Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/3p3S9UN7trktJP-ewbZmoU3skKM.roa
File:                     3p3S9UN7trktJP-ewbZmoU3skKM.roa (raw, json)
Hash identifier:          fQ7aGGJA+SsUxTFIOj16e/1Oj9e9QrjNTkh9bedpuXg=
Subject key identifier:   DE:9D:D2:F5:43:7B:B6:B9:2D:24:FF:9E:C1:B6:66:A1:4D:EC:90:A3
Certificate issuer:       /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial:       0B25AA64
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/3p3S9UN7trktJP-ewbZmoU3skKM.roa
Signing time:             Mon 09 May 2022 13:53:12 +0000
ROA not before:           Mon 09 May 2022 13:53:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209968
IP address blocks:        2a09:be43::/32 maxlen: 32
                          2a09:be41::/32 maxlen: 48
                          2a09:be42::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187017828 (0xb25aa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: May  9 13:53:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de9dd2f5437bb6b92d24ff9ec1b666a14dec90a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:18:9e:c9:b9:02:18:26:91:ae:cc:f7:9a:
                    d0:3f:f6:03:63:bb:f3:a2:94:0e:57:94:9c:40:30:
                    3b:1d:a4:04:05:10:fd:f6:65:cd:d1:be:c1:cc:46:
                    53:1d:13:96:38:7b:5e:00:62:c1:ce:1b:41:ec:0b:
                    f2:f6:48:a3:4a:c4:02:fb:97:77:af:80:85:90:63:
                    d7:dd:4e:21:ed:e7:cf:93:94:5d:c0:d7:ca:b9:30:
                    7a:29:a8:1e:d0:bc:02:af:cc:76:41:4b:19:33:95:
                    8e:86:aa:1f:fe:fc:65:f7:ac:ec:5d:ce:69:1d:8c:
                    c6:6b:30:b1:1f:0a:a5:4e:4b:a8:d0:90:0b:5d:26:
                    88:12:14:20:60:be:90:34:02:9e:02:77:a4:b2:7f:
                    c6:6f:c9:c2:71:bf:a5:b4:68:4c:69:6c:f6:b5:f2:
                    93:69:77:6e:6d:05:4f:d0:3b:93:44:cc:09:51:3e:
                    1c:c1:df:3f:46:ea:86:51:e9:50:6a:d1:d3:44:5d:
                    9e:3e:87:51:9a:ef:60:51:38:ca:8f:d5:b0:f2:72:
                    55:e1:0b:9c:af:6e:75:26:73:d7:86:81:f6:29:f8:
                    ef:76:e5:4a:72:07:2c:f5:11:10:23:f0:eb:7f:54:
                    ad:d5:5b:1f:d2:3c:ee:88:14:30:bb:c4:b4:1c:53:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:D2:F5:43:7B:B6:B9:2D:24:FF:9E:C1:B6:66:A1:4D:EC:90:A3
            X509v3 Authority Key Identifier:
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/3p3S9UN7trktJP-ewbZmoU3skKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:be41::-2a09:be43:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         91:86:99:05:71:d1:35:e6:81:25:6e:48:38:a7:bd:b4:24:d3:
         73:ac:df:93:f9:87:c1:68:3a:9b:6b:a0:03:76:23:5c:ff:da:
         9a:42:56:ec:a4:74:ce:ad:f2:60:51:75:d2:18:c9:f9:88:73:
         07:09:46:7d:16:64:b8:04:d1:88:d1:b6:1c:18:80:07:e8:7b:
         28:78:b5:d8:32:75:c9:e3:0f:b9:ec:e9:b6:01:54:5f:86:14:
         de:0f:7e:1e:e8:57:4f:84:93:a1:83:fc:bb:93:a5:57:15:c3:
         a1:95:57:2f:12:db:cd:9b:0d:f0:f0:66:bd:bc:fc:d7:23:36:
         d1:80:cd:34:a9:5f:f5:2f:c9:d3:ae:03:b6:1c:41:37:56:25:
         69:48:5a:4a:49:98:6d:2a:db:ea:82:9d:c2:af:73:8f:0e:68:
         e8:91:d9:d1:c5:0a:2b:38:b5:0c:f1:81:c2:9e:bb:76:24:00:
         c7:42:22:24:6b:d6:7b:15:ba:de:7b:34:93:ec:59:8f:58:aa:
         14:f9:97:89:92:54:5c:0b:4d:98:74:38:58:5e:61:90:6f:31:
         6f:04:6c:68:d9:f5:c9:82:71:d0:0c:ee:33:f9:60:d9:c4:2c:
         c1:48:10:7c:c5:30:88:8c:44:c6:c4:fa:18:73:62:c7:ba:9e:
         d3:2a:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----