Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/9tV2xM4DkvtJrDh_c50j4qCy5sU.roa
File:                     9tV2xM4DkvtJrDh_c50j4qCy5sU.roa (raw, json)
Hash identifier:          bPrrZwZ4DcMMM+ITD7dMPLzRQgXWOB8nvqg2ziwFh1Q=
Subject key identifier:   F6:D5:76:C4:CE:03:92:FB:49:AC:38:7F:73:9D:23:E2:A0:B2:E6:C5
Certificate issuer:       /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial:       0B3D0F44
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/9tV2xM4DkvtJrDh_c50j4qCy5sU.roa
Signing time:             Tue 17 May 2022 06:13:30 +0000
ROA not before:           Tue 17 May 2022 06:13:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57401
IP address blocks:        2a09:be40:3441::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188550980 (0xb3d0f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: May 17 06:13:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6d576c4ce0392fb49ac387f739d23e2a0b2e6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:6e:b5:67:f0:07:7c:e6:9a:e6:58:cc:3b:
                    81:d8:a6:14:d5:4a:d2:c7:77:11:0c:e0:81:e2:50:
                    d7:01:ad:9b:05:1f:45:e5:1b:3c:70:78:58:a8:c8:
                    5e:1d:59:cf:7a:95:ad:de:ab:be:c5:1b:dc:90:23:
                    a7:38:d2:0d:4a:6c:17:ef:24:08:57:47:5b:f8:9f:
                    ac:b5:30:dc:64:31:d4:f4:a1:6a:1e:05:85:96:a9:
                    5a:5f:8f:85:50:60:f3:ed:bf:30:fb:b4:72:db:2e:
                    c1:3f:09:f5:b9:9e:77:ef:7f:be:8e:f8:7c:ca:af:
                    c9:e5:5d:d3:27:08:f0:b2:6e:d6:f1:3a:49:ac:75:
                    73:8c:16:03:21:26:7e:d8:a8:7c:59:e4:36:e1:36:
                    58:cc:7d:3b:cf:79:95:bf:d7:3b:5a:7e:a7:df:34:
                    bd:02:79:52:37:f4:07:2b:91:12:cb:36:11:24:a2:
                    5c:0a:3b:81:30:b3:cf:dc:fc:5c:fa:43:72:79:d6:
                    7b:ef:de:bc:51:d4:47:40:51:de:39:cc:56:01:93:
                    40:c8:c7:94:e2:e0:e4:d9:46:f8:ae:66:10:0d:2c:
                    61:26:96:e1:dc:ed:f8:dc:47:a0:f0:64:29:71:9f:
                    cf:ff:68:bb:88:7a:8d:f5:70:52:e9:f5:45:54:05:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:76:C4:CE:03:92:FB:49:AC:38:7F:73:9D:23:E2:A0:B2:E6:C5
            X509v3 Authority Key Identifier:
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/9tV2xM4DkvtJrDh_c50j4qCy5sU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:be40:3441::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:95:65:79:2f:1c:52:47:6c:02:3c:b6:b5:09:87:84:ad:01:
         9f:5f:8a:10:7a:cc:17:4a:96:9c:44:2e:c5:06:8e:6c:42:5e:
         c9:29:0c:25:2a:00:ef:c4:2a:7b:e5:f8:e4:21:ae:43:4a:29:
         cb:c5:38:cf:d7:d9:fd:48:df:57:3f:18:d5:d9:16:83:90:8c:
         e2:c5:ae:aa:67:15:1d:1b:11:e6:d2:0b:b7:01:1c:65:a2:5d:
         af:51:ee:60:6e:d7:22:e4:70:9c:46:72:f3:6e:90:51:3d:c3:
         eb:bc:b9:77:c3:cc:7f:db:fe:88:7b:66:2d:5c:81:b8:c1:07:
         9c:a1:89:d8:7b:cd:7e:7b:24:07:65:d4:82:4e:4c:f5:15:5c:
         69:a3:59:27:d8:48:aa:88:9d:99:5f:3f:64:74:0f:38:6b:15:
         0f:36:0b:23:61:ac:8e:a6:3f:ba:af:33:4d:34:93:46:44:9e:
         18:8d:0c:7e:5a:14:b0:8d:dc:95:b8:86:5c:8a:b3:e8:6f:97:
         60:58:a7:cc:c8:18:eb:03:b4:6f:d2:5d:47:3b:35:75:b1:fa:
         dc:1e:8c:ab:1f:dd:f6:a9:33:4e:f0:44:53:31:a1:bc:e4:1b:
         d7:73:3d:5f:1d:a5:fa:85:b1:25:02:ac:bf:da:dc:b2:e3:26:
         88:a2:4a:df
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECz0PRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGI5MGE1ZTE1OGJhMDkwOGZkYzgzY2M0MjQzZmU0MGM2ZGFiNDIzMB4XDTIyMDUx
NzA2MTMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZkNTc2YzRjZTAz
OTJmYjQ5YWMzODdmNzM5ZDIzZTJhMGIyZTZjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJA7brVn8Ad85prmWMw7gdimFNVK0sd3EQzggeJQ1wGtmwUf
ReUbPHB4WKjIXh1Zz3qVrd6rvsUb3JAjpzjSDUpsF+8kCFdHW/ifrLUw3GQx1PSh
ah4FhZapWl+PhVBg8+2/MPu0ctsuwT8J9bmed+9/vo74fMqvyeVd0ycI8LJu1vE6
Sax1c4wWAyEmftiofFnkNuE2WMx9O895lb/XO1p+p980vQJ5Ujf0ByuREss2ESSi
XAo7gTCzz9z8XPpDcnnWe+/evFHUR0BR3jnMVgGTQMjHlOLg5NlG+K5mEA0sYSaW
4dzt+NxHoPBkKXGfz/9ou4h6jfVwUun1RVQF7R8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBT21XbEzgOS+0msOH9znSPioLLmxTAfBgNVHSMEGDAWgBRQuQpeFYugkI/c
g8xCQ/5Axtq0IzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMa0tYaFdMb0pDUDNJUE1Ra1AtUU1iYXRDTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvNzJkMjI2LWMzYjAtNDFmMy1iNGRiLTgzZmQ3MzgyZmYxMy8x
Lzl0VjJ4TTREa3Z0SnJEaF9jNTBqNHFDeTVzVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
NzJkMjI2LWMzYjAtNDFmMy1iNGRiLTgzZmQ3MzgyZmYxMy8xL1VMa0tYaFdMb0pD
UDNJUE1Ra1AtUU1iYXRDTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJvkA0QTANBgkqhkiG9w0BAQsF
AAOCAQEAd5VleS8cUkdsAjy2tQmHhK0Bn1+KEHrMF0qWnEQuxQaObEJeySkMJSoA
78Qqe+X45CGuQ0opy8U4z9fZ/UjfVz8Y1dkWg5CM4sWuqmcVHRsR5tILtwEcZaJd
r1HuYG7XIuRwnEZy826QUT3D67y5d8PMf9v+iHtmLVyBuMEHnKGJ2HvNfnskB2XU
gk5M9RVcaaNZJ9hIqoidmV8/ZHQPOGsVDzYLI2GsjqY/uq8zTTSTRkSeGI0MfloU
sI3clbiGXIqz6G+XYFinzMgY6wO0b9JdRzs1dbH63B6Mqx/d9qkzTvBEUzGhvOQb
13M9Xx2l+oWxJQKsv9rcsuMmiKJK3w==
-----END CERTIFICATE-----