Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/EN3MNkNt7j31eN1EfJHxy4P_EI4.roa
File:                     EN3MNkNt7j31eN1EfJHxy4P_EI4.roa (raw, json)
Hash identifier:          K19Im1+38WGLtUSzA0EaBr0QrkwQ5s1VrmbkB2wkBTQ=
Subject key identifier:   10:DD:CC:36:43:6D:EE:3D:F5:78:DD:44:7C:91:F1:CB:83:FF:10:8E
Certificate issuer:       /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial:       27E6B1B5
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/EN3MNkNt7j31eN1EfJHxy4P_EI4.roa
Signing time:             Sat 01 Jan 2022 13:00:22 +0000
ROA not before:           Sat 01 Jan 2022 13:00:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15557
IP address blocks:        2a00:e880::/32 maxlen: 32
                          2a00:5e80::/32 maxlen: 32
                          2a00:cc80::/32 maxlen: 32
                          2a00:c780::/32 maxlen: 32
                          2a00:b280::/32 maxlen: 32
                          2a00:8380::/32 maxlen: 32
                          2a00:d780::/32 maxlen: 32
                          2a00:ec80::/32 maxlen: 32
                          2a00:e080::/32 maxlen: 32
                          2a00:8d80::/32 maxlen: 32
                          2a00:ba80::/32 maxlen: 32
                          2a00:a580::/32 maxlen: 32
                          2a00:7180::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669430197 (0x27e6b1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
        Validity
            Not Before: Jan  1 13:00:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10ddcc36436dee3df578dd447c91f1cb83ff108e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:83:46:a3:e9:e5:42:73:00:c2:67:7d:ab:
                    92:58:cb:4e:f8:f4:09:cf:e2:f1:09:57:e2:1f:02:
                    65:0b:47:8c:22:1e:e5:f1:df:82:4d:db:01:fe:a7:
                    60:55:25:1f:13:24:e0:53:9f:23:fd:28:a4:82:b5:
                    97:80:4e:54:ac:e6:3e:42:93:cc:19:3d:8a:c0:e2:
                    44:a7:73:72:4c:06:3f:44:93:76:b7:fe:28:25:ab:
                    ed:10:c9:8e:84:00:a5:6e:5d:03:70:24:35:37:83:
                    c4:43:9b:f6:9e:d4:1a:3a:2b:7a:49:7e:19:21:99:
                    fe:a7:6f:41:7f:53:1d:4e:d5:ba:37:06:c0:3d:22:
                    3e:3c:ba:89:b1:55:82:9f:11:c0:64:17:5f:b7:f3:
                    ba:9c:77:f1:3a:70:26:87:39:5f:29:de:5c:a5:0c:
                    00:a5:b3:04:02:c3:f5:62:53:5b:50:46:06:ac:ae:
                    6f:7d:b9:2a:be:0f:ab:e1:b8:d2:40:3e:40:2b:18:
                    ee:b8:64:55:88:96:a3:94:dc:01:27:fc:45:58:9d:
                    a7:ac:26:1d:4b:99:72:48:e6:12:83:76:59:f5:85:
                    3f:a9:b2:01:82:93:2e:6a:f8:32:ce:8d:92:49:3b:
                    98:eb:6f:b6:1c:e5:23:b5:93:c3:21:2a:1e:c7:b2:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:CC:36:43:6D:EE:3D:F5:78:DD:44:7C:91:F1:CB:83:FF:10:8E
            X509v3 Authority Key Identifier:
                keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/EN3MNkNt7j31eN1EfJHxy4P_EI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:5e80::/32
                  2a00:7180::/32
                  2a00:8380::/32
                  2a00:8d80::/32
                  2a00:a580::/32
                  2a00:b280::/32
                  2a00:ba80::/32
                  2a00:c780::/32
                  2a00:cc80::/32
                  2a00:d780::/32
                  2a00:e080::/32
                  2a00:e880::/32
                  2a00:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:fa:76:8d:f0:16:a3:90:5a:c2:0a:70:fd:39:8a:0e:30:
         d9:b7:d3:d1:4a:dc:2a:90:fc:88:a8:d2:9f:e9:6f:a3:86:62:
         58:b9:44:e1:d0:c3:23:9b:4c:fb:04:c9:df:00:ce:7a:03:c3:
         eb:42:6c:bd:7d:47:92:eb:97:e9:34:5c:47:aa:b9:51:ef:5f:
         70:cf:db:68:95:95:38:f2:da:08:62:91:3f:e2:94:fa:11:a1:
         32:21:90:92:a7:22:f9:c3:c5:ab:65:a7:be:de:17:58:f1:7c:
         4b:f5:10:18:1e:0c:7d:93:34:1e:4f:59:53:71:1e:c3:cc:cc:
         dd:68:c4:2a:74:ea:a0:9a:63:8a:da:07:65:14:b1:0a:c9:a8:
         ef:d6:3a:6d:79:14:5a:84:e7:6b:af:5f:bc:11:43:c0:c0:6b:
         1c:b3:d8:74:4c:90:4e:86:9d:b4:66:ad:61:07:8a:d9:3d:63:
         ba:1c:ee:f9:8f:37:99:fe:43:25:e6:00:4b:71:de:e3:59:ae:
         41:2e:dd:98:c7:97:89:8e:fd:f0:fa:56:66:e9:68:c2:00:bc:
         a6:88:84:f2:60:76:6f:8f:35:35:d5:6e:89:dd:06:cf:8d:3c:
         2c:06:b9:02:dd:a5:f0:bb:31:60:4a:80:36:06:e2:47:b0:1a:
         cd:b2:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----