Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202222.roa
File:                     AS202222.roa (raw, json)
Hash identifier:          espx3d8FjSSpsDGhB3mIMdbWlarQxiTCld1136o3zWA=
Subject key identifier:   EC:3F:A2:C7:F6:5F:95:DC:E4:04:31:28:F2:A1:A7:9B:EC:C9:25:C1
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       6594E131046C5F7EA585FD04ED734F73850E819F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202222.roa
Signing time:             Sun 01 Jan 2023 23:59:14 +0000
ROA not before:           Sun 01 Jan 2023 23:54:14 +0000
ROA not after:            Sun 31 Dec 2023 23:59:14 +0000
asID:                     202222
IP address blocks:        2a06:a005:d2c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:e1:31:04:6c:5f:7e:a5:85:fd:04:ed:73:4f:73:85:0e:81:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:14 2023 GMT
            Not After : Dec 31 23:59:14 2023 GMT
        Subject: CN=EC3FA2C7F65F95DCE4043128F2A1A79BECC925C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:dd:21:b8:56:db:cc:16:4d:23:d5:bf:53:
                    b8:98:2d:8c:3a:5f:b4:98:d1:c7:a5:9e:38:ea:1f:
                    56:84:10:31:90:75:e4:cc:0d:2f:09:af:3d:d4:23:
                    e0:0e:4f:2c:eb:f1:42:88:ea:4e:dd:6c:d0:e8:8c:
                    f9:e5:f0:d0:37:22:40:82:2b:50:b8:67:c5:ba:28:
                    65:63:d5:33:b2:ee:b2:00:25:d7:19:c4:17:ca:1a:
                    2f:1c:8d:4a:9f:fc:3a:60:72:b4:41:44:36:73:35:
                    ec:76:76:07:f0:ec:93:52:1f:e2:42:7a:2b:15:0e:
                    ea:d7:c2:b3:a4:b5:6c:49:9d:35:a7:d4:7c:4b:f8:
                    25:52:fc:79:50:d9:03:a1:c8:f6:0a:2a:bc:6a:97:
                    d0:88:2e:6c:c8:12:60:91:52:2e:76:c3:8c:88:4f:
                    e1:0f:e1:d7:cd:6b:ce:be:06:49:8f:52:f8:94:29:
                    b6:a2:49:15:e1:68:1b:41:20:c7:d7:3b:de:f5:30:
                    36:cf:30:d7:a8:fa:ed:1a:92:8b:ff:e2:ed:31:27:
                    a7:05:3c:99:ea:a7:d2:5e:98:70:17:de:49:b7:0f:
                    b3:b4:ec:a9:7d:90:50:4c:59:c2:00:c9:61:a6:f1:
                    93:e6:ab:92:97:29:04:e8:db:9a:9d:e6:00:d9:1d:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3F:A2:C7:F6:5F:95:DC:E4:04:31:28:F2:A1:A7:9B:EC:C9:25:C1
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:7b:83:30:eb:4e:d8:f7:8c:f0:9e:49:d3:07:d9:be:f4:
         27:80:59:7d:36:48:0c:2f:4f:77:71:a6:73:77:87:41:28:52:
         7e:84:23:c2:c9:df:09:4b:49:f5:35:db:54:b9:c9:1e:eb:81:
         bd:97:64:01:cb:ea:51:22:cd:24:df:29:f9:3a:5d:e6:fa:ed:
         06:6b:28:1f:35:df:a6:5f:fc:6a:0d:34:32:1b:46:f8:c0:47:
         86:75:cc:ab:05:c9:b6:68:d4:55:e8:3d:81:7c:6b:e0:e6:9e:
         2a:94:7f:40:72:19:59:64:6a:83:56:a7:35:a3:8e:8e:3c:58:
         c0:40:0a:cd:bc:50:16:e5:df:80:ff:ec:f9:74:f8:29:f0:5d:
         d4:39:94:b8:0b:5e:66:ed:d3:56:96:35:f0:0e:53:d9:07:62:
         4e:b6:7c:fe:b9:da:68:2a:ff:3f:9d:88:e7:40:63:4a:b1:5f:
         06:a2:d1:f8:54:d8:3f:d8:4a:65:6b:a1:11:6d:b6:46:00:a4:
         43:66:bc:63:13:5c:5e:45:dd:59:c5:50:ad:6f:40:60:81:8b:
         d3:25:fa:3c:29:a6:da:ec:1f:e6:b6:ac:8a:c6:93:aa:6e:35:
         0e:8e:82:08:98:c3:bc:1c:84:7f:23:b0:4d:d9:c8:e9:1b:02:
         c4:31:77:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZZThMQRsX36lhf0E7XNPc4UOgZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTRaFw0yMzEyMzEyMzU5MTRaMDMxMTAvBgNV
BAMTKEVDM0ZBMkM3RjY1Rjk1RENFNDA0MzEyOEYyQTFBNzlCRUNDOTI1QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w90huFbbzBZNI9W/U7iYLYw6
X7SY0celnjjqH1aEEDGQdeTMDS8Jrz3UI+AOTyzr8UKI6k7dbNDojPnl8NA3IkCC
K1C4Z8W6KGVj1TOy7rIAJdcZxBfKGi8cjUqf/DpgcrRBRDZzNex2dgfw7JNSH+JC
eisVDurXwrOktWxJnTWn1HxL+CVS/HlQ2QOhyPYKKrxql9CILmzIEmCRUi52w4yI
T+EP4dfNa86+BkmPUviUKbaiSRXhaBtBIMfXO971MDbPMNeo+u0akov/4u0xJ6cF
PJnqp9JemHAX3km3D7O07Kl9kFBMWcIAyWGm8ZPmq5KXKQTo25qd5gDZHUbvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU7D+ix/ZfldzkBDEo8qGnm+zJJcEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAyMjIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQ0sMA0GCSqGSIb3DQEBCwUAA4IBAQBLI3uDMOtO2PeM8J5J0wfZvvQngFl9NkgM
L093caZzd4dBKFJ+hCPCyd8JS0n1NdtUucke64G9l2QBy+pRIs0k3yn5Ol3m+u0G
aygfNd+mX/xqDTQyG0b4wEeGdcyrBcm2aNRV6D2BfGvg5p4qlH9AchlZZGqDVqc1
o46OPFjAQArNvFAW5d+A/+z5dPgp8F3UOZS4C15m7dNWljXwDlPZB2JOtnz+udpo
Kv8/nYjnQGNKsV8GotH4VNg/2Epla6ERbbZGAKRDZrxjE1xeRd1ZxVCtb0BggYvT
Jfo8Kaba7B/mtqyKxpOqbjUOjoIImMO8HIR/I7BN2cjpGwLEMXfH
-----END CERTIFICATE-----