Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/e1aFSetB2tQHeiU_ZaWjQh_uaTI.roa
File:                     e1aFSetB2tQHeiU_ZaWjQh_uaTI.roa (raw, json)
Hash identifier:          t3Se0Q4/tfsRXskVc/NRkdWyq+tu7bc4+N1o3CKStzI=
Subject key identifier:   7B:56:85:49:EB:41:DA:D4:07:7A:25:3F:65:A5:A3:42:1F:EE:69:32
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       026E48BA
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/e1aFSetB2tQHeiU_ZaWjQh_uaTI.roa
Signing time:             Thu 02 Jun 2022 10:13:21 +0000
ROA not before:           Thu 02 Jun 2022 10:13:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208471
IP address blocks:        2a11:29c0:3df7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40782010 (0x26e48ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jun  2 10:13:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b568549eb41dad4077a253f65a5a3421fee6932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:5e:3f:94:21:80:c6:d3:60:e9:ef:b5:1c:
                    c9:8f:b7:b7:6d:b6:0f:99:ac:f5:3d:00:2d:14:1e:
                    44:95:4c:6f:93:f9:f7:b2:c2:57:9b:4e:59:42:2c:
                    09:7b:15:14:f1:dc:b8:08:fa:3a:72:79:3b:27:8c:
                    92:51:87:7c:70:d1:3c:07:db:6f:48:33:79:54:24:
                    1a:28:c6:4f:e2:44:41:a2:44:d4:65:24:84:9f:63:
                    19:ed:db:0f:c7:0b:9b:7c:91:40:f8:8c:43:8a:5f:
                    37:47:4d:68:79:52:6c:d2:a4:bc:4c:bd:1c:fb:52:
                    a5:89:7b:4c:dc:b3:2d:0b:92:9e:59:47:2a:75:c0:
                    ac:08:a5:a8:b0:3e:20:28:c0:63:c8:9b:5d:b1:79:
                    f2:82:36:12:0a:69:2f:9a:35:22:93:96:97:76:c8:
                    bb:21:45:f5:d4:37:a3:4b:65:c9:13:ab:4b:34:c4:
                    1e:83:71:80:b8:a7:d9:6e:b4:c7:e1:8e:06:47:ec:
                    df:81:8c:ad:5b:ab:fc:32:f5:41:08:a2:a2:ef:6f:
                    f1:f3:da:07:5e:ae:d5:9d:7d:30:cd:ef:60:10:e0:
                    d1:0a:a6:1b:f8:ff:9c:cb:cd:fb:ae:c2:62:39:86:
                    4c:97:25:c8:42:f9:c7:90:02:f1:ba:ca:78:0d:c7:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:56:85:49:EB:41:DA:D4:07:7A:25:3F:65:A5:A3:42:1F:EE:69:32
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/e1aFSetB2tQHeiU_ZaWjQh_uaTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df7::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:cd:5d:31:36:f5:19:ec:d5:90:81:24:bb:f1:42:e4:64:
         42:7f:f4:80:d8:f6:dd:d3:53:ed:25:31:ee:8d:da:34:a7:6f:
         02:b3:9b:fe:d6:c3:da:52:c2:61:24:a2:65:bd:3f:10:7d:08:
         30:e1:71:6f:20:24:7c:43:8e:fd:42:98:68:20:43:ea:d0:6c:
         7c:e4:0f:40:2f:8b:e0:6e:ca:89:a1:cb:02:fc:d7:a7:22:d5:
         a0:ef:00:65:f5:6f:90:f4:d8:5a:69:49:4a:fa:3c:fb:40:03:
         5c:20:6f:07:76:4f:3b:7f:3c:2a:10:a3:63:d5:46:be:37:9e:
         27:5e:82:e4:74:f1:68:a3:c8:6d:20:bf:b9:f0:c4:d3:c7:5c:
         8c:ff:f1:b7:d9:6a:a8:e4:21:2a:7f:45:15:5c:58:71:2f:a0:
         52:bd:55:52:d7:5a:12:fc:59:1b:97:2d:d2:43:b6:da:f5:aa:
         4a:ad:72:e4:9f:53:48:08:7d:40:bf:54:3e:bb:18:fc:a1:ea:
         46:0d:c7:03:62:9c:71:94:02:d4:88:7e:93:0a:55:80:1b:46:
         f4:1d:97:0e:92:0c:51:35:57:a1:ae:d1:5b:26:9d:15:ea:8e:
         8a:4e:f2:92:6a:49:23:d4:2e:7f:16:f4:90:a1:c4:9c:80:8d:
         e8:71:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----