Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/OHcrL7--SwoKbeJelMMKAq7wEqc.roa
File:                     OHcrL7--SwoKbeJelMMKAq7wEqc.roa (raw, json)
Hash identifier:          ukaLdBotjZWhbqxWcOnv1kw8h6DaCXDBw7TfIEX0jRw=
Subject key identifier:   38:77:2B:2F:BF:BE:4B:0A:0A:6D:E2:5E:94:C3:0A:02:AE:F0:12:A7
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       0274967A
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/OHcrL7--SwoKbeJelMMKAq7wEqc.roa
Signing time:             Thu 02 Jun 2022 10:13:25 +0000
ROA not before:           Thu 02 Jun 2022 10:13:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210348
IP address blocks:        2a11:29c0:3dfc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41195130 (0x274967a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jun  2 10:13:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38772b2fbfbe4b0a0a6de25e94c30a02aef012a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:6f:b2:fd:fd:02:60:98:a4:de:d4:9c:87:
                    fc:e0:15:fb:7e:fa:e9:60:87:09:d2:e2:40:5c:ed:
                    2b:fc:17:f0:f2:83:62:dd:b5:50:ec:65:1d:6c:7a:
                    15:6b:08:33:bc:3b:24:6d:59:2b:09:ec:56:1e:30:
                    c5:98:23:f7:ce:c4:55:42:17:e3:d2:ca:0d:a3:2a:
                    30:f2:35:e0:0e:e1:00:ca:4c:4f:4f:d2:fc:fd:0d:
                    39:3e:00:19:0c:e6:b5:42:bb:49:17:39:8a:3c:96:
                    ab:7c:5f:48:38:4a:b1:a4:91:1f:f3:46:b5:5a:2e:
                    25:32:93:33:1f:13:83:3d:b9:26:47:f0:2e:ee:f6:
                    da:17:9c:5d:dd:a2:39:7d:f1:06:48:d4:6b:52:60:
                    eb:f5:c2:f3:27:2b:99:ec:3f:e7:7a:56:90:c0:94:
                    a1:c4:e3:83:16:a2:6e:60:fa:f3:64:6a:f9:a3:41:
                    be:f1:7b:5f:0e:2f:9a:f9:d7:da:d3:86:a2:f6:cb:
                    31:e0:0c:b0:16:b3:54:6d:0a:e4:49:17:7f:37:47:
                    a3:bc:20:59:5d:68:58:6f:54:0f:9b:d5:de:2a:ef:
                    34:fd:41:8a:28:cb:a8:9d:30:ff:6a:98:ae:ed:ac:
                    e9:2f:73:f7:be:85:be:96:02:fd:d1:88:03:f1:42:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:77:2B:2F:BF:BE:4B:0A:0A:6D:E2:5E:94:C3:0A:02:AE:F0:12:A7
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/OHcrL7--SwoKbeJelMMKAq7wEqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3dfc::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:2e:dd:03:8c:05:95:6f:83:f5:8f:5b:c1:32:a0:1c:81:a4:
         5b:0b:5c:b5:20:62:5e:8e:c4:79:74:2f:c8:55:a1:40:44:6d:
         6b:4f:7d:93:67:4e:1e:3c:4c:5f:f9:b0:52:bb:24:fd:fa:f4:
         52:0d:e0:ec:69:9f:0d:94:59:97:10:72:a7:f0:40:5a:46:a3:
         1b:1b:02:d5:77:49:99:06:57:8e:f0:e2:58:d2:be:29:9b:f9:
         10:50:bc:dc:ef:7e:88:60:e7:f1:8c:6b:97:50:4e:4a:a3:74:
         a5:b6:13:2f:c1:3f:b1:69:2f:d1:3a:70:19:2b:84:b8:cf:09:
         42:6f:4f:a9:a3:63:96:7a:00:9f:f9:18:33:59:86:7b:bc:39:
         43:ff:37:4d:f5:b8:c2:cf:73:dc:b7:e7:c0:19:29:2c:1b:fd:
         d6:ad:a2:d8:e6:5d:b9:89:89:26:f5:d1:fd:af:f8:42:72:67:
         41:61:7a:ac:ad:23:51:42:e4:ed:19:47:51:d4:e5:29:c6:c6:
         4f:41:7d:56:ee:9b:06:b5:20:e8:4b:e9:e6:ed:07:4c:ee:3f:
         db:3e:7e:cd:5c:4e:bb:f0:63:47:0f:cc:cf:18:34:5f:b7:71:
         b7:d9:80:ee:1b:28:2f:58:d8:22:3f:b0:0c:2b:70:82:25:1e:
         22:41:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----