Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/q3Aicp_fsJ41cAZH4I4GgktrKVQ.roa
File:                     q3Aicp_fsJ41cAZH4I4GgktrKVQ.roa (raw, json)
Hash identifier:          +H2DNoeRatQUNZrVi+UrocnAe+jdr5V2f1bebLMnSvg=
Subject key identifier:   AB:70:22:72:9F:DF:B0:9E:35:70:06:47:E0:8E:06:82:4B:6B:29:54
Certificate issuer:       /CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
Certificate serial:       810F95
Authority key identifier: D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/q3Aicp_fsJ41cAZH4I4GgktrKVQ.roa
Signing time:             Sat 01 Jan 2022 01:52:14 +0000
ROA not before:           Sat 01 Jan 2022 01:52:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210625
IP address blocks:        2a12:7c00::/32 maxlen: 32
                          2a12:7c01::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8458133 (0x810f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
        Validity
            Not Before: Jan  1 01:52:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab7022729fdfb09e35700647e08e06824b6b2954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:95:7d:6f:ea:f1:e3:5b:50:96:a9:9d:09:
                    30:fe:ca:d3:1f:95:8d:5e:c9:2d:06:84:b7:ff:56:
                    39:91:c8:60:e1:9d:85:b0:27:0a:34:3d:72:62:b2:
                    32:4f:90:f9:5f:a4:a5:90:37:25:81:1b:d5:3d:95:
                    82:ab:6e:8f:51:76:e1:cd:22:77:b0:24:53:9f:4f:
                    a8:b6:5f:e8:ba:8f:5b:4b:2c:90:ef:95:1e:f2:ec:
                    24:70:1e:0e:70:b4:0b:72:8d:8c:4a:81:16:65:78:
                    6e:0b:0b:0a:30:05:41:87:32:d4:ed:e9:80:d4:d7:
                    66:9f:da:c6:26:cb:ea:03:f6:e6:5a:99:4a:7e:90:
                    f0:73:25:77:2c:5c:05:14:63:66:87:72:74:fc:18:
                    9a:78:2b:74:56:fd:09:46:2e:b4:d9:db:dc:a7:27:
                    fc:70:a1:c1:13:9b:f4:ba:cb:95:6c:38:c6:4d:6c:
                    02:53:5a:37:8e:a5:f4:72:3a:ec:ca:d4:35:75:ea:
                    50:c1:14:52:f1:3c:d5:90:55:ab:7d:a0:a4:f0:b0:
                    3a:cf:8a:d9:5e:42:f5:97:d1:e9:03:03:60:59:d9:
                    4a:d1:de:03:18:db:10:db:93:74:5d:32:df:0c:d4:
                    bf:23:f4:76:2c:96:61:0f:33:b3:5b:0d:d8:dc:a5:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:22:72:9F:DF:B0:9E:35:70:06:47:E0:8E:06:82:4B:6B:29:54
            X509v3 Authority Key Identifier:
                keyid:D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/q3Aicp_fsJ41cAZH4I4GgktrKVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7c00::/31

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:db:6a:1a:df:28:3e:34:0d:09:a2:07:75:9f:ed:cd:dc:
         a5:38:64:e0:01:c0:18:53:c3:3a:6f:d0:d7:fb:91:f5:dd:c7:
         7b:50:9e:6d:a6:1c:1e:71:75:ff:d0:ec:3b:b3:d4:9d:e7:aa:
         9c:f2:d9:33:c5:57:5e:a7:08:5d:46:34:dd:58:4f:21:53:da:
         f1:55:11:a5:9f:9f:c5:27:91:8e:09:fe:16:4b:0f:d8:53:72:
         dd:24:e6:29:55:9a:df:c8:58:d4:ea:18:8c:67:be:62:5c:48:
         b3:18:b6:4f:b7:40:b5:10:81:5f:29:3e:52:86:85:8d:d1:dd:
         67:8d:65:85:40:24:b8:5f:2d:e2:02:08:60:5a:a8:11:47:85:
         76:56:f7:ee:86:c8:ff:2d:46:c8:38:4f:ad:a6:ec:5f:a4:fc:
         d4:e2:5d:7b:9a:1f:36:14:9a:ca:c4:5b:28:d0:de:5d:4d:7b:
         bb:af:b4:2d:fd:db:83:a0:78:5d:29:9a:c5:fa:06:d5:a8:fd:
         1d:02:a1:d8:07:a4:b0:51:25:ad:19:ac:1c:65:be:3a:6b:60:
         c9:50:e2:6e:c1:29:af:64:12:d2:8f:e1:08:dd:bf:6d:6d:97:
         4e:93:e5:b3:33:29:b9:af:6e:c8:fb:8b:61:0c:d0:4a:96:df:
         95:fb:6d:db
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAIEPlTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGE3MTFiMTM1ZGZkNWYzNGJiYjk4YzEwMDM2ZjhkOGYwYzE3MzFmMB4XDTIyMDEw
MTAxNTIxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI3MDIyNzI5ZmRm
YjA5ZTM1NzAwNjQ3ZTA4ZTA2ODI0YjZiMjk1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKFlX1v6vHjW1CWqZ0JMP7K0x+VjV7JLQaEt/9WOZHIYOGd
hbAnCjQ9cmKyMk+Q+V+kpZA3JYEb1T2Vgqtuj1F24c0id7AkU59PqLZf6LqPW0ss
kO+VHvLsJHAeDnC0C3KNjEqBFmV4bgsLCjAFQYcy1O3pgNTXZp/axibL6gP25lqZ
Sn6Q8HMldyxcBRRjZodydPwYmngrdFb9CUYutNnb3Kcn/HChwROb9LrLlWw4xk1s
AlNaN46l9HI67MrUNXXqUMEUUvE81ZBVq32gpPCwOs+K2V5C9ZfR6QMDYFnZStHe
AxjbENuTdF0y3wzUvyP0diyWYQ8zs1sN2Nylo/kCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSrcCJyn9+wnjVwBkfgjgaCS2spVDAfBgNVHSMEGDAWgBTYpxGxNd/V80u7
mMEANvjY8MFzHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJLY1JzVFhmMWZOTHU1akJBRGI0MlBEQmN4OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvN2QzZmJmLTNmYmMtNDAyNS1hYWIxLWYxMDhlNTU1MjcyMC8x
L3EzQWljcF9mc0o0MWNBWkg0STRHZ2t0cktWUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
N2QzZmJmLTNmYmMtNDAyNS1hYWIxLWYxMDhlNTU1MjcyMC8xLzJLY1JzVFhmMWZO
THU1akJBRGI0MlBEQmN4OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFASoSfAAwDQYJKoZIhvcNAQELBQAD
ggEBAFXV22oa3yg+NA0Jogd1n+3N3KU4ZOABwBhTwzpv0Nf7kfXdx3tQnm2mHB5x
df/Q7Duz1J3nqpzy2TPFV16nCF1GNN1YTyFT2vFVEaWfn8UnkY4J/hZLD9hTct0k
5ilVmt/IWNTqGIxnvmJcSLMYtk+3QLUQgV8pPlKGhY3R3WeNZYVAJLhfLeICCGBa
qBFHhXZW9+6GyP8tRsg4T62m7F+k/NTiXXuaHzYUmsrEWyjQ3l1Ne7uvtC3924Og
eF0pmsX6BtWo/R0CodgHpLBRJa0ZrBxlvjprYMlQ4m7BKa9kEtKP4Qjdv21tl06T
5bMzKbmvbsj7i2EM0EqW35X7bds=
-----END CERTIFICATE-----