Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/zARV9SAE3S0H4b8ucYBvZsVRuAo.roa
File:                     zARV9SAE3S0H4b8ucYBvZsVRuAo.roa (raw, json)
Hash identifier:          HcxpNParsR5L0PR3AGhJE9oT5Juo8KToZZX4e9W/z5c=
Subject key identifier:   CC:04:55:F5:20:04:DD:2D:07:E1:BF:2E:71:80:6F:66:C5:51:B8:0A
Certificate issuer:       /CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Certificate serial:       0182D527282B9F859B8716F40FDF3A20981A
Authority key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/zARV9SAE3S0H4b8ucYBvZsVRuAo.roa
Signing time:             Thu 25 Aug 2022 13:18:09 +0000
ROA not before:           Thu 25 Aug 2022 13:18:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208256
IP address blocks:        2a12:7d80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d5:27:28:2b:9f:85:9b:87:16:f4:0f:df:3a:20:98:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
        Validity
            Not Before: Aug 25 13:18:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc0455f52004dd2d07e1bf2e71806f66c551b80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:82:6a:bd:ae:cb:98:3b:b8:ae:8b:6a:ec:
                    c1:86:6f:27:00:4f:06:c7:12:11:56:28:71:0f:3a:
                    a5:03:bf:a1:64:0f:cd:a5:4a:43:26:48:19:40:5f:
                    fe:51:68:06:65:7f:24:e9:43:64:6b:2c:20:93:d2:
                    28:3d:b2:be:2a:e5:5c:88:e3:e8:62:85:8c:60:5f:
                    aa:a5:3e:f6:17:40:3d:1d:61:56:cc:6a:43:ff:ab:
                    23:64:47:8d:18:6a:ef:f8:58:9d:8c:af:d6:bc:c4:
                    34:3f:7a:62:b0:6d:74:54:76:cd:b5:44:00:55:6e:
                    1e:3d:07:9c:d0:e8:a5:03:05:51:81:b0:4f:ab:cd:
                    5e:d1:d6:57:9f:1a:1a:d2:71:79:15:ca:c6:95:ff:
                    d9:6b:4d:e3:72:64:ff:3d:d2:13:fa:6d:53:e2:2c:
                    06:55:2d:b4:b8:10:cc:95:b7:0d:89:ea:14:09:13:
                    16:f0:25:11:1a:b0:1a:54:5a:31:e5:13:5f:70:c3:
                    f2:7c:1d:ba:27:f4:57:8f:ac:77:5a:64:eb:de:15:
                    8b:f8:3f:3e:1d:41:e0:8e:d5:f7:e9:84:79:2f:dd:
                    e6:79:49:02:ed:23:bc:16:f1:7d:02:62:12:e5:20:
                    1d:4c:31:63:c5:61:92:1c:16:32:2f:4c:3b:88:f0:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:04:55:F5:20:04:DD:2D:07:E1:BF:2E:71:80:6F:66:C5:51:B8:0A
            X509v3 Authority Key Identifier:
                keyid:1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/zARV9SAE3S0H4b8ucYBvZsVRuAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:d3:4b:29:d5:6c:06:3b:88:91:7a:e2:df:72:6e:00:d3:
         53:59:b0:ec:2a:36:ef:ab:49:03:f4:57:a6:52:a5:c7:67:30:
         21:6e:2b:70:de:81:9f:4c:54:5e:0a:65:e8:b2:99:7d:5a:31:
         84:6c:6f:e1:95:e3:5a:ae:b5:61:65:61:1a:f0:21:1d:e2:85:
         98:a0:a1:ca:83:92:07:10:de:40:0a:ba:68:77:68:d7:e0:68:
         d9:42:d0:47:dc:0e:e5:1d:d4:c5:da:31:99:14:20:b7:ec:29:
         48:2d:22:cd:a8:84:43:e5:f5:d3:eb:73:58:3b:cd:d4:02:e5:
         8b:58:56:1f:d8:cb:c4:1c:8c:ab:58:c5:4f:c8:a2:d5:b7:f9:
         a1:fe:4c:3d:1f:2a:2d:70:ee:16:d7:8b:1e:c4:b1:58:99:35:
         34:b6:8e:0e:30:c5:31:ed:d7:6d:36:da:71:b1:a8:d5:fa:76:
         af:7a:a2:b8:0c:37:44:78:36:db:b0:5f:33:a7:78:fd:ff:b4:
         63:f2:2e:fe:81:3c:96:ee:5c:48:9f:4e:82:9f:7b:ed:cd:0b:
         2e:4a:a5:cd:40:fd:42:ef:bd:6a:b1:9f:b2:2a:5f:49:20:cc:
         35:b6:d3:0f:59:11:ef:3c:85:59:80:0e:a7:6c:62:c6:f4:a3:
         7f:1d:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----