Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/LvmvkZt-Yg7enz0mgNVCKjgrZjA.roa
File:                     LvmvkZt-Yg7enz0mgNVCKjgrZjA.roa (raw, json)
Hash identifier:          AVYopa2KMTBDqS5S9oTkl7iA3uYvTBLmcfDXkrEw7E0=
Subject key identifier:   2E:F9:AF:91:9B:7E:62:0E:DE:9F:3D:26:80:D5:42:2A:38:2B:66:30
Certificate issuer:       /CN=ba71f98150538eee69deed2d532312aa29d7c721
Certificate serial:       ABC4B0
Authority key identifier: BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unH5gVBTju5p3u0tUyMSqinXxyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/LvmvkZt-Yg7enz0mgNVCKjgrZjA.roa
Signing time:             Sat 01 Jan 2022 02:50:59 +0000
ROA not before:           Sat 01 Jan 2022 02:50:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18779
IP address blocks:        2a11:bd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11257008 (0xabc4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba71f98150538eee69deed2d532312aa29d7c721
        Validity
            Not Before: Jan  1 02:50:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ef9af919b7e620ede9f3d2680d5422a382b6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:94:e2:42:e7:ca:e8:a7:d6:47:dc:05:2e:
                    30:2e:38:4e:99:80:98:7b:33:1d:70:f1:6f:c7:bd:
                    f8:a0:33:1b:8c:ab:79:29:f4:79:11:51:61:71:aa:
                    83:bf:c0:86:5e:25:09:aa:08:2f:56:73:2a:8b:33:
                    86:62:09:06:57:64:eb:9a:d3:d7:55:ff:7a:ee:e8:
                    c5:fd:7e:e7:b0:55:33:0c:eb:c6:a2:b6:e3:02:ca:
                    0f:f5:cd:69:03:18:8c:1d:2a:47:3e:0c:8e:eb:d3:
                    62:a9:e0:46:e2:43:8d:88:9b:5a:ad:3b:7a:b4:8d:
                    23:4c:47:18:fc:2a:df:57:31:92:31:67:e5:f9:53:
                    26:7a:28:67:2e:d9:e6:0c:0c:72:d4:0d:a0:56:f8:
                    3c:45:09:5f:63:58:18:36:55:b5:f7:7e:8a:b9:e3:
                    28:12:a1:da:ce:98:ea:23:14:f7:cd:ae:23:32:ca:
                    3e:37:c7:26:a2:04:17:53:ea:f6:b3:61:a2:58:31:
                    5d:08:74:fd:b1:e7:2c:09:23:75:f2:86:5a:4b:96:
                    00:8d:a9:d1:12:0d:c5:10:26:10:21:ce:29:8d:f6:
                    69:cd:a1:12:5d:fb:ec:e2:35:11:d9:43:c2:28:7e:
                    2c:dc:6f:f3:ac:70:3a:5a:33:3b:35:90:6d:57:13:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:AF:91:9B:7E:62:0E:DE:9F:3D:26:80:D5:42:2A:38:2B:66:30
            X509v3 Authority Key Identifier:
                keyid:BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unH5gVBTju5p3u0tUyMSqinXxyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/LvmvkZt-Yg7enz0mgNVCKjgrZjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:bd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:45:3e:c2:75:2b:3a:98:ab:22:ee:80:1c:47:f3:dd:d0:
         11:3a:70:0e:7d:95:f1:4b:20:30:c2:a2:e9:e9:bf:ab:08:ef:
         db:f0:57:06:6b:19:c8:46:a6:9b:bd:67:b4:20:67:50:b4:ee:
         ba:b7:aa:e4:38:4f:01:af:d0:81:42:ab:0f:b3:07:96:c0:5e:
         20:9e:73:c0:f4:25:61:e5:33:65:ad:72:ce:2e:34:45:f0:b5:
         88:c9:d2:fa:24:68:48:10:45:75:16:4c:73:1f:64:87:48:a9:
         68:83:82:25:3c:a7:9f:58:27:1c:08:74:8a:f4:5d:49:25:e5:
         d7:67:52:c9:8c:c3:22:96:8c:08:7e:0a:8b:ed:74:9c:87:cc:
         bd:e0:d6:4f:6b:dd:b1:1d:e5:26:5d:75:83:89:8c:06:47:26:
         08:c5:47:89:6f:f8:03:4d:bd:98:80:0e:cb:3e:bd:7d:6c:46:
         86:e4:22:aa:24:50:34:84:c2:3b:66:4a:34:a2:06:73:b0:5f:
         4f:40:c8:5a:be:cf:c1:ae:0d:e5:15:d8:5a:c5:50:81:5f:29:
         a0:a0:3f:b8:00:b7:47:6e:80:77:03:7d:db:de:2f:25:4f:76:
         48:02:10:53:23:77:d0:02:33:ff:b5:cb:f8:ad:ef:93:05:cb:
         62:81:d8:2e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAKvEsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTcxZjk4MTUwNTM4ZWVlNjlkZWVkMmQ1MzIzMTJhYTI5ZDdjNzIxMB4XDTIyMDEw
MTAyNTA1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVmOWFmOTE5Yjdl
NjIwZWRlOWYzZDI2ODBkNTQyMmEzODJiNjYzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFGlOJC58rop9ZH3AUuMC44TpmAmHszHXDxb8e9+KAzG4yr
eSn0eRFRYXGqg7/Ahl4lCaoIL1ZzKoszhmIJBldk65rT11X/eu7oxf1+57BVMwzr
xqK24wLKD/XNaQMYjB0qRz4MjuvTYqngRuJDjYibWq07erSNI0xHGPwq31cxkjFn
5flTJnooZy7Z5gwMctQNoFb4PEUJX2NYGDZVtfd+irnjKBKh2s6Y6iMU982uIzLK
PjfHJqIEF1Pq9rNholgxXQh0/bHnLAkjdfKGWkuWAI2p0RINxRAmECHOKY32ac2h
El377OI1EdlDwih+LNxv86xwOlozOzWQbVcTgisCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQu+a+Rm35iDt6fPSaA1UIqOCtmMDAfBgNVHSMEGDAWgBS6cfmBUFOO7mne
7S1TIxKqKdfHITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VuSDVnVkJUanU1cDN1MHRVeU1TcWluWHh5RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvNzY4ZTZmLTk0NDQtNDYzMy04MjVkLTYwMTAyNjFlZWU5MS