Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/vjUzKCGpOHo5dRehlUEJvqpOHSw.roa
File:                     vjUzKCGpOHo5dRehlUEJvqpOHSw.roa (raw, json)
Hash identifier:          YcnIftk1s779qQaUV8/JGzKYMswATcJwxWcf6yB+pd8=
Subject key identifier:   BE:35:33:28:21:A9:38:7A:39:75:17:A1:95:41:09:BE:AA:4E:1D:2C
Certificate issuer:       /CN=650309a6c618c718bd369f561fff0dccbf320b48
Certificate serial:       04116FE9
Authority key identifier: 65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/vjUzKCGpOHo5dRehlUEJvqpOHSw.roa
Signing time:             Sat 01 Jan 2022 10:53:29 +0000
ROA not before:           Sat 01 Jan 2022 10:53:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205593
IP address blocks:        2001:678:e40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68251625 (0x4116fe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650309a6c618c718bd369f561fff0dccbf320b48
        Validity
            Not Before: Jan  1 10:53:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be35332821a9387a397517a1954109beaa4e1d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:ef:db:ab:b6:af:5d:41:50:7c:35:76:85:
                    50:de:8e:4a:33:7a:b4:b5:0f:e7:9b:2e:39:9f:a0:
                    94:8d:ce:40:6c:0e:84:4f:e1:35:db:f9:30:be:c6:
                    18:c5:d8:1f:9b:dd:d0:5b:d3:78:21:86:eb:93:d0:
                    f1:00:a7:da:02:6e:b1:24:fc:78:ea:e0:ab:92:ea:
                    51:95:31:7c:8e:c3:8c:0b:38:2e:f9:d8:20:1f:a4:
                    41:4e:23:98:47:2b:05:c3:e1:1a:d3:55:8d:a8:6f:
                    2f:a1:c6:bb:c2:30:70:8e:7c:3d:0c:34:01:8e:b1:
                    fa:07:30:1d:0f:ba:1d:04:0d:52:03:b4:1e:e6:c5:
                    cf:d3:6e:83:ed:f1:da:e7:e6:ed:04:99:57:81:95:
                    89:5a:b2:9d:b3:2c:40:56:8f:da:0f:8d:36:21:a5:
                    44:95:4c:7f:2e:a4:ad:5b:fa:24:74:84:83:74:38:
                    fc:dc:d2:3b:65:11:ae:bc:30:97:31:3d:21:94:a7:
                    57:02:c1:29:f4:cd:6e:a8:08:42:01:7e:b6:2f:5b:
                    f8:f9:c2:63:b4:ec:46:fc:b4:65:9b:eb:57:39:46:
                    34:13:c9:37:bc:96:0a:af:ea:24:a1:46:0e:ca:1c:
                    5c:a8:cc:37:6f:fe:3f:f4:6d:e0:9d:fd:32:cb:53:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:33:28:21:A9:38:7A:39:75:17:A1:95:41:09:BE:AA:4E:1D:2C
            X509v3 Authority Key Identifier:
                keyid:65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/vjUzKCGpOHo5dRehlUEJvqpOHSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:17:18:4f:85:0c:0e:80:5d:fc:bb:24:5c:1a:7e:25:ac:18:
         fb:34:ac:9e:8c:80:16:26:03:c7:f0:5f:1e:60:5b:03:77:c2:
         04:40:13:68:32:d1:49:03:5c:9d:4f:ba:ce:4a:8f:df:8f:8c:
         dd:12:4a:e5:50:e7:5d:28:b3:38:0f:92:90:2a:d5:b7:63:9f:
         b9:4f:f6:2a:b3:32:65:28:df:66:6c:94:7e:55:9d:f7:12:7c:
         84:d9:09:1d:ec:57:48:aa:a6:da:07:24:30:fb:6f:06:44:79:
         89:0d:88:aa:a4:5d:b1:c2:fb:3d:46:73:84:65:7d:c7:cc:4a:
         23:06:26:5a:b3:0d:5e:6a:26:21:db:34:39:3b:59:c6:05:fc:
         31:81:d5:8e:a4:d3:2a:55:c3:37:f6:d0:5e:74:92:6d:3d:25:
         63:05:e8:c9:94:a0:b0:75:3b:fd:f3:d0:9e:4a:2a:49:a8:18:
         e8:a2:8f:9d:8f:42:3e:16:55:ed:e2:36:cc:fb:07:9d:a9:69:
         c6:b4:a3:a8:db:c0:d3:fd:a0:25:b9:f0:f2:7e:6c:28:46:f8:
         1f:15:07:a7:11:f8:7d:dc:f2:4d:af:59:d5:8e:6d:a8:9f:34:
         16:ef:0d:d9:52:2d:76:68:0a:94:40:71:86:e9:6d:66:48:54:
         9e:15:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----