Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/FZtf5fugr-Ylmv_T8o1_MJrYygE.roa
File:                     FZtf5fugr-Ylmv_T8o1_MJrYygE.roa (raw, json)
Hash identifier:          57VzKsX1yI4xKxpLos33hOsyXI0vdehsS9mqszQQfqI=
Subject key identifier:   15:9B:5F:E5:FB:A0:AF:E6:25:9A:FF:D3:F2:8D:7F:30:9A:D8:CA:01
Certificate issuer:       /CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Certificate serial:       0182E7FD9292BBB1A23E4EA7CAFF27547F65
Authority key identifier: DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/FZtf5fugr-Ylmv_T8o1_MJrYygE.roa
Signing time:             Mon 29 Aug 2022 05:05:31 +0000
ROA not before:           Mon 29 Aug 2022 05:05:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:7a80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e7:fd:92:92:bb:b1:a2:3e:4e:a7:ca:ff:27:54:7f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
        Validity
            Not Before: Aug 29 05:05:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=159b5fe5fba0afe6259affd3f28d7f309ad8ca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:9f:1f:10:2c:e9:7c:db:77:21:c0:4f:f9:
                    f5:fb:64:ca:df:27:26:01:8f:99:15:29:14:92:02:
                    f7:3a:77:d6:fa:ff:ad:25:be:ee:aa:89:e0:b7:38:
                    b5:76:96:e1:20:1e:38:d5:f9:54:c8:62:27:46:ed:
                    e9:1d:73:be:78:77:32:2d:53:56:23:9b:52:b0:cf:
                    e2:d7:bd:37:b1:03:8a:4a:37:be:cf:bb:13:c5:48:
                    be:8c:4b:3c:71:d2:79:be:5f:4a:a0:9e:c5:73:73:
                    55:fe:8c:98:10:e6:64:43:74:42:bc:16:90:7b:ff:
                    3c:f9:02:51:a1:a6:14:61:f5:a8:9f:ad:81:45:f8:
                    12:3a:15:30:79:4f:78:be:57:cc:46:35:7a:2e:97:
                    d9:f9:b0:4f:2f:60:bb:57:de:cc:29:c3:35:0c:45:
                    78:bb:39:48:3c:b8:b6:92:66:c6:8d:ff:be:6b:41:
                    3d:e2:08:57:1c:df:51:47:5f:c7:1d:ff:53:1e:c4:
                    89:af:97:b8:09:e1:9c:5a:6e:04:a3:f7:ff:ef:ae:
                    cc:25:69:da:27:dd:ed:56:bb:28:f5:6a:8c:20:24:
                    3b:8c:1a:5e:89:11:36:44:a9:ad:41:29:46:05:65:
                    ba:35:a8:1f:70:d5:70:e0:ad:40:96:e3:54:b6:15:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:5F:E5:FB:A0:AF:E6:25:9A:FF:D3:F2:8D:7F:30:9A:D8:CA:01
            X509v3 Authority Key Identifier:
                keyid:DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/FZtf5fugr-Ylmv_T8o1_MJrYygE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/3vDiAmytPgwmX9bIH_WA2BBN7pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:e4:f1:dc:64:dd:cb:73:c8:f0:30:48:0f:5d:a7:b5:e7:
         23:1f:0c:bf:19:23:e8:c3:55:2d:0c:9c:90:68:97:ad:f6:6c:
         44:61:6e:c9:73:a9:fb:fc:fe:a4:25:a1:2c:7a:6b:30:10:e1:
         4a:36:9d:8a:f7:0f:40:c7:40:77:f7:8b:7b:1a:d3:8e:39:24:
         09:45:02:9d:fe:55:5d:ec:23:d3:4c:fd:8e:e4:ba:61:90:c6:
         e4:70:b9:1d:2d:f3:7e:34:ee:a1:d2:60:95:ea:b3:ce:d5:8a:
         6e:91:82:25:5f:fe:d2:d8:5c:23:74:c7:98:27:d2:34:95:1c:
         ba:41:8b:cc:61:1a:99:c8:bb:2c:2b:dc:d7:3a:9e:c3:b6:99:
         cb:51:d8:14:38:cf:d6:c7:f9:df:da:66:ef:80:2d:f9:7e:17:
         8e:59:24:0b:fe:26:8b:cc:4b:1c:a0:6e:77:09:81:27:4b:2f:
         aa:18:25:3a:bd:39:c6:e1:bf:28:98:1b:31:08:89:87:c1:c6:
         e3:46:6a:60:9b:bf:0b:fb:30:c9:7d:69:18:9e:07:2b:ad:38:
         2b:35:e0:0d:98:76:59:22:e4:af:0a:e2:fe:df:74:18:95:c2:
         29:4d:6b:c4:b8:19:7f:3a:a6:87:08:6d:fe:96:3f:9f:5b:01:
         fc:46:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----