Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/FVNKr_jlaNctknq40f85D5UvL_k.roa
File:                     FVNKr_jlaNctknq40f85D5UvL_k.roa (raw, json)
Hash identifier:          BGUTUVEr/QS9mbcJeuDOEfz7CmAP0ez5uiNQ/UcKMxA=
Subject key identifier:   15:53:4A:AF:F8:E5:68:D7:2D:92:7A:B8:D1:FF:39:0F:95:2F:2F:F9
Certificate issuer:       /CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
Certificate serial:       01821DBF26FBA234690339B1F96EB1F18A50
Authority key identifier: F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/FVNKr_jlaNctknq40f85D5UvL_k.roa
Signing time:             Wed 20 Jul 2022 22:34:02 +0000
ROA not before:           Wed 20 Jul 2022 22:34:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59811
IP address blocks:        2a0b:8640::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1d:bf:26:fb:a2:34:69:03:39:b1:f9:6e:b1:f1:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
        Validity
            Not Before: Jul 20 22:34:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15534aaff8e568d72d927ab8d1ff390f952f2ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:b5:de:14:5e:5c:fc:4b:ea:23:ea:3c:ed:
                    b9:76:41:5b:b3:cb:99:81:82:d8:7e:e2:96:7b:42:
                    12:4e:47:7a:f7:fe:f3:f4:31:9a:0f:f5:af:c9:fe:
                    6f:ab:69:13:81:a9:7c:16:42:27:0b:6b:9d:11:e1:
                    62:0c:97:cd:6b:25:fc:1c:77:85:73:1a:63:00:26:
                    34:8c:ca:c8:e0:f4:e7:43:af:a7:82:44:47:18:91:
                    20:35:e4:b7:ec:4f:96:28:33:b7:6a:c0:0e:6d:f0:
                    04:f0:78:9d:8b:f5:c0:6e:a0:79:3b:17:d9:29:8a:
                    95:40:de:24:4f:47:34:5b:f4:84:fd:2a:a0:43:e6:
                    ac:33:59:7d:b1:4b:83:15:22:79:6a:43:c6:93:49:
                    76:5f:d6:42:e1:06:4a:3a:22:41:57:b0:9a:1b:58:
                    cc:8b:59:f9:4e:86:ae:a7:82:58:09:14:0a:cd:dc:
                    71:92:eb:e5:4f:56:63:1f:9b:97:5c:a4:6b:e1:a7:
                    42:79:d0:ac:2e:c4:f0:7e:5f:8a:ac:b1:64:b1:cb:
                    cd:05:43:a2:cf:4a:72:eb:3b:43:3a:4b:c4:f6:4d:
                    3d:bc:e1:94:e1:48:2d:02:18:95:8f:55:cc:1a:25:
                    8b:23:38:5e:50:50:c4:fc:98:d6:56:f7:1d:26:9f:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:4A:AF:F8:E5:68:D7:2D:92:7A:B8:D1:FF:39:0F:95:2F:2F:F9
            X509v3 Authority Key Identifier:
                keyid:F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/FVNKr_jlaNctknq40f85D5UvL_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8640::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:83:16:d2:8b:b6:a3:5f:2a:c4:d0:17:f6:3e:39:35:34:7f:
         66:78:1d:c0:a4:fe:64:52:b4:01:f5:32:63:62:f8:0f:ff:f1:
         78:40:97:e2:39:84:0d:4c:12:34:c0:36:c9:6c:8f:b4:93:18:
         39:62:70:0a:d1:83:85:57:ec:38:9a:9b:bb:04:be:bf:7f:a7:
         c8:b2:ed:06:54:1d:ae:bd:63:91:5f:93:4f:fd:61:77:7a:91:
         ec:a9:07:c1:28:e1:59:2c:2e:b5:65:16:75:ee:fc:2f:79:c1:
         10:0b:f6:25:8b:90:8d:b6:3b:a5:da:cb:79:dd:07:5f:c1:4d:
         ef:fd:65:25:5b:df:4f:e2:d4:84:b8:34:b3:16:be:16:ac:c9:
         75:94:62:29:48:32:71:e3:5f:af:53:4a:9a:85:5f:f5:75:7e:
         11:78:69:3a:19:d8:d9:e0:17:54:4f:ea:eb:39:66:36:36:34:
         f9:33:a2:6e:a1:31:dd:27:59:48:a2:37:d9:6f:37:c6:ad:21:
         75:13:8d:a5:8e:19:e3:b0:83:7b:c5:0e:d1:89:b0:49:5a:90:
         e6:61:7f:67:5b:8f:93:23:89:91:89:f6:64:7c:c7:c7:fd:bf:
         99:d9:f8:99:11:83:6b:9f:c0:09:4d:a7:8b:88:b2:9a:2f:d2:
         bd:c6:e4:09
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYIdvyb7ojRpAzmx+W6x8YpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2JmOTc3MTNmZjMwZDJkYzc2N2Q1MjFjZDMwYzJiOTI4
YWU3ODMwHhcNMjIwNzIwMjIzNDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUzNGFhZmY4ZTU2OGQ3MmQ5MjdhYjhkMWZmMzkwZjk1MmYyZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOu13hReXPxL6iPqPO25dkFbs8uZ
gYLYfuKWe0ISTkd69/7z9DGaD/Wvyf5vq2kTgal8FkInC2udEeFiDJfNayX8HHeF
cxpjACY0jMrI4PTnQ6+ngkRHGJEgNeS37E+WKDO3asAObfAE8Hidi/XAbqB5OxfZ
KYqVQN4kT0c0W/SE/SqgQ+asM1l9sUuDFSJ5akPGk0l2X9ZC4QZKOiJBV7CaG1jM
i1n5Toaup4JYCRQKzdxxkuvlT1ZjH5uXXKRr4adCedCsLsTwfl+KrLFkscvNBUOi
z0py6ztDOkvE9k09vOGU4UgtAhiVj1XMGiWLIzheUFDE/JjWVvcdJp+gIQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBVTSq/45WjXLZJ6uNH/OQ+VLy/5MB8GA1UdIwQY
MBaAFPXL+XcT/zDS3HZ9UhzTDCuSiueDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWIt
YjVlNGVmMzIyOTQ2LzEvRlZOS3JfamxhTmN0a25xNDBmODVENVV2TF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWItYjVlNGVmMzIyOTQ2
LzEvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKguGQDAN
BgkqhkiG9w0BAQsFAAOCAQEAN4MW0ou2o18qxNAX9j45NTR/ZngdwKT+ZFK0AfUy
Y2L4D//xeECX4jmEDUwSNMA2yWyPtJMYOWJwCtGDhVfsOJqbuwS+v3+nyLLtBlQd
rr1jkV+TT/1hd3qR7KkHwSjhWSwutWUWde78L3nBEAv2JYuQjbY7pdrLed0HX8FN
7/1lJVvfT+LUhLg0sxa+FqzJdZRiKUgyceNfr1NKmoVf9XV+EXhpOhnY2eAXVE/q
6zlmNjY0+TOibqEx3SdZSKI32W83xq0hdRONpY4Z47CDe8UO0YmwSVqQ5mF/Z1uP
kyOJkYn2ZHzHx/2/mdn4mRGDa5/ACU2ni4iymi/SvcbkCQ==
-----END CERTIFICATE-----