Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/lPuui2DrRwd_4B3eqNLKwPf45kQ.roa
File:                     lPuui2DrRwd_4B3eqNLKwPf45kQ.roa (raw, json)
Hash identifier:          JVr7J8JdLMxWz+L+Vj9NTdv1jF49+CdGuwRRGAfsqEs=
Subject key identifier:   94:FB:AE:8B:60:EB:47:07:7F:E0:1D:DE:A8:D2:CA:C0:F7:F8:E6:44
Certificate issuer:       /CN=5fe0a3fb18866eebad45981c224f23245d176099
Certificate serial:       0962C1BA
Authority key identifier: 5F:E0:A3:FB:18:86:6E:EB:AD:45:98:1C:22:4F:23:24:5D:17:60:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X-Cj-xiGbuutRZgcIk8jJF0XYJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/lPuui2DrRwd_4B3eqNLKwPf45kQ.roa
Signing time:             Sat 01 Jan 2022 08:01:11 +0000
ROA not before:           Sat 01 Jan 2022 08:01:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9186
IP address blocks:        2a09:5640:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157467066 (0x962c1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe0a3fb18866eebad45981c224f23245d176099
        Validity
            Not Before: Jan  1 08:01:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94fbae8b60eb47077fe01ddea8d2cac0f7f8e644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:bb:b9:35:c1:c8:f8:c1:89:2d:5c:71:31:
                    89:03:d5:5c:a0:7f:60:80:36:97:98:da:6a:40:16:
                    db:51:f4:aa:9d:3e:39:7c:3b:03:89:65:fb:61:7b:
                    7a:0a:f5:3a:21:80:27:1e:5e:a9:12:9a:43:26:c4:
                    66:cd:0a:70:a7:fa:ee:b3:d4:a0:79:81:f4:f9:51:
                    39:ff:4e:e8:b0:e3:0b:c2:22:d6:46:e0:42:5a:52:
                    a7:8b:7a:c3:14:f4:9e:ff:49:bd:9f:50:96:20:4a:
                    d4:e4:8e:14:43:7c:d7:f9:f6:60:af:af:d8:9b:5d:
                    2c:13:e6:8e:82:01:bb:e4:a2:6f:ea:28:dc:a1:e5:
                    e7:1e:6d:e7:b6:78:de:3f:20:35:04:5d:fd:df:e4:
                    b9:23:5a:68:d8:ff:49:2b:f1:ea:03:ac:c9:c0:e5:
                    25:ab:94:a0:b8:c9:ab:fb:83:0c:87:61:51:42:4a:
                    c0:e5:80:b6:28:84:5f:60:95:12:87:9a:29:39:9f:
                    c1:9c:4f:c4:28:e5:41:10:a7:75:fa:98:40:61:30:
                    ab:dc:f6:98:61:29:0b:54:97:36:b4:d9:8d:60:89:
                    b3:5f:16:7b:71:4e:dc:e7:a1:5d:2a:03:6d:39:96:
                    a2:6d:f9:a4:5b:b5:46:2a:47:77:0f:26:54:d8:d3:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:AE:8B:60:EB:47:07:7F:E0:1D:DE:A8:D2:CA:C0:F7:F8:E6:44
            X509v3 Authority Key Identifier:
                keyid:5F:E0:A3:FB:18:86:6E:EB:AD:45:98:1C:22:4F:23:24:5D:17:60:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-Cj-xiGbuutRZgcIk8jJF0XYJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/lPuui2DrRwd_4B3eqNLKwPf45kQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/X-Cj-xiGbuutRZgcIk8jJF0XYJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:5640:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:34:1d:b6:30:2b:52:d1:96:9e:c2:9b:85:26:db:17:08:
