Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eX-N4aiy86v19IdnILCUTEZl9Ic.roa
File:                     eX-N4aiy86v19IdnILCUTEZl9Ic.roa (raw, json)
Hash identifier:          Cf7KFTXdZAVb+4MwOiA+mQcMUA+uGAzV6FZfD2LbPfA=
Subject key identifier:   79:7F:8D:E1:A8:B2:F3:AB:F5:F4:87:67:20:B0:94:4C:46:65:F4:87
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       02773E79
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eX-N4aiy86v19IdnILCUTEZl9Ic.roa
Signing time:             Thu 02 Jun 2022 10:13:26 +0000
ROA not before:           Thu 02 Jun 2022 10:13:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211944
IP address blocks:        2a11:29c0:3df2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41369209 (0x2773e79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jun  2 10:13:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=797f8de1a8b2f3abf5f4876720b0944c4665f487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:81:53:2d:c6:bc:77:b5:e6:1b:e6:d3:5d:
                    71:d0:71:43:63:98:c1:4c:8b:22:cf:58:c7:68:66:
                    72:30:a6:44:18:1d:1e:6e:1c:34:49:ed:f2:b3:f0:
                    1f:2e:75:ee:1d:29:7a:5a:cf:1e:96:90:95:bc:ee:
                    cf:0d:24:4a:e9:96:8a:2f:fd:6b:df:2d:75:cb:75:
                    73:db:19:72:30:3b:d6:90:aa:88:f7:c7:c7:f1:a1:
                    01:5a:d2:47:4a:52:88:a5:f3:e7:35:3a:5f:a3:6f:
                    de:c4:75:09:c8:b6:b7:3d:26:65:4f:33:bb:69:e0:
                    31:ac:47:5a:e9:44:c8:a3:f3:33:8c:41:b1:70:07:
                    62:11:9c:a8:e8:ad:35:d6:76:4b:3b:ba:8c:40:38:
                    53:d6:c5:a3:74:49:84:75:58:05:e3:82:28:a3:19:
                    44:b8:d2:ae:bd:6d:65:35:42:ca:ff:52:06:8e:ed:
                    a6:69:b1:d4:f3:7c:eb:d5:56:c0:53:e7:21:c4:6d:
                    50:dc:66:c2:9f:02:be:fc:ee:24:09:ce:59:5b:31:
                    37:26:12:a5:77:37:fc:57:01:23:4d:b3:0b:0b:ba:
                    88:07:f6:6d:05:ad:73:37:01:53:c7:49:9f:32:53:
                    60:b8:59:f1:a5:2a:bb:c0:70:bb:7a:88:be:d4:3f:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:8D:E1:A8:B2:F3:AB:F5:F4:87:67:20:B0:94:4C:46:65:F4:87
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eX-N4aiy86v19IdnILCUTEZl9Ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:fc:e9:1b:93:21:2b:07:a2:a1:dd:75:d6:23:47:e8:81:8f:
         10:0b:9e:a5:27:5b:85:ad:0f:ef:23:c5:22:55:dd:ba:8f:2c:
         54:49:56:10:53:52:4d:cd:bd:3a:00:2b:ed:f7:1e:5f:69:41:
         26:c5:b7:b4:07:ed:c4:48:5a:aa:a2:8d:16:b6:4f:ff:12:bb:
         c1:9f:d5:ac:86:88:57:83:d1:3b:e8:16:0f:d9:0d:57:ba:34:
         d3:41:e5:ae:e3:58:aa:e3:da:ea:a5:e7:bb:98:90:68:b9:fd:
         a1:b2:97:11:ed:6b:94:10:3f:2c:9b:c7:7b:49:89:3c:d9:54:
         e3:a9:94:28:af:5a:97:b0:7d:59:d8:c7:b4:0d:70:90:3b:fb:
         c7:d7:77:7a:3c:d0:f4:29:0c:3a:cc:d4:fc:49:75:24:c2:fe:
         2a:8b:29:3b:d7:01:97:3b:6a:49:16:fa:b1:f8:c0:b9:41:66:
         69:55:3f:fa:d6:a4:52:5e:c6:28:36:8b:4c:f7:0e:cc:56:f9:
         2f:f6:aa:23:f3:05:24:dc:da:08:6d:f3:e1:aa:d6:31:b7:b2:
         52:82:5c:67:57:c0:e2:55:e0:5f:2b:13:b8:e9:a3:ec:e0:b5:
         7d:6f:cd:d7:4b:8b:73:48:b9:bd:c0:b0:12:0f:35:62:7d:70:
         b7:20:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----