Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/4YyW2jowLeJ1PK7SsFFFd9Kb3Q8.roa
File:                     4YyW2jowLeJ1PK7SsFFFd9Kb3Q8.roa (raw, json)
Hash identifier:          t5YxGOaLNjckZLbMDGZdDIcarn4kFKvDWT8g4MBrIuo=
Subject key identifier:   E1:8C:96:DA:3A:30:2D:E2:75:3C:AE:D2:B0:51:45:77:D2:9B:DD:0F
Certificate issuer:       /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial:       0510DD4E
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/4YyW2jowLeJ1PK7SsFFFd9Kb3Q8.roa
Signing time:             Sat 01 Jan 2022 15:56:00 +0000
ROA not before:           Sat 01 Jan 2022 15:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0a:d880:102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84991310 (0x510dd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
        Validity
            Not Before: Jan  1 15:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e18c96da3a302de2753caed2b0514577d29bdd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:41:99:ea:df:73:f5:57:f8:ee:10:4e:d8:
                    4d:59:c0:64:ea:cf:7e:52:47:a9:79:ba:40:42:26:
                    5c:cc:84:00:a4:99:99:d7:55:f5:5a:64:ed:09:01:
                    05:8d:79:00:56:6f:b1:a0:2f:85:8a:fc:ab:56:93:
                    48:df:92:35:2f:89:3b:6b:08:6a:57:62:08:14:24:
                    f7:a7:06:d4:8b:04:d4:51:56:d5:14:ae:8b:dd:46:
                    51:05:18:7b:af:8c:e7:8c:de:44:36:c9:5c:88:b0:
                    31:47:a3:8d:4f:0d:5a:2d:fe:00:82:7c:8f:d6:f0:
                    2e:8b:48:5b:db:c7:83:83:0b:6e:f6:39:4c:85:b5:
                    e9:b1:5d:1e:e8:2d:da:04:24:5a:27:3c:19:fc:a6:
                    c9:e6:5f:a4:2d:85:74:66:c0:58:ca:2c:b7:5a:01:
                    f1:02:6b:ed:61:f6:d3:3d:5d:bd:98:0b:af:e9:fc:
                    eb:e5:05:2b:b7:da:3c:ae:ca:20:25:8e:fb:76:19:
                    bc:bd:f7:70:bb:48:dc:83:2f:78:98:11:16:10:68:
                    a4:e4:41:38:66:10:39:1a:fd:23:f6:69:94:e1:9b:
                    70:ec:e0:a3:fc:19:0b:ad:c9:69:8e:ad:80:a7:a7:
                    73:d0:75:91:b4:89:da:b3:a2:27:e0:46:fb:d0:e0:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:96:DA:3A:30:2D:E2:75:3C:AE:D2:B0:51:45:77:D2:9B:DD:0F
            X509v3 Authority Key Identifier:
                keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/4YyW2jowLeJ1PK7SsFFFd9Kb3Q8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:d880:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:5b:e3:c7:04:d1:d8:d6:82:8b:85:62:c7:f7:e4:f1:74:
         e4:b3:ce:f7:2b:3c:25:0f:db:e8:9f:ad:cf:d6:2e:a3:38:48:
         b6:00:a3:ee:d3:f8:e1:f0:2c:37:d1:3d:bb:b8:c8:48:f2:09:
         a2:e8:fe:d5:8a:fe:98:15:6b:05:1b:2f:63:19:6d:9d:28:7a:
         c0:3c:2a:74:95:d8:94:7a:d8:e2:1e:2e:62:23:af:a7:8b:9f:
         67:60:16:3d:29:74:25:d7:3b:38:a4:9d:25:4c:0d:ca:4d:46:
         18:f8:a9:0b:33:d8:b2:1d:32:60:93:78:b7:b7:da:a2:4c:55:
         57:ee:21:ce:18:65:b6:03:f4:2f:a0:74:19:a1:7d:d2:d8:01:
         26:63:fd:82:1b:26:3f:96:f4:d1:9a:9d:17:7c:5a:7b:65:f2:
         8b:bf:b1:41:4c:b0:12:ac:f4:ab:7d:be:5f:6a:f9:60:89:71:
         cb:b9:ec:b2:b6:6a:a0:5d:99:7b:59:7b:77:22:a5:74:ea:95:
         19:1c:6b:02:5b:04:2f:7a:7f:88:f0:89:63:be:0b:b2:e5:e4:
         7b:7e:ab:7c:13:d9:43:bc:36:9f:94:6a:96:b7:26:3b:20:6c:
         2a:64:83:73:82:44:b1:3d:7e:0a:b4:7e:e5:17:92:93:6b:61:
         f9:db:a4:7e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBRDdTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTBjNTkyZGIxZmRmYzhiNGU2YTBlN2JhNzU2NDY4NjM3M2E2YjVmMB4XDTIyMDEw
MTE1NTYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE4Yzk2ZGEzYTMw
MmRlMjc1M2NhZWQyYjA1MTQ1NzdkMjliZGQwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMiGQZnq33P1V/juEE7YTVnAZOrPflJHqXm6QEImXMyEAKSZ
mddV9Vpk7QkBBY15AFZvsaAvhYr8q1aTSN+SNS+JO2sIaldiCBQk96cG1IsE1FFW
1RSui91GUQUYe6+M54zeRDbJXIiwMUejjU8NWi3+AIJ8j9bwLotIW9vHg4MLbvY5
TIW16bFdHugt2gQkWic8GfymyeZfpC2FdGbAWMost1oB8QJr7WH20z1dvZgLr+n8
6+UFK7faPK7KICWO+3YZvL33cLtI3IMveJgRFhBopORBOGYQORr9I/ZplOGbcOzg
o/wZC63JaY6tgKenc9B1kbSJ2rOiJ+BG+9DgHY8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBThjJbaOjAt4nU8rtKwUUV30pvdDzAfBgNVHSMEGDAWgBRlDFktsf38i05q
DnunVkaGNzprXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pReFpMYkg5X0l0T2FnNTdwMVpHaGpjNmExOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvMWQxYjhkLWM2N2UtNGU5ZC1iMmQ0LTRmZGZmNGQ3NGM5MC8x
LzRZeVcyam93TGVKMVBLN1NzRkZGZDlLYjNROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
MWQxYjhkLWM2N2UtNGU5ZC1iMmQ0LTRmZGZmNGQ3NGM5MC8xL1pReFpMYkg5X0l0
T2FnNTdwMVpHaGpjNmExOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoK2IABAjANBgkqhkiG9w0BAQsF
AAOCAQEAbK5b48cE0djWgouFYsf35PF05LPO9ys8JQ/b6J+tz9YuozhItgCj7tP4
4fAsN9E9u7jISPIJouj+1Yr+mBVrBRsvYxltnSh6wDwqdJXYlHrY4h4uYiOvp4uf
Z2AWPSl0Jdc7OKSdJUwNyk1GGPipCzPYsh0yYJN4t7faokxVV+4hzhhltgP0L6B0
GaF90tgBJmP9ghsmP5b00ZqdF3xae2Xyi7+xQUywEqz0q32+X2r5YIlxy7nssrZq
oF2Ze1l7dyKldOqVGRxrAlsEL3p/iPCJY74LsuXke36rfBPZQ7w2n5RqlrcmOyBs
KmSDc4JEsT1+CrR+5ReSk2th+dukfg==
-----END CERTIFICATE-----