Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/6O2X_mJruEUz9xxMgUM-yzagFiU.roa
File:                     6O2X_mJruEUz9xxMgUM-yzagFiU.roa (raw, json)
Hash identifier:          LGB1l0m3IdBaXupEVyQ6txpKNS7TJI4Mm7TCtP1x5ic=
Subject key identifier:   E8:ED:97:FE:62:6B:B8:45:33:F7:1C:4C:81:43:3E:CB:36:A0:16:25
Certificate issuer:       /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial:       E52C29
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/6O2X_mJruEUz9xxMgUM-yzagFiU.roa
Signing time:             Wed 04 May 2022 17:42:53 +0000
ROA not before:           Wed 04 May 2022 17:42:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205227
IP address blocks:        2a12:9780::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15019049 (0xe52c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
        Validity
            Not Before: May  4 17:42:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8ed97fe626bb84533f71c4c81433ecb36a01625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:45:c5:ee:2b:ea:73:36:76:c4:0a:66:d7:
                    18:37:d7:dd:ab:f7:f0:20:cf:9f:9d:56:ef:a5:c7:
                    06:b0:75:20:7b:9a:a7:06:35:bb:a9:75:3b:a7:1f:
                    58:e6:8d:5c:f7:68:c9:b4:3f:bd:12:ea:b4:96:7e:
                    ae:ba:aa:5d:29:72:d6:99:49:51:0b:a3:6d:c6:6f:
                    ed:52:e3:7f:28:18:4d:6c:b9:73:13:84:2a:b2:51:
                    d8:c0:97:bd:66:5a:1f:57:43:93:26:ff:d4:4e:83:
                    79:f8:7f:98:b5:18:73:50:7a:9c:7b:c7:25:99:ad:
                    15:c0:92:ee:30:6b:d9:91:b6:22:03:4b:58:2c:c3:
                    98:17:92:62:2f:eb:0e:9a:80:20:d3:c6:f6:c3:65:
                    e5:09:93:7a:73:a5:cc:4a:b3:07:c0:5d:bb:0c:21:
                    72:ad:3b:33:18:c9:78:dc:63:af:c7:f0:1d:06:56:
                    08:c2:67:f2:01:f0:8f:fa:29:bd:7e:6e:12:1e:c2:
                    f5:ca:3c:b2:1a:0e:74:d4:78:b0:41:8a:dd:60:91:
                    90:2d:6d:00:af:a5:30:5e:c2:9b:b9:ff:31:bc:f2:
                    ea:8d:3e:6d:9a:f3:c3:86:45:7d:f3:89:d3:96:8b:
                    ca:b6:b2:ff:63:46:18:fa:0b:95:6c:2a:20:8c:28:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:ED:97:FE:62:6B:B8:45:33:F7:1C:4C:81:43:3E:CB:36:A0:16:25
            X509v3 Authority Key Identifier:
                keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/6O2X_mJruEUz9xxMgUM-yzagFiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:e2:39:e3:cf:af:f2:18:3c:d9:54:fc:77:a0:01:17:b8:
         d9:b7:3e:59:ca:6b:86:23:05:88:6b:ab:07:ba:90:a2:a0:4b:
         58:50:25:20:79:62:cb:67:50:97:a4:a6:03:75:12:e4:dc:6f:
         bf:ba:5e:7f:49:8f:d0:8e:75:2f:c3:46:20:19:01:ad:5c:b8:
         5f:e2:25:45:f1:32:91:49:03:e0:7d:e3:f5:e1:5c:c8:61:32:
         f9:4e:4e:00:5c:57:78:49:82:cf:d5:f5:e1:9c:13:78:b1:33:
         9c:a5:47:b2:ce:ad:58:be:35:68:30:f3:2e:c9:4b:3c:d8:6b:
         50:fb:e4:aa:f5:e6:28:c8:ab:b8:6e:47:1e:7e:16:32:62:27:
         e0:28:28:87:21:c1:83:e0:a2:c6:e4:1a:55:8b:f0:42:1c:c9:
         91:99:bf:ad:94:b6:36:4a:6d:4f:d3:14:8e:72:a6:70:04:fe:
         a8:7e:6c:2e:4f:59:35:f2:0c:3d:90:49:86:a0:54:ae:09:39:
         0b:6e:7e:bc:23:4c:f4:77:3c:e8:9b:ef:f5:e9:6e:a1:7e:99:
         ee:24:e8:7b:3b:9d:05:c8:1d:96:46:7b:7e:d8:b1:d7:46:83:
         af:ef:df:55:04:d8:2e:d0:49:e6:f7:0c:e8:67:8c:93:8a:8d:
         36:30:6f:47
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAOUsKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NmFmNmEwZTQ5MGQ5ODBjZDRiYzBmOGIwZGZhMTA1YjQ5N2ZlNTQ1MB4XDTIyMDUw
NDE3NDI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThlZDk3ZmU2MjZi
Yjg0NTMzZjcxYzRjODE0MzNlY2IzNmEwMTYyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKycRcXuK+pzNnbECmbXGDfX3av38CDPn51W76XHBrB1IHua
pwY1u6l1O6cfWOaNXPdoybQ/vRLqtJZ+rrqqXSly1plJUQujbcZv7VLjfygYTWy5
cxOEKrJR2MCXvWZaH1dDkyb/1E6Defh/mLUYc1B6nHvHJZmtFcCS7jBr2ZG2IgNL
WCzDmBeSYi/rDpqAINPG9sNl5QmTenOlzEqzB8Bduwwhcq07MxjJeNxjr8fwHQZW
CMJn8gHwj/opvX5uEh7C9co8shoOdNR4sEGK3WCRkC1tAK+lMF7Cm7n/Mbzy6o0+
bZrzw4ZFffOJ05aLyray/2NGGPoLlWwqIIwoHwMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTo7Zf+Ymu4RTP3HEyBQz7LNqAWJTAfBgNVHSMEGDAWgBQmr2oOSQ2YDNS8
D4sN+hBbSX/lRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pxOXFEa2tObUF6VXZBLUxEZm9RVzBsXzVVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvYzY3YzVmLTY2YmQtNGFkNy04YzA5LTg3YzZiMWE3NDA3OS8x
LzZPMlhfbUpydUVVejl4eE1nVU0teXphZ0ZpVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
YzY3YzVmLTY2YmQtNGFkNy04YzA5LTg3YzZiMWE3NDA3OS8xL0pxOXFEa2tObUF6
VXZBLUxEZm9RVzBsXzVVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoSl4AwDQYJKoZIhvcNAQELBQAD
ggEBAFya4jnjz6/yGDzZVPx3oAEXuNm3PlnKa4YjBYhrqwe6kKKgS1hQJSB5Ystn
UJekpgN1EuTcb7+6Xn9Jj9COdS/DRiAZAa1cuF/iJUXxMpFJA+B94/XhXMhhMvlO
TgBcV3hJgs/V9eGcE3ixM5ylR7LOrVi+NWgw8y7JSzzYa1D75Kr15ijIq7huRx5+
FjJiJ+AoKIchwYPgosbkGlWL8EIcyZGZv62UtjZKbU/TFI5ypnAE/qh+bC5PWTXy
DD2QSYagVK4JOQtufrwjTPR3POib7/XpbqF+me4k6Hs7nQXIHZZGe37YsddGg6/v
31UE2C7QSeb3DOhnjJOKjTYwb0c=
-----END CERTIFICATE-----