Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa
File:                     FPnan2TsPj9crS2uywd9pXr45s0.roa (raw, json)
Hash identifier:          QCuqSNM50URwjMgqkRSaPYOXQqFNoLdqukUEzDPywXM=
Subject key identifier:   14:F9:DA:9F:64:EC:3E:3F:5C:AD:2D:AE:CB:07:7D:A5:7A:F8:E6:CD
Certificate issuer:       /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial:       0A3BF39D
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa
Signing time:             Tue 01 Feb 2022 20:56:38 +0000
ROA not before:           Tue 01 Feb 2022 20:56:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211444
IP address blocks:        2a09:be45::/32 maxlen: 32
                          2a09:be46::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171701149 (0xa3bf39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: Feb  1 20:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14f9da9f64ec3e3f5cad2daecb077da57af8e6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:dd:c1:f5:c7:19:cf:89:22:e9:17:da:44:
                    b1:c9:34:c8:8b:e5:06:b3:25:af:1e:08:e5:ca:93:
                    38:18:8e:19:92:1f:61:d8:1d:a1:24:fc:4a:5c:67:
                    20:f4:74:e6:9e:f3:b6:aa:b9:73:75:df:ad:55:ea:
                    32:e3:82:74:58:17:9d:d5:60:a7:68:de:5a:77:a3:
                    0f:7b:af:80:24:5d:21:53:0e:31:20:75:14:40:b1:
                    73:dd:8e:ac:c9:21:17:53:35:f7:d8:cb:ec:24:d1:
                    af:5b:35:0b:08:e1:16:2c:54:e7:d6:1c:ca:12:e1:
                    81:b6:62:e2:96:ec:22:ea:8a:b6:29:74:e3:cd:53:
                    93:52:b2:5b:14:8a:fe:68:69:09:56:56:f7:5e:85:
                    6b:ce:44:76:88:d5:2f:9b:d5:d8:1e:ad:69:c7:e3:
                    8e:69:31:a7:3f:2f:6b:fd:e5:3c:16:2f:21:72:52:
                    d3:2c:6d:58:85:9c:54:e5:3e:8a:7c:f6:58:2e:9d:
                    2e:b0:b2:7a:e0:b1:b9:99:b4:c9:7e:c0:96:cc:fa:
                    91:c8:00:38:44:56:c5:bf:3a:9a:b4:21:f5:d7:1e:
                    02:62:62:00:c1:15:e8:30:be:29:e6:6e:91:a4:5e:
                    c5:8f:13:8c:c3:65:f1:9c:18:c6:89:bd:53:3b:84:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F9:DA:9F:64:EC:3E:3F:5C:AD:2D:AE:CB:07:7D:A5:7A:F8:E6:CD
            X509v3 Authority Key Identifier:
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:be45::-2a09:be46:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         69:71:54:e7:6c:b5:68:f5:c0:e0:6b:a5:30:c8:0e:d7:2f:67:
         9b:23:a8:25:39:72:4f:bf:21:68:52:41:3c:d3:ba:a6:68:a9:
         1c:83:ff:bf:c2:0a:a1:29:d7:d0:ca:58:16:51:4b:6e:08:63:
         a3:eb:01:14:db:96:e5:5a:eb:6f:bf:a9:a1:d2:1a:fb:96:ea:
         e5:03:3f:a4:09:da:31:ec:ad:16:ac:bd:96:8d:5a:ad:2d:1b:
         97:e2:4d:f2:c0:bf:ed:f2:6d:4d:ac:71:4f:f5:4d:b4:ec:f2:
         73:74:e0:32:1b:67:4d:54:23:ff:bf:7e:eb:57:c5:a4:b8:30:
         a1:d8:26:7d:7a:04:99:64:04:fd:48:72:05:a5:ca:a0:3c:30:
         78:c7:93:f5:b5:12:24:ee:9f:d0:4b:30:8b:50:a7:ab:bb:8b:
         18:d5:a5:d4:48:37:8a:92:19:e5:a5:90:79:a0:88:54:1b:a5:
         87:5d:8b:d8:1c:6f:24:31:d4:88:3c:93:68:1d:23:d4:8d:80:
         4e:4c:fb:50:df:d6:f0:ea:21:a6:7e:5a:1d:26:b1:b1:6d:b4:
         40:bb:af:56:e1:38:e4:19:73:00:5b:f0:65:71:1d:b0:8d:f7:
         76:84:d8:4a:7f:97:6a:b9:1f:a5:f3:c1:b7:db:da:24:33:12:
         e6:6b:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----