Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/cy4YtHsNbFv-G_LWoZtmBR_v1W8.roa
File:                     cy4YtHsNbFv-G_LWoZtmBR_v1W8.roa (raw, json)
Hash identifier:          XEvJ1lfqiFEoT0B3leL4IpZhXzP0pEcUXD8j1MYdFbw=
Subject key identifier:   73:2E:18:B4:7B:0D:6C:5B:FE:1B:F2:D6:A1:9B:66:05:1F:EF:D5:6F
Certificate issuer:       /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial:       0182F5010B51223DB177EB044881B0C9C917
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/cy4YtHsNbFv-G_LWoZtmBR_v1W8.roa
Signing time:             Wed 31 Aug 2022 17:44:22 +0000
ROA not before:           Wed 31 Aug 2022 17:44:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207647
IP address blocks:        2001:678:6a0::/48 maxlen: 48
                          2001:678:be4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f5:01:0b:51:22:3d:b1:77:eb:04:48:81:b0:c9:c9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
        Validity
            Not Before: Aug 31 17:44:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=732e18b47b0d6c5bfe1bf2d6a19b66051fefd56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:59:90:65:eb:ce:db:c5:b0:78:72:cc:7a:
                    8b:6d:5b:40:8d:97:f9:27:79:12:69:8b:fb:18:3b:
                    26:b2:8b:51:06:92:39:5e:5b:cb:67:fb:a5:f3:3b:
                    7a:80:d2:d2:be:29:91:ab:4f:7a:a2:be:f8:bf:0a:
                    97:de:91:30:c4:6d:05:ab:50:33:fa:80:00:e8:4e:
                    20:58:90:16:6c:25:1d:83:ac:1a:7d:44:4d:41:61:
                    58:9b:32:86:a5:cc:de:3d:b5:be:1e:e8:59:cd:4f:
                    9f:a6:29:28:68:68:0d:4d:8d:45:27:71:1c:ae:e4:
                    b8:32:68:30:96:f9:b6:22:86:ee:67:de:1b:4a:bd:
                    e9:69:63:5b:a6:fd:e6:9c:f2:ed:2f:8b:85:b0:1f:
                    a9:9b:fe:64:77:61:42:e8:8c:6c:71:fe:c5:2e:c6:
                    35:87:eb:9f:92:5f:bc:4c:d7:0e:d1:9d:e5:1e:bc:
                    a7:98:34:62:06:c6:36:50:54:a6:02:8f:bd:f0:48:
                    ff:63:60:c9:1c:a2:ad:12:3f:16:91:db:37:b7:fb:
                    60:e4:d0:ac:26:89:c0:88:fa:f6:99:98:3c:e0:7d:
                    de:db:e5:aa:e4:dd:94:bb:e6:05:24:99:03:1c:42:
                    77:f1:4d:03:8b:02:2c:ee:5f:01:d3:77:01:c3:0e:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:18:B4:7B:0D:6C:5B:FE:1B:F2:D6:A1:9B:66:05:1F:EF:D5:6F
            X509v3 Authority Key Identifier:
                keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/cy4YtHsNbFv-G_LWoZtmBR_v1W8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:6a0::/48
                  2001:678:be4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:6a:d5:2e:e0:2b:e4:26:71:6b:c8:b1:8a:6a:e6:90:be:14:
         ed:10:a0:cd:2f:bb:43:8d:49:3e:66:45:83:05:44:ba:57:26:
         6c:73:1e:28:6d:e8:9d:46:4f:13:9d:81:05:f4:a2:ac:96:7e:
         0c:a9:a3:36:f8:4c:f5:8b:cd:93:81:e3:84:ae:d2:c3:6a:2f:
         2f:76:f2:f3:27:9b:9a:b8:b6:90:b7:6b:7a:09:a6:dd:22:83:
         41:57:e4:74:3b:a3:35:82:7d:97:e4:59:14:14:5b:7e:1d:05:
         ec:56:1a:d7:ef:b7:f0:eb:fe:55:b6:ab:d4:27:7c:15:89:0d:
         c4:bb:1a:f5:6d:0a:f7:f9:17:77:22:98:dc:2d:ae:86:d1:5a:
         de:84:6c:c1:33:6a:b8:c7:0e:b9:5b:1f:b6:88:fa:b3:34:12:
         c5:62:97:51:37:6f:7e:e9:55:22:ce:3f:39:b3:11:73:0a:a1:
         78:66:7b:47:ed:57:fc:6a:0e:23:54:9b:b5:6d:70:7b:51:ff:
         6f:8b:36:a1:77:b5:12:6f:fe:9c:75:3f:28:44:46:8f:bd:cd:
         7f:19:0d:01:74:b2:9d:fd:d9:6a:df:3f:c8:27:be:5b:3f:ee:
         17:da:a5:a4:d2:44:09:2f:85:ba:1d:c8:1e:72:02:dd:26:95:
         0a:6d:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----