Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/Y-s0mZywidEGbhZ2Zfyus6AYqOc.roa
File:                     Y-s0mZywidEGbhZ2Zfyus6AYqOc.roa (raw, json)
Hash identifier:          4bveA6MDy0dPdnRo6fA+7CnQZ6pXrPIBngP+QjqjJVY=
Subject key identifier:   63:EB:34:99:9C:B0:89:D1:06:6E:16:76:65:FC:AE:B3:A0:18:A8:E7
Certificate issuer:       /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial:       0B2CA016
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/Y-s0mZywidEGbhZ2Zfyus6AYqOc.roa
Signing time:             Thu 12 May 2022 12:39:52 +0000
ROA not before:           Thu 12 May 2022 12:39:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209968
IP address blocks:        2a09:be41::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187473942 (0xb2ca016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: May 12 12:39:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63eb34999cb089d1066e167665fcaeb3a018a8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:f7:76:70:bc:67:23:e9:38:70:1d:bb:96:
                    16:d8:9d:8b:92:10:14:de:88:b9:d1:d8:ca:63:fb:
                    7b:04:d6:a2:e3:2c:96:24:a6:4c:9c:ae:d0:ec:e3:
                    21:00:5d:03:68:24:90:e1:fb:00:60:70:40:a0:73:
                    8b:35:aa:ea:db:2f:d0:bb:8b:ac:19:d5:94:ce:91:
                    7c:b6:17:fc:f1:30:81:9b:ef:ac:b4:86:ec:54:55:
                    23:e5:d1:f4:70:14:83:d7:73:3e:30:7e:84:d3:45:
                    b2:d9:89:b4:0c:51:b6:bf:d9:e3:7e:be:9b:28:6a:
                    92:56:0d:93:5f:33:69:82:ff:25:ba:77:99:8f:0b:
                    9d:bb:9b:27:a1:3a:91:77:11:cc:70:7e:e7:5a:6e:
                    4b:29:3a:e7:bf:e5:b0:7e:84:8c:e5:53:0a:20:81:
                    32:7b:ec:9b:ef:cc:89:41:9e:4b:fd:d0:86:82:15:
                    2f:4e:59:8a:10:e3:53:f2:46:ff:f4:8a:26:2b:3f:
                    86:e8:71:2a:37:b1:59:8a:b4:5c:90:0e:5e:76:44:
                    07:dd:07:ae:65:87:d0:ed:0e:58:75:dd:e0:ad:e5:
                    a3:69:a4:8f:ae:80:f2:14:fc:4c:b6:2c:b9:39:25:
                    d0:6b:0c:c0:b6:cc:b5:ab:4c:78:26:69:8c:de:a2:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:34:99:9C:B0:89:D1:06:6E:16:76:65:FC:AE:B3:A0:18:A8:E7
            X509v3 Authority Key Identifier:
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/Y-s0mZywidEGbhZ2Zfyus6AYqOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:be41::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:75:e3:b5:da:b7:b0:72:3a:ad:db:b1:e0:6e:01:18:d9:
         e7:d0:78:78:3d:3c:d0:af:81:81:9b:04:19:57:ab:9d:e0:d2:
         d4:bb:04:43:09:f3:e9:aa:af:dd:e4:b4:32:60:7e:c7:b9:55:
         ec:38:89:3e:81:ac:73:98:05:e5:4c:b9:89:21:1d:94:2f:ef:
         d8:d3:e3:bc:fc:cb:66:7f:92:fc:23:08:c5:45:50:0d:5f:36:
         6c:f9:6f:81:b7:bf:9d:fb:4d:8a:31:a7:fa:eb:02:67:70:08:
         ee:d2:4a:28:8b:b6:6a:b1:26:1f:c2:29:d0:ab:34:ff:ce:06:
         7d:91:66:f1:6d:bf:d2:f4:2c:2d:97:d2:33:25:a9:ee:bb:bb:
         62:f6:a6:ac:da:fa:4c:a6:e3:81:b6:62:6e:f4:32:cf:65:87:
         65:66:67:7e:d8:32:dc:72:7e:ba:57:b6:c7:60:32:ca:fe:5b:
         17:c3:2d:89:7b:18:16:ab:89:db:2e:26:0e:d2:5b:7d:3c:f7:
         19:59:49:5c:db:aa:5e:d7:da:e0:b4:d3:ef:5c:5c:0d:3f:11:
         73:7b:c8:48:bb:3a:d0:52:0d:22:09:ae:2a:e2:e1:b6:0b:a3:
         97:be:c5:5c:2e:de:3c:64:84:f8:ac:46:c8:70:63:52:d7:eb:
         ed:34:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----