Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/cootXjbV5s-Dd_rvzp5tJMWdD3M.roa
File:                     cootXjbV5s-Dd_rvzp5tJMWdD3M.roa (raw, json)
Hash identifier:          YcyYUe8bHsIvFmTlhPs7V+j4H9Q++1RbTG/FN7Y70dM=
Subject key identifier:   72:8A:2D:5E:36:D5:E6:CF:83:77:FA:EF:CE:9E:6D:24:C5:9D:0F:73
Certificate issuer:       /CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Certificate serial:       018215CAC328D37279EDD567BABA53D40EB5
Authority key identifier: 61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/cootXjbV5s-Dd_rvzp5tJMWdD3M.roa
Signing time:             Tue 19 Jul 2022 09:29:45 +0000
ROA not before:           Tue 19 Jul 2022 09:29:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48362
IP address blocks:        2a0c:1a40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:ca:c3:28:d3:72:79:ed:d5:67:ba:ba:53:d4:0e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612102634204bfc1aa7ce81d70187f6b764ab10d
        Validity
            Not Before: Jul 19 09:29:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=728a2d5e36d5e6cf8377faefce9e6d24c59d0f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b7:ec:96:e1:cd:29:b3:b0:75:f9:4b:45:c3:
                    d0:25:fb:7e:38:d1:54:83:98:74:16:8b:fb:a3:a9:
                    9e:7f:20:17:22:8d:6b:97:01:d7:c7:ef:6f:6f:19:
                    b3:42:d2:cc:88:94:c9:2e:8b:6e:0d:52:50:49:60:
                    a1:ca:a2:38:23:91:e2:ad:62:0c:7f:4a:5c:2a:6d:
                    cc:6f:bf:1d:78:6a:e0:c9:05:22:d8:e3:74:80:2e:
                    9d:10:54:52:18:93:dd:64:47:2d:71:3e:80:6c:85:
                    d0:5d:9a:79:e9:10:9b:00:43:d9:b0:eb:30:ff:67:
                    60:7b:f8:ff:4e:4c:dc:55:7a:17:0b:2b:a9:e5:3a:
                    00:d1:68:b0:e0:68:f0:19:ee:45:ff:9f:62:27:1f:
                    3f:42:e7:76:a9:f2:2f:d8:c1:d9:1c:4e:f9:af:b0:
                    35:c0:6e:b2:51:1e:1e:f8:fb:0f:81:c3:04:e7:b9:
                    78:94:2f:51:0c:57:6c:bf:f6:aa:36:fa:cd:40:9e:
                    91:80:f7:53:c0:b9:84:01:6d:30:54:b5:90:fe:4a:
                    c6:6e:99:95:09:e6:20:11:60:6d:d6:51:25:8f:0f:
                    50:16:d2:51:57:79:bd:a1:88:6f:8f:bb:f0:5c:a8:
                    b8:08:ba:06:95:fe:26:e8:91:2b:46:7a:1e:97:e9:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:2D:5E:36:D5:E6:CF:83:77:FA:EF:CE:9E:6D:24:C5:9D:0F:73
            X509v3 Authority Key Identifier:
                keyid:61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/cootXjbV5s-Dd_rvzp5tJMWdD3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:1a40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:cb:35:68:70:1b:60:4e:38:59:62:f1:6b:b6:cb:88:a6:
         e2:c6:58:f4:21:f9:79:bd:31:6a:32:ac:5b:9a:da:7b:4d:cb:
         ac:4c:aa:02:bf:f1:cd:40:9b:35:75:fa:77:e2:e2:b9:da:a2:
         9d:f1:43:98:1a:b0:46:0d:bd:e1:32:a5:32:b1:3d:de:0b:cb:
         8b:0b:94:67:20:55:c6:4c:5b:77:e8:05:65:4b:17:25:25:7a:
         6f:c1:bb:38:2f:fc:e0:8d:e5:ed:f5:72:3c:6b:08:22:60:43:
         9c:a3:52:5d:13:de:73:e0:07:db:c6:d2:9a:2e:97:8b:d3:84:
         04:84:4d:9c:16:dd:cb:0e:65:c3:bd:ed:bb:8b:ff:f0:9a:fd:
         94:b0:b8:cc:b5:29:b1:23:12:2f:89:6e:6b:12:1b:7f:2a:07:
         ab:da:a9:b5:0e:1c:b7:29:ba:b4:a8:f0:8d:00:01:0d:1c:c4:
         60:56:d6:69:04:5d:fa:3f:8d:6b:82:e7:94:c7:62:af:2d:25:
         3c:e9:5e:28:7a:c9:c5:b8:5c:0c:07:58:9a:f8:e0:2b:0d:ba:
         e4:62:94:02:e0:d2:2d:9b:f5:c2:14:59:05:b7:b5:45:63:a6:
         c5:99:02:7f:65:31:57:18:99:98:7a:09:7b:13:64:9b:51:5a:
         15:d9:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----