Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/f_Mrvrs2DoMP-d8cPhAnQPXvj8s.roa
File:                     f_Mrvrs2DoMP-d8cPhAnQPXvj8s.roa (raw, json)
Hash identifier:          pgqgzaqUh5BOBU9oNDjysGZ24n3/nVf3OP0NJ+OXaKE=
Subject key identifier:   7F:F3:2B:BE:BB:36:0E:83:0F:F9:DF:1C:3E:10:27:40:F5:EF:8F:CB
Certificate issuer:       /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial:       37CFF24F
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/f_Mrvrs2DoMP-d8cPhAnQPXvj8s.roa
Signing time:             Sat 01 Jan 2022 14:54:38 +0000
ROA not before:           Sat 01 Jan 2022 14:54:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8276
IP address blocks:        2a01:2c0:cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936374863 (0x37cff24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
        Validity
            Not Before: Jan  1 14:54:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ff32bbebb360e830ff9df1c3e102740f5ef8fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:9f:54:b8:81:d8:0d:b3:ca:9d:26:07:fe:
                    b3:e1:5f:0d:4e:82:76:b3:69:10:a5:a0:11:78:89:
                    04:a5:6f:12:06:9a:f7:a4:f6:78:eb:58:09:25:1a:
                    ae:bd:ec:71:e5:35:da:76:d7:42:92:94:dd:b7:64:
                    67:73:1f:27:f5:6f:3c:96:2f:38:e0:76:00:17:8f:
                    ec:99:29:ee:a5:14:f9:2a:47:93:a6:4c:0e:71:69:
                    4b:1c:c3:cb:21:9e:42:4b:9c:15:c8:69:10:2c:c9:
                    88:22:f1:67:79:5c:00:c6:9d:42:07:38:6f:03:c1:
                    0b:7b:04:26:1c:a9:b2:ca:68:ed:60:bc:03:85:b3:
                    47:3e:77:22:a8:18:6a:d1:5e:b8:66:55:af:2c:8e:
                    a7:fd:14:e2:a5:38:e5:b5:31:65:62:92:8f:90:b8:
                    18:f1:02:f5:c4:ac:5a:93:69:86:ea:dc:90:c9:54:
                    8e:a8:77:77:f1:ce:64:c6:4e:a8:b7:c9:88:9f:19:
                    d9:f4:27:ae:cc:21:1b:36:54:73:b4:47:6c:f4:77:
                    60:e1:6c:60:a9:26:15:11:b3:53:4b:49:e6:93:0e:
                    98:6f:1f:92:47:d6:78:9e:6f:93:6a:7c:32:ac:d5:
                    3b:96:4e:b7:04:73:65:f8:07:e3:b6:7a:b2:f8:5d:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F3:2B:BE:BB:36:0E:83:0F:F9:DF:1C:3E:10:27:40:F5:EF:8F:CB
            X509v3 Authority Key Identifier:
                keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/f_Mrvrs2DoMP-d8cPhAnQPXvj8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:2c0:cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:55:19:fc:94:76:a6:97:d2:dd:63:82:94:da:4c:11:84:5a:
         37:a3:96:05:47:97:a0:2a:7e:19:3b:b6:ec:50:03:6d:24:2b:
         33:0f:6a:a5:00:df:c2:06:65:bd:6d:2b:e4:24:7f:5e:3e:d0:
         a9:d5:76:b5:93:90:df:a8:de:58:97:29:78:16:1a:91:0c:25:
         77:7f:d2:4f:15:71:8d:7c:39:39:f0:00:86:e6:fb:5e:a7:68:
         47:1e:60:d1:ee:32:ce:ea:e9:39:f6:69:2f:c8:a4:46:f8:53:
         99:5b:34:34:4a:1e:ac:3c:ee:aa:10:b7:20:bd:50:ba:8d:a7:
         6b:39:19:f7:31:1f:46:fc:21:04:d7:d9:b1:b2:b9:22:28:ce:
         17:9c:53:91:8c:7a:9f:47:ad:d7:fd:2f:e6:66:26:2e:c1:72:
         6f:b0:87:bb:62:79:a0:04:5e:dc:e2:f5:d6:ae:ca:22:59:01:
         7f:68:8d:83:36:69:78:a2:d9:ca:26:fa:d2:34:b4:5d:ba:bd:
         7b:f3:4f:12:8c:84:5d:00:0e:c9:77:d5:f5:0f:58:fb:92:64:
         f6:c3:cd:b2:33:a1:51:de:3d:1e:23:a9:81:ee:e8:50:8f:24:
         d5:bb:b8:bc:d0:9d:8e:ae:64:b5:08:7c:6e:e4:d7:7f:d4:3a:
         a4:3d:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----