Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa
File:                     QKKJOYZyUsQgfoxKwias4vZR9Gw.roa (raw, json)
Hash identifier:          1hX1zdgQjJ7+Izqp0hnI9EbboHF8kvPuj6CpWhJsdkQ=
Subject key identifier:   40:A2:89:39:86:72:52:C4:20:7E:8C:4A:C2:26:AC:E2:F6:51:F4:6C
Certificate issuer:       /CN=0de110c435d6e68631ca1f5b9b844ac7aa275720
Certificate serial:       A6D08A
Authority key identifier: 0D:E1:10:C4:35:D6:E6:86:31:CA:1F:5B:9B:84:4A:C7:AA:27:57:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DeEQxDXW5oYxyh9bm4RKx6onVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa
Signing time:             Sat 01 Jan 2022 13:00:04 +0000
ROA not before:           Sat 01 Jan 2022 13:00:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:c300::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10932362 (0xa6d08a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de110c435d6e68631ca1f5b9b844ac7aa275720
        Validity
            Not Before: Jan  1 13:00:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40a28939867252c4207e8c4ac226ace2f651f46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:b9:dc:2d:e9:ee:d2:6a:c1:40:5e:c3:d4:
                    a2:ec:17:70:e9:ec:6c:c1:d8:05:d6:e2:b1:47:f7:
                    3a:0a:a1:49:ab:d3:f4:36:7e:93:0f:07:de:73:7b:
                    9d:fd:03:bb:fc:30:21:98:c8:2f:60:50:05:ee:77:
                    4e:08:d8:bb:b3:aa:cc:0f:91:e7:0f:3c:6f:11:65:
                    aa:07:7e:94:7c:84:da:31:a9:f4:c4:47:a1:d5:de:
                    d7:e7:19:00:15:52:cf:5a:3c:d9:13:4d:82:41:9e:
                    23:83:5d:c6:6b:ac:50:3f:a3:04:0a:ea:18:d3:02:
                    70:e9:27:2e:6f:2a:51:e7:4b:6d:64:38:ce:0b:cc:
                    81:95:0c:5e:7f:05:97:77:9c:11:ab:0a:58:c5:ff:
                    c6:50:1b:c9:a7:7a:e8:cb:61:fa:52:62:1a:ed:bb:
                    64:ed:39:ff:4a:98:36:6c:7c:ec:29:56:da:1f:0c:
                    f7:fb:8c:f3:13:f7:22:6b:27:0a:54:73:1b:56:91:
                    38:ff:e5:91:e0:4d:fd:ed:36:07:cb:6a:7a:0a:83:
                    7c:8e:dd:e2:59:52:16:ae:54:1e:08:88:f8:15:b6:
                    b8:fa:43:71:78:59:0c:f3:ef:2d:7d:54:96:c6:a9:
                    cf:26:50:28:27:47:e5:1b:31:5b:d3:ba:31:72:e7:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A2:89:39:86:72:52:C4:20:7E:8C:4A:C2:26:AC:E2:F6:51:F4:6C
            X509v3 Authority Key Identifier:
                keyid:0D:E1:10:C4:35:D6:E6:86:31:CA:1F:5B:9B:84:4A:C7:AA:27:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeEQxDXW5oYxyh9bm4RKx6onVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/DeEQxDXW5oYxyh9bm4RKx6onVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:c300::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:f3:67:5d:d2:3b:d3:82:4d:32:5e:37:bd:6c:e6:9a:29:ce:
         a2:a6:ef:de:f4:21:a9:61:f0:b1:f7:1e:bb:2b:a6:7c:74:31:
         f5:49:6f:29:d3:cd:6b:ff:4b:88:3c:63:34:ed:06:9b:1f:11:
         28:d7:0c:23:b7:0f:74:27:25:d0:ad:fd:bd:c0:99:09:74:24:
         14:bb:79:68:51:48:95:b0:f6:57:6c:6c:80:82:97:bd:7c:b9:
         c6:86:aa:c1:8f:c6:83:ba:1a:b7:d8:e5:92:72:91:c5:2d:c8:
         9b:f3:91:b0:6b:6c:46:ba:fb:a8:75:ab:0a:f4:4e:37:29:1c:
         ee:5c:8c:fa:43:3d:97:d1:0e:b9:22:97:47:27:32:b0:2b:9b:
         fb:ab:81:50:96:38:8b:3a:3f:86:1b:a9:4a:ee:ca:52:ad:c2:
         ca:03:fa:47:44:01:60:be:79:d3:ac:09:9b:32:66:2f:ab:23:
         4c:88:0e:d6:1b:39:95:37:de:49:b8:ea:d8:8c:1e:a3:2c:03:
         ae:63:e6:5b:9d:c8:42:0c:fb:e8:7a:53:be:32:e0:13:a7:3e:
         fd:76:03:cf:d3:c3:d0:2c:4c:6d:99:8c:be:7f:98:8e:1b:76:
         c0:56:91:88:55:b3:83:bf:0b:36:30:e7:11:8d:a9:45:32:12:
         e5:0c:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----