Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/C7a1KCOVv_oMUAB0-IdToOkG80E.roa
File:                     C7a1KCOVv_oMUAB0-IdToOkG80E.roa (raw, json)
Hash identifier:          Gqa7Ju842xx164Z9X6dLMWEVsvtjhnlmwAPtyaxHGPs=
Subject key identifier:   0B:B6:B5:28:23:95:BF:FA:0C:50:00:74:F8:87:53:A0:E9:06:F3:41
Certificate issuer:       /CN=530edbe7297de5c3576527f74590874f8dca2f53
Certificate serial:       0543135D
Authority key identifier: 53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uw7b5yl95cNXZSf3RZCHT43KL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/C7a1KCOVv_oMUAB0-IdToOkG80E.roa
Signing time:             Sat 01 Jan 2022 11:56:06 +0000
ROA not before:           Sat 01 Jan 2022 11:56:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213318
IP address blocks:        2001:678:d2c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88281949 (0x543135d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530edbe7297de5c3576527f74590874f8dca2f53
        Validity
            Not Before: Jan  1 11:56:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bb6b5282395bffa0c500074f88753a0e906f341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:07:74:f2:03:46:70:7f:66:db:80:d5:52:
                    75:88:e7:71:f2:0a:6f:86:e6:9c:76:a3:86:c0:91:
                    f6:d7:0e:62:84:b0:ed:7b:83:79:ae:d1:df:4a:98:
                    78:b9:2b:35:5b:05:3b:10:b3:73:5a:2f:1c:d7:85:
                    49:f3:a6:c7:a3:13:2f:59:42:d9:7f:e8:b7:b1:1e:
                    2e:b1:f9:4c:90:4c:ea:f7:ce:7a:f5:5d:96:dd:19:
                    08:a0:4d:37:f5:82:26:73:ad:41:bb:02:44:2d:38:
                    e6:e3:b3:a0:39:41:40:37:fe:46:74:b8:0b:41:0b:
                    5b:ee:17:39:ac:3b:da:96:76:d5:3e:e9:9b:31:c5:
                    63:c5:d3:95:07:ce:c2:23:68:c9:6e:d5:e9:43:0f:
                    00:e0:03:38:39:b0:f4:d7:1c:23:13:6d:17:99:70:
                    0a:98:88:05:fd:5e:32:fb:49:83:2f:54:34:cf:91:
                    d9:05:a8:96:4a:0f:c4:ad:05:16:77:ec:56:c5:a6:
                    c5:d1:b6:aa:50:8b:9c:d3:60:f1:82:f0:da:09:ee:
                    14:f3:78:f0:87:d8:a5:88:2e:b1:e5:e9:19:2c:25:
                    46:95:1f:73:53:72:8e:eb:27:79:11:7e:18:bc:59:
                    0d:9b:ee:61:c1:aa:20:94:f6:15:1b:81:47:3f:9d:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:B5:28:23:95:BF:FA:0C:50:00:74:F8:87:53:A0:E9:06:F3:41
            X509v3 Authority Key Identifier:
                keyid:53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw7b5yl95cNXZSf3RZCHT43KL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/C7a1KCOVv_oMUAB0-IdToOkG80E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/Uw7b5yl95cNXZSf3RZCHT43KL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:65:14:c7:5a:2a:1a:6e:d4:a4:06:b3:93:a8:9b:4e:e0:
         97:ec:1d:70:84:97:10:e9:96:f0:de:77:50:88:6a:11:36:b5:
         f7:e5:96:38:29:38:c4:dd:2b:f5:42:da:b5:b8:71:e9:38:dd:
         a6:72:79:52:b7:41:21:c9:5f:63:9b:64:ad:41:f4:79:93:7e:
         43:a6:4d:16:62:e1:a3:03:91:03:63:7a:73:e4:87:e5:54:55:
         b7:67:c8:ef:1a:6b:96:52:5e:40:73:be:40:57:d9:b4:39:b1:
         2c:94:02:ad:0f:b0:08:1c:b8:64:4c:48:74:a6:cd:a5:a8:2c:
         9c:6e:51:cc:19:cd:29:39:18:1f:fa:b4:c8:00:23:1e:77:34:
         d2:a6:13:cc:2e:49:dd:52:15:58:17:66:dc:e8:f3:db:de:d4:
         19:f1:ab:70:44:17:a3:80:57:3f:53:33:3e:e4:ff:51:38:f1:
         9a:0f:e1:a1:ec:11:b0:66:42:67:1d:ea:5a:89:6d:f8:3c:d6:
         57:aa:01:8b:bc:b6:30:59:cf:ee:78:97:84:b6:de:e9:43:98:
         05:7d:05:e7:43:d3:f2:d9:46:33:05:70:4d:18:22:fa:94:9e:
         5b:53:2f:69:1d:2b:a2:f5:d5:d8:33:a4:ff:80:3d:e3:aa:98:
         54:9b:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----