         26:9e:e0:68:de:fe:0e:9b:f6:ec:98:3d:35:53:a1:c6:c8:f2:
         6a:aa:65:5d:15:c7:f3:1d:88:73:f5:25:3d:96:16:70:fb:5a:
         28:a9:67:97:4f:dd:62:33:52:3b:c2:54:d5:13:be:56:3a:d7:
         a3:fa:05:9b:92:3d:63:3f:f4:b9:9f:f9:d1:4c:e7:a0:d9:da:
         21:3d:f0:65:d1:e5:15:1f:83:ba:e3:f3:93:62:49:7f:94:e6:
         c0:8d:f6:f0:74:e7:2d:34:be:ed:da:a7:c1:2d:e9:fb:10:a0:
         ba:ff:95:b3:f9:18:25:c5:30:bc:95:dc:67:a8:e9:4e:8b:c8:
         6e:cf:d3:6d:3c:a7:4e:96:a2:8f:a5:ad:08:cb:4d:76:80:50:
         a1:82:99:55:55:99:eb:55:e3:43:43:ac:8a:69:31:34:6e:22:
         5c:99:86:3d:7a:75:9e:bf:cb:35:b6:c1:60:ed:85:d7:9f:d0:
         64:7e:44:29:75:48:34:ab:8b:e6:ab:8d:b1:0a:c3:e5:12:d4:
         96:9d:23:09:ae:82:3a:21:3f:b9:d8:68:ac:d3:76:2e:70:a3:
         b8:f1:f9:31:6e:61:b5:85:32:2d:61:33:c3:ac:f4:06:9d:2d:
         13:da:fd:13
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECWLBujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZmUwYTNmYjE4ODY2ZWViYWQ0NTk4MWMyMjRmMjMyNDVkMTc2MDk5MB4XDTIyMDEw
MTA4MDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRmYmFlOGI2MGVi
NDcwNzdmZTAxZGRlYThkMmNhYzBmN2Y4ZTY0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrGu7k1wcj4wYktXHExiQPVXKB/YIA2l5jaakAW21H0qp0+
OXw7A4ll+2F7egr1OiGAJx5eqRKaQybEZs0KcKf67rPUoHmB9PlROf9O6LDjC8Ii
1kbgQlpSp4t6wxT0nv9JvZ9QliBK1OSOFEN81/n2YK+v2JtdLBPmjoIBu+Sib+oo
3KHl5x5t57Z43j8gNQRd/d/kuSNaaNj/SSvx6gOsycDlJauUoLjJq/uDDIdhUUJK
wOWAtiiEX2CVEoeaKTmfwZxPxCjlQRCndfqYQGEwq9z2mGEpC1SXNrTZjWCJs18W
e3FO3OehXSoDbTmWom35pFu1RipHdw8mVNjTgxkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSU+66LYOtHB3/gHd6o0srA9/jmRDAfBgNVHSMEGDAWgBRf4KP7GIZu661F
mBwiTyMkXRdgmTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1gtQ2oteGlHYnV1dFJaZ2NJazhqSkYwWFlKay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNDJiNmRkLTg0NWEtNDEzYi1iOTcwLWRhYjdkMWViNGNmNS8x
L2xQdXVpMkRyUndkXzRCM2VxTkxLd1BmNDVrUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
NDJiNmRkLTg0NWEtNDEzYi1iOTcwLWRhYjdkMWViNGNmNS8xL1gtQ2oteGlHYnV1
dFJaZ2NJazhqSkYwWFlKay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJVkAAATANBgkqhkiG9w0BAQsF
AAOCAQEAb2k0HbYwK1LRlp7Cm4Um2xcIJp7gaN7+Dpv27Jg9NVOhxsjyaqplXRXH
8x2Ic/UlPZYWcPtaKKlnl0/dYjNSO8JU1RO+VjrXo/oFm5I9Yz/0uZ/50UznoNna
IT3wZdHlFR+DuuPzk2JJf5TmwI328HTnLTS+7dqnwS3p+xCguv+Vs/kYJcUwvJXc
Z6jpTovIbs/TbTynTpaij6WtCMtNdoBQoYKZVVWZ61XjQ0OsimkxNG4iXJmGPXp1
nr/LNbbBYO2F15/QZH5EKXVINKuL5quNsQrD5RLUlp0jCa6COiE/udhorNN2LnCj
uPH5MW5htYUyLWEzw6z0Bp0tE9r9Ew==
-----END CERTIFICATE-----