Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mkI3CQiK1uTrad5kvRldSj4u9rw.roa
File:                     mkI3CQiK1uTrad5kvRldSj4u9rw.roa (raw, json)
Hash identifier:          k7iPd/JKUIxv8ec9VAEoO+gsXXfDcgjqIa2sm/p8yZk=
Subject key identifier:   9A:42:37:09:08:8A:D6:E4:EB:69:DE:64:BD:19:5D:4A:3E:2E:F6:BC
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       0270B740
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mkI3CQiK1uTrad5kvRldSj4u9rw.roa
Signing time:             Thu 02 Jun 2022 10:13:23 +0000
ROA not before:           Thu 02 Jun 2022 10:13:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208771
IP address blocks:        2a11:29c0:3df9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40941376 (0x270b740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jun  2 10:13:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a423709088ad6e4eb69de64bd195d4a3e2ef6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:f4:b6:df:a1:8d:9f:c7:16:dc:7c:ab:d4:
                    8c:05:e1:17:7f:21:06:7e:98:a5:32:2f:1d:d8:b8:
                    23:7f:91:06:26:35:37:a5:20:c0:7d:49:fc:42:7c:
                    4a:38:36:ec:45:47:ef:d2:2e:90:6f:9f:53:c1:f4:
                    e0:0c:30:5d:13:cd:e0:f5:c0:c6:20:9c:ca:e2:4b:
                    43:59:cf:26:8c:e3:9a:f9:8b:fb:0a:68:c9:98:70:
                    c3:77:3d:1a:f3:01:d0:6a:18:ac:8e:4d:5d:33:97:
                    9a:58:b3:3a:bf:79:ce:63:07:25:43:e7:a0:76:65:
                    a7:32:32:98:95:d7:8b:11:2d:5f:72:c9:15:94:d3:
                    94:91:7c:85:fc:d7:8c:eb:7d:59:88:0d:16:77:84:
                    09:8c:bf:2a:0a:10:43:6f:62:15:66:c5:0f:22:68:
                    62:76:32:36:df:82:e6:4b:b5:60:8e:82:ae:d3:1c:
                    62:56:ee:0b:94:ff:30:02:9b:56:fa:e7:e0:e0:df:
                    1d:5c:2b:f0:52:02:24:cf:4b:bc:8d:17:93:05:6f:
                    46:d6:dc:12:b7:48:91:e1:ab:d3:81:1c:61:eb:2e:
                    78:f2:0a:c1:3b:6c:0e:42:03:72:5d:8f:f0:98:dd:
                    45:f6:22:14:7b:eb:fc:1d:01:3b:ca:89:6c:b5:19:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:37:09:08:8A:D6:E4:EB:69:DE:64:BD:19:5D:4A:3E:2E:F6:BC
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mkI3CQiK1uTrad5kvRldSj4u9rw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df9::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:74:cb:1c:64:50:13:a7:70:1a:7a:38:95:43:9c:45:9c:e8:
         af:39:fa:42:04:99:b4:26:1f:57:f2:0a:84:8c:3d:d5:c5:79:
         70:3a:29:cf:56:38:c8:80:21:83:86:fc:d8:97:f0:9d:ce:6c:
         85:57:57:df:8e:61:16:8e:64:10:f3:2d:f0:d7:ae:df:ee:69:
         a4:cb:58:ca:49:f8:81:bc:bf:b5:e6:a8:ce:c2:e8:ee:4a:35:
         0c:45:ba:83:cc:55:f5:49:45:72:03:be:01:9e:a7:cd:b9:b8:
         0e:22:75:7d:c2:54:6e:ac:86:85:4d:74:47:15:32:88:ec:a0:
         05:09:c4:36:52:02:be:a9:01:f6:4e:e8:f4:9d:00:3c:e8:43:
         73:8f:c4:d8:f6:8d:ff:c0:df:a8:19:97:7c:7d:55:58:5e:b7:
         77:df:38:dc:f4:8e:77:84:ac:fe:50:e2:3c:ed:ef:99:71:e6:
         d6:d4:a7:95:e9:ea:a7:d7:91:d9:55:64:79:b6:bb:25:c3:92:
         48:e0:d2:43:e3:c9:e0:55:a7:81:04:c0:75:48:a8:6e:b2:d2:
         89:f6:b3:f1:d5:d8:c8:f1:e3:23:4d:82:c1:54:95:57:63:65:
         cf:97:b1:36:b2:a4:59:74:7b:bd:53:11:0d:80:11:89:d7:3c:
         86:82:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----