Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/SUmG1f-CF0ckwjwz3Ft9PI5G--I.roa
File:                     SUmG1f-CF0ckwjwz3Ft9PI5G--I.roa (raw, json)
Hash identifier:          hvc5noV6bLbthJDWbccypybqmNmsbQQsQPRGf0RYJgQ=
Subject key identifier:   49:49:86:D5:FF:82:17:47:24:C2:3C:33:DC:5B:7D:3C:8E:46:FB:E2
Certificate issuer:       /CN=c2a80723992115cad17775b7a71c0f417d3643a2
Certificate serial:       015E08
Authority key identifier: C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/SUmG1f-CF0ckwjwz3Ft9PI5G--I.roa
Signing time:             Thu 03 Mar 2022 15:33:51 +0000
ROA not before:           Thu 03 Mar 2022 15:33:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207908
IP address blocks:        2001:678:d84::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89608 (0x15e08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a80723992115cad17775b7a71c0f417d3643a2
        Validity
            Not Before: Mar  3 15:33:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=494986d5ff82174724c23c33dc5b7d3c8e46fbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:53:a1:ea:e8:9e:4b:58:88:8b:3a:79:1f:
                    65:8d:ac:91:9c:f2:35:52:2c:a6:81:ef:89:33:04:
                    f4:cb:13:bd:17:84:0d:6f:a5:fc:9d:ba:b9:34:e8:
                    bc:95:4f:77:d9:8e:b3:c4:31:b0:e8:6c:42:3c:2a:
                    50:77:ce:ba:06:a2:d7:59:81:7d:41:28:ee:18:7b:
                    5e:b0:f9:05:01:24:f4:ce:16:a3:0c:4f:4e:1e:19:
                    29:cb:c5:77:60:7a:b5:dc:47:a6:fb:e3:06:f0:a3:
                    05:dc:aa:84:46:1a:24:77:4f:bd:17:35:dd:56:6c:
                    fd:5b:27:89:79:0f:20:d9:1a:bf:6d:c5:07:c2:6d:
                    1f:b7:46:af:b0:88:5b:55:af:b0:e0:8e:a2:d7:94:
                    91:4a:9b:f1:db:cb:12:83:3c:89:de:7a:36:cd:a1:
                    17:0f:ec:f1:7a:f2:ca:37:67:30:9f:fd:37:1c:85:
                    ff:5a:64:80:1b:9f:93:a1:eb:44:eb:2d:79:41:75:
                    c9:66:7e:90:e9:78:30:64:0b:0b:9b:63:8a:e0:ee:
                    5e:18:b2:e5:7b:2b:9e:57:cd:42:c0:ab:47:08:b5:
                    27:a5:22:86:26:f4:e6:c0:ab:86:5c:41:a0:d5:96:
                    58:2d:72:59:b0:9e:f9:98:e4:7b:31:36:d2:1d:d6:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:49:86:D5:FF:82:17:47:24:C2:3C:33:DC:5B:7D:3C:8E:46:FB:E2
            X509v3 Authority Key Identifier:
                keyid:C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/SUmG1f-CF0ckwjwz3Ft9PI5G--I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d84::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:b2:e6:7b:62:dd:b7:4e:da:35:68:46:a6:fb:ae:80:8d:
         bf:51:0f:7d:c6:d7:a9:7b:55:58:df:26:70:6b:14:7c:3b:12:
         07:cc:e5:25:d0:a5:50:18:71:2d:ad:f9:08:54:4b:99:5d:2d:
         1f:b4:14:a5:ed:0b:1c:f3:7b:6f:fa:60:71:63:78:5c:83:cb:
         ee:20:91:5a:74:6a:20:80:7d:c9:40:59:c9:66:e0:37:b9:3c:
         66:37:8f:2a:19:24:70:f5:e1:af:66:fa:67:17:8c:a1:d9:03:
         e2:13:15:5f:2f:df:6b:da:5f:d2:85:8b:88:fe:49:68:7f:93:
         9c:92:ed:64:4d:fe:8c:4f:1a:19:6f:89:7a:07:1f:0b:30:e6:
         c5:48:00:27:cc:d3:94:29:dc:2c:de:ec:1f:16:07:14:2a:46:
         c5:a4:7f:05:c4:0a:c9:c1:bb:bc:5d:e4:2e:51:c4:c9:04:74:
         e2:8e:82:20:b2:98:07:23:82:c6:98:e0:f4:25:65:ab:e3:16:
         a2:fb:10:92:3d:dd:a6:95:11:de:b0:77:cd:d4:38:c2:e0:63:
         0e:d4:66:4b:32:28:dd:04:29:dc:8d:2c:5a:5e:28:93:7b:19:
         f4:df:90:66:63:78:40:d4:4e:da:35:db:00:26:ad:5b:b7:25:
         08:37:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----