Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/jEYODeTbloItKPZzcez6c57Q9_I.roa
File:                     jEYODeTbloItKPZzcez6c57Q9_I.roa (raw, json)
Hash identifier:          Fdfdj0p5oRoto6x/epvGEDo4CNevfk3GUUPxddnNGWg=
Subject key identifier:   8C:46:0E:0D:E4:DB:96:82:2D:28:F6:73:71:EC:FA:73:9E:D0:F7:F2
Certificate issuer:       /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial:       018572837CB0BE0BB5A742C497223A366EE0
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/jEYODeTbloItKPZzcez6c57Q9_I.roa
Signing time:             Mon 02 Jan 2023 12:44:57 +0000
ROA not before:           Mon 02 Jan 2023 12:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212144
IP address blocks:        2a10:7ac0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:7c:b0:be:0b:b5:a7:42:c4:97:22:3a:36:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
        Validity
            Not Before: Jan  2 12:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c460e0de4db96822d28f67371ecfa739ed0f7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:35:4e:19:d2:c8:b2:88:27:38:94:78:c3:
                    13:f1:a0:11:2e:74:03:bd:82:0e:89:66:41:49:69:
                    88:04:c5:ed:8a:d5:cf:81:4a:29:94:44:24:83:c8:
                    c5:d4:3f:4d:e2:04:e0:c5:0d:a9:d5:a3:78:77:60:
                    66:64:79:29:58:7c:33:43:a2:ab:85:80:e0:ab:87:
                    45:00:c5:8f:bf:9b:e0:6f:31:39:54:f0:34:f1:f2:
                    34:54:36:82:7c:3e:5a:4f:76:61:df:9b:10:93:2d:
                    7f:07:90:4a:02:ab:62:4e:c2:63:30:b0:22:0a:88:
                    47:00:43:dc:52:4e:41:79:18:0a:aa:f4:1f:7c:3d:
                    a5:3b:4b:87:41:d8:e4:74:98:e4:9a:ab:e4:a7:7c:
                    f4:78:ab:cc:77:f1:94:47:0b:d2:cf:da:de:c6:5c:
                    67:1c:0a:e3:40:e2:52:9f:28:8b:b3:4a:ae:9c:c7:
                    c8:08:87:83:b9:a8:a2:5f:91:fd:b0:6b:aa:cf:d3:
                    53:e9:fb:19:c8:46:33:c3:bc:81:eb:b5:c2:17:ee:
                    8e:75:31:d8:d9:3d:39:01:0e:a4:b8:69:cc:86:c6:
                    1d:12:b9:da:2d:bb:30:ca:8e:b7:ee:eb:65:04:8f:
                    b0:de:f3:16:e2:02:66:41:b4:55:12:08:fa:e8:a1:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:46:0E:0D:E4:DB:96:82:2D:28:F6:73:71:EC:FA:73:9E:D0:F7:F2
            X509v3 Authority Key Identifier:
                keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/jEYODeTbloItKPZzcez6c57Q9_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:7ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:ad:ed:97:77:28:5e:c7:99:b9:94:c1:c1:4a:8a:93:3e:
         f7:4f:4a:f1:0f:1e:83:4b:a4:0c:4c:01:a7:f0:ad:0a:c6:ea:
         d9:22:c7:ed:45:7a:9c:99:f5:a9:95:32:86:d5:fb:85:d7:2b:
         81:b2:fe:ee:a4:f2:96:48:e8:0c:25:c7:24:0b:17:d7:d9:b5:
         54:81:ac:b4:3c:c1:76:00:65:b6:1e:f8:4d:40:ae:26:e1:f9:
         32:d6:11:e3:43:8e:e5:85:d6:fb:2c:62:32:d6:3c:9e:1b:cf:
         81:55:2d:5a:02:a3:97:fe:35:a1:01:d6:08:43:f1:4b:6e:9f:
         1f:f5:d8:8c:d5:bd:37:98:6b:da:1f:58:4a:82:39:81:9b:54:
         43:40:48:8e:e8:32:34:93:a0:41:a7:be:ff:2d:ab:72:65:f9:
         32:60:14:a0:28:54:f4:fa:59:4e:ba:b6:96:ed:87:1d:ab:5e:
         11:d1:43:63:b0:d0:83:b2:45:4f:b7:55:ad:04:ae:5c:5b:4f:
         6e:7d:17:c8:2b:ac:92:55:ba:64:9d:9d:84:4a:07:8c:62:54:
         2e:d6:3b:4d:9c:53:a3:cb:99:23:25:91:2b:25:be:d9:78:6f:
         32:0e:39:33:41:01:f7:6f:24:19:91:5d:85:22:7f:ff:3f:2d:
         96:58:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----