:C1:F8:45
            X509v3 Authority Key Identifier:
                keyid:67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/ZytKlWeNmNQI43iOgi-Ep013OO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:58c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:8b:63:f1:02:fa:5e:c0:97:32:1b:e6:51:a1:7a:57:4d:
         91:f9:22:f9:69:15:b6:83:34:cd:0d:4b:c4:2e:1a:5c:1e:c0:
         a0:b2:0e:c4:e9:35:5d:9c:ff:d6:5b:e3:62:27:cb:71:5d:f9:
         fc:e9:64:06:d7:60:7b:4c:8b:29:c3:15:59:54:3b:bb:e0:64:
         22:4f:16:b4:08:ec:dd:fd:14:c9:a6:bc:fc:d8:5d:6a:c7:e6:
         cb:f9:2a:20:6c:89:56:f6:bf:d0:d0:77:87:1a:0d:52:ae:75:
         e1:61:ce:64:38:39:93:20:d2:10:3b:80:76:de:50:e8:8a:70:
         89:d3:35:8c:5e:22:95:73:ce:b2:7e:3c:2c:8c:a7:94:2c:be:
         49:84:e9:4c:15:47:c3:8b:05:b3:da:55:d3:d3:7c:91:8c:c7:
         47:a5:c1:65:1e:fb:4b:e5:b2:e0:74:3a:86:fb:6b:55:d8:84:
         6e:97:8f:ec:a5:81:20:0e:4c:43:f7:0e:8c:2b:13:24:73:b5:
         b4:74:a9:9c:96:35:90:31:9e:39:0b:e0:22:be:8a:c6:e8:08:
         77:a1:9e:bd:a0:71:36:bc:b3:4a:17:ef:88:40:5c:ab:cc:e6:
         65:92:5f:9e:52:46:96:db:c6:73:75:2c:8f:01:94:68:f3:a0:
         84:39:ee:7b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVrgQaN+Z76kbbNXluz0Ib9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmI0YTk1Njc4ZDk4ZDQwOGUzNzg4ZTgyMmY4NGE3NGQ3
NzM4ZWYwHhcNMjMwMTAxMDQwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2M4ZTFlY2UyMjExYjI5ZGMzZDc4ZjQ1MDg2YWIxMGVkYzFmODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo1gXZsSZbtf/NCZipj1V+9Bektx
rVK0uwmNw6lp1JRpe/1KR3lLH8b+F8BJy74FIj0TUq/X58cs4ni0TRXV8wJXMwzO
nY4z2FiuM4D6l5n/i1x/8Yis5nq2j4GTO7UYoh0T93GhHF4erywmKKFLvfCg+EpF
q51id7kyRjbqnp+TM6yxEy4gH6xPilUuBo6Nu9O9lOIieW4/9Lcgg/hTh5azvyf4
7fHaQwRZA2AjtAZL91mRaHDW9VLcHMmljJN8BurVmOFr7OS3mUjJxWV3vLfs7ilA
ptpf8GE5jORnV513fcyXkI+v+gARjXh93cyFII6LGpdhwey67XyD8yWD3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKzI4eziIRsp3D149FCGqxDtwfhFMB8GA1UdIwQY
MBaAFGcrSpVnjZjUCON4joIvhKdNdzjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnl0S2xXZU5tTlFJNDNpT2dpLUVwMDEzT084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80YmQzNWMtMWUwZi00NWRjLWE0MTkt
ODYwMTRiMDY0YTYzLzEvck1qaDdPSWhHeW5jUFhqMFVJYXJFTzNCLUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy80YmQzNWMtMWUwZi00NWRjLWE0MTktODYwMTRiMDY0YTYz
LzEvWnl0S2xXZU5tTlFJNDNpT2dpLUVwMDEzT084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBYwAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCaWItj8QL6XsCXMhvmUaF6V02R+SL5aRW2gzTN
DUvELhpcHsCgsg7E6TVdnP/WW+NiJ8txXfn86WQG12B7TIspwxVZVDu74GQiTxa0
COzd/RTJprz82F1qx+bL+SogbIlW9r/Q0HeHGg1SrnXhYc5kODmTINIQO4B23lDo
inCJ0zWMXiKVc86yfjwsjKeULL5JhOlMFUfDiwWz2lXT03yRjMdHpcFlHvtL5bLg
dDqG+2tV2IRul4/spYEgDkxD9w6MKxMkc7W0dKmcljWQMZ45C+AivorG6Ah3oZ69
oHE2vLNKF++IQFyrzOZlkl+eUkaW28ZzdSyPAZRo86CEOe57
-----END CERTIFICATE-----