Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/CtQfd7s8eOdqyNu4XdsQAx8Mke0.roa
File:                     CtQfd7s8eOdqyNu4XdsQAx8Mke0.roa (raw, json)
Hash identifier:          zcPFi3G9rDoajQqBlqINjLMyUyBy4lI9bt9lA+WmlW4=
Subject key identifier:   0A:D4:1F:77:BB:3C:78:E7:6A:C8:DB:B8:5D:DB:10:03:1F:0C:91:ED
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       026CC617
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/CtQfd7s8eOdqyNu4XdsQAx8Mke0.roa
Signing time:             Thu 02 Jun 2022 10:13:21 +0000
ROA not before:           Thu 02 Jun 2022 10:13:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208333
IP address blocks:        2a11:29c0:3df5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40683031 (0x26cc617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jun  2 10:13:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ad41f77bb3c78e76ac8dbb85ddb10031f0c91ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:e0:2a:36:22:4e:66:a2:d1:e5:f2:5e:e6:
                    22:e9:22:36:49:a8:a7:56:bd:6a:62:6c:7b:db:99:
                    d4:6c:6d:86:d4:49:1a:9c:5b:aa:7c:2f:f6:1e:d1:
                    42:8d:d3:2b:5c:5f:d6:61:1f:5f:6e:7f:f8:f5:c1:
                    c7:9b:ce:65:03:c5:73:c7:d7:fc:11:7b:66:55:29:
                    c1:50:92:b3:e3:02:12:1c:1a:72:e6:ea:5e:3b:02:
                    31:4b:66:20:23:2c:d8:03:c1:70:43:76:d6:dd:93:
                    97:3a:0a:f2:bb:19:d7:28:4f:61:4b:17:a2:42:7e:
                    7d:0a:d6:95:1d:2d:5a:2b:69:52:e8:88:a0:c5:4a:
                    4b:86:07:4a:b7:a0:e7:86:f7:97:56:8a:e6:cc:43:
                    1a:45:60:39:8e:6f:35:f5:a2:c5:20:09:c3:94:bc:
                    88:f8:56:23:93:5f:34:57:a0:b2:ff:5d:78:04:cf:
                    2b:0b:07:89:fe:f2:c9:ad:58:96:dd:cb:f8:49:28:
                    76:06:11:fb:f7:91:d0:e8:2e:9c:6d:46:61:ae:d7:
                    90:1f:4c:20:6d:c2:36:1a:f2:01:51:40:a8:80:3e:
                    25:e5:25:ec:7a:17:06:2e:2d:c1:5e:2c:e5:56:83:
                    e0:53:14:03:4a:16:7f:a9:9c:57:0c:eb:f8:61:35:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:1F:77:BB:3C:78:E7:6A:C8:DB:B8:5D:DB:10:03:1F:0C:91:ED
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/CtQfd7s8eOdqyNu4XdsQAx8Mke0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df5::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:eb:f6:aa:93:93:13:29:4f:11:3d:c1:95:33:44:7b:c2:
         a5:be:f1:aa:67:b0:33:60:7b:c3:ba:52:df:a4:24:f7:40:df:
         2c:2c:3f:20:81:79:c4:60:af:40:45:54:dd:05:b9:fc:a5:5e:
         35:c5:21:bf:fe:06:e3:4b:7a:8c:43:14:76:b5:5e:47:ae:d9:
         c0:87:b0:6d:d7:aa:b3:40:8e:0a:13:ab:ea:a6:12:a0:20:0b:
         3f:e6:1d:ad:85:ce:11:d0:ea:50:45:83:36:af:58:c5:c8:4c:
         86:15:ec:1f:d9:99:b6:9a:a2:ea:c6:4b:8a:89:c0:42:fd:8a:
         ea:3c:58:c9:90:02:3b:2c:b8:52:eb:7b:85:c2:2c:53:e2:11:
         cd:3b:c2:bc:6a:24:65:c8:89:c8:34:7b:9c:2c:68:b3:dd:cc:
         8e:da:9c:1e:79:17:29:a3:ed:b6:56:44:26:f5:eb:cd:48:c9:
         9f:44:56:8b:b6:80:58:3e:f2:03:0d:50:d1:b1:d9:45:a6:55:
         ea:e1:c7:bd:98:7d:56:2a:6c:f7:53:7a:13:68:ea:51:c2:cb:
         67:ec:4d:ec:7a:67:f7:1c:66:f2:b9:36:20:ae:c4:25:2f:f3:
         d6:75:d2:16:75:fe:9f:96:1a:48:49:c7:03:8c:18:8f:2b:8a:
         51:cb:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----