Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/Lr8K8B1r_Wf09JAf5lpFcHI1JTc.roa
File:                     Lr8K8B1r_Wf09JAf5lpFcHI1JTc.roa (raw, json)
Hash identifier:          lidTFGbk0jXyV+Cpqn7o2fX+wsJNlhTRBbbTUvTXmHY=
Subject key identifier:   2E:BF:0A:F0:1D:6B:FD:67:F4:F4:90:1F:E6:5A:45:70:72:35:25:37
Certificate issuer:       /CN=04ad821649e5cb64dac446703c34441eab31ba3b
Certificate serial:       04F9B673
Authority key identifier: 04:AD:82:16:49:E5:CB:64:DA:C4:46:70:3C:34:44:1E:AB:31:BA:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BK2CFknly2TaxEZwPDREHqsxujs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/Lr8K8B1r_Wf09JAf5lpFcHI1JTc.roa
Signing time:             Sat 01 Jan 2022 07:55:26 +0000
ROA not before:           Sat 01 Jan 2022 07:55:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51837
IP address blocks:        2a0e:fb46::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83474035 (0x4f9b673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ad821649e5cb64dac446703c34441eab31ba3b
        Validity
            Not Before: Jan  1 07:55:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ebf0af01d6bfd67f4f4901fe65a457072352537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:79:87:8a:5e:02:d9:91:33:86:dd:b0:31:
                    12:ef:94:f3:57:95:cf:49:cc:10:ca:60:ba:87:31:
                    a8:5c:66:fb:a5:d5:ef:6d:99:19:32:6c:66:98:43:
                    89:d4:64:d8:fa:ed:6b:cc:e5:e9:54:56:67:4b:05:
                    64:97:91:ee:a7:de:da:71:9e:7b:36:a3:38:90:32:
                    c0:d8:c1:e1:71:10:35:fe:e2:21:80:ef:91:c6:eb:
                    b6:30:0d:1f:67:25:bd:6a:cc:3a:40:b2:4c:76:bf:
                    fe:9a:2a:37:04:14:b9:fa:36:50:21:56:d8:99:82:
                    39:d5:78:cb:c4:86:12:42:ce:38:74:99:ac:db:fd:
                    e8:dd:c4:76:7a:70:df:f8:70:10:c2:8e:02:36:80:
                    3d:34:07:f4:b5:c3:fb:aa:9c:de:cf:3c:16:35:b3:
                    c9:79:aa:40:7a:3e:b3:f9:8c:d5:4c:ee:49:8f:9b:
                    8e:d0:c1:34:a4:5c:2f:f0:ea:5a:92:60:d2:b6:7b:
                    db:da:e6:21:2f:42:71:a9:b3:5c:9f:bd:bf:1a:ad:
                    93:11:04:d4:ca:70:3f:12:f7:16:6b:1e:6b:66:21:
                    36:aa:5e:0e:8f:d0:dc:3a:c6:f7:cf:44:fb:72:bd:
                    b9:05:da:f4:cb:89:24:7e:60:06:04:7e:1c:d9:2c:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BF:0A:F0:1D:6B:FD:67:F4:F4:90:1F:E6:5A:45:70:72:35:25:37
            X509v3 Authority Key Identifier:
                keyid:04:AD:82:16:49:E5:CB:64:DA:C4:46:70:3C:34:44:1E:AB:31:BA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK2CFknly2TaxEZwPDREHqsxujs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/Lr8K8B1r_Wf09JAf5lpFcHI1JTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/BK2CFknly2TaxEZwPDREHqsxujs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:fb46::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:55:4e:58:ef:5e:d0:d8:79:48:40:e9:12:43:b6:ea:e6:df:
         3f:0f:97:e4:7f:6f:d6:a4:b5:44:24:4d:89:e5:71:89:64:37:
         05:26:bc:2f:92:88:51:70:b9:a5:83:f3:88:83:d2:40:c3:bf:
         e8:c0:f6:17:5e:76:67:5b:f1:85:54:d7:27:c2:81:46:be:05:
         15:4d:f5:94:95:96:01:f6:c9:e6:9b:2c:2d:a9:2e:ff:c5:62:
         c1:95:97:94:62:99:18:6d:4c:82:67:4f:b3:37:6d:8c:7e:7f:
         06:e7:81:fd:00:31:ae:b6:fb:70:5b:33:31:d5:4b:37:82:d7:
         ed:1d:d3:10:24:81:d0:26:19:cb:0d:ad:5d:0c:40:ed:6c:42:
         04:af:a5:f2:62:d1:9f:25:d0:2c:cf:f3:74:c9:50:9e:99:c0:
         5f:c9:5d:90:46:6f:f3:e5:31:dd:1a:97:bd:32:7c:0e:fb:e8:
         2b:32:81:a9:ef:82:6e:73:77:ba:2b:c1:41:72:1f:1f:ba:4b:
         9a:96:22:2e:5f:a6:e0:50:90:cd:29:b6:13:8f:ae:a6:e0:86:
         6d:c6:82:db:0f:a2:3f:7a:9e:e3:8f:e6:0b:ae:d1:10:ca:99:
         ca:01:f7:99:e2:0b:d9:1e:50:6b:4c:71:b1:94:4a:da:dd:b4:
         d9:af:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----