Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa
File:                     KHIJWgGbuT2S0m_tg2JCcQLwbck.roa (raw, json)
Hash identifier:          KPhqkNExHKJcCehrftQ4n6dRKRvFYzZXcInpy5Zl/tQ=
Subject key identifier:   28:72:09:5A:01:9B:B9:3D:92:D2:6F:ED:83:62:42:71:02:F0:6D:C9
Certificate issuer:       /CN=2a2caea2eed113867ad773b7b35809d386a803b2
Certificate serial:       018282FF042CE541F68ABDF4CBA19548274D
Authority key identifier: 2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa
Signing time:             Tue 09 Aug 2022 14:25:26 +0000
ROA not before:           Tue 09 Aug 2022 14:25:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57330
IP address blocks:        2001:67c:2964::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:82:ff:04:2c:e5:41:f6:8a:bd:f4:cb:a1:95:48:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2caea2eed113867ad773b7b35809d386a803b2
        Validity
            Not Before: Aug  9 14:25:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2872095a019bb93d92d26fed8362427102f06dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:cc:d9:52:02:8a:78:bb:b8:aa:14:f8:1e:
                    3b:3b:fe:51:51:92:e8:08:27:2f:fb:d6:47:82:c6:
                    b3:1e:93:58:a5:70:75:8a:3d:dc:9a:38:4c:d5:ac:
                    a2:e4:83:a5:c9:f5:23:60:f0:d1:aa:43:a6:f9:0a:
                    c0:37:7a:bc:fb:b8:20:57:9b:3f:ef:f2:1f:e9:b2:
                    15:7e:5b:41:de:5d:45:c5:a8:25:81:9d:15:18:72:
                    4c:8f:89:9a:39:09:32:8f:1b:24:f0:1f:2a:93:57:
                    7c:56:83:b7:4f:df:4a:5f:4d:ce:ee:98:8b:1c:1d:
                    17:10:c6:f7:ee:14:93:86:fc:c7:8a:96:e3:4e:99:
                    24:a7:ee:99:da:d3:07:75:56:e5:76:8a:17:35:0e:
                    51:e3:ac:56:da:4d:21:31:3b:b5:9c:3b:ee:fc:da:
                    4e:89:7a:e9:7a:3f:bc:8b:37:34:94:2f:a2:74:c1:
                    a9:ca:86:ec:30:39:c9:03:d6:63:f2:b7:ce:3f:a9:
                    3f:54:9f:c2:e4:0e:d6:95:b4:12:9f:22:c5:0d:f9:
                    50:a4:96:71:58:95:2d:b0:0a:18:bd:a8:79:e7:b2:
                    51:96:40:8a:de:d5:fb:a8:3c:a8:e9:4b:3e:ab:b4:
                    47:5b:fa:90:a1:a6:ea:be:b4:5e:e1:a7:4b:20:1e:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:72:09:5A:01:9B:B9:3D:92:D2:6F:ED:83:62:42:71:02:F0:6D:C9
            X509v3 Authority Key Identifier:
                keyid:2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/Kiyuou7RE4Z613O3s1gJ04aoA7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2964::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:38:10:62:5d:69:34:5a:00:5b:a3:4e:cd:be:9b:75:f5:9f:
         be:05:01:c3:e1:0b:dd:5e:e9:9b:27:bf:b9:01:34:f9:97:9b:
         69:a4:ec:09:7b:38:74:ca:be:b4:47:06:23:f7:a1:6a:82:7a:
         d1:b7:1a:85:27:5b:77:59:17:42:ec:0d:30:60:19:57:dd:f3:
         3e:7e:ec:94:b2:f5:14:bc:0c:1a:ac:5d:12:b2:b8:8c:fd:14:
         35:a4:87:d5:8f:cf:df:a2:58:9c:4e:1d:cb:f2:b0:06:2f:91:
         ec:9a:c3:82:75:b6:49:c2:f5:58:f5:05:5d:f6:eb:55:8d:9d:
         86:3f:cd:31:17:05:d2:d4:30:e5:89:30:42:73:bc:c6:96:7d:
         22:4b:54:6f:d0:73:a0:17:c0:50:19:16:e1:27:01:53:9e:1c:
         8e:8f:6a:6a:13:a5:c5:f8:27:56:c6:26:6c:fb:3f:b0:c9:a1:
         9e:26:e6:f0:cf:45:b8:49:66:02:0e:7c:ba:72:3a:09:d3:93:
         fd:60:24:ac:63:9e:a7:c3:d4:df:60:62:1e:e2:01:71:5f:40:
         04:84:95:29:37:31:c3:7a:33:81:ba:43:14:3e:2d:06:a8:83:
         1c:04:8b:ad:b9:61:5a:99:05:12:bf:cc:14:18:2e:14:f0:26:
         5c:c8:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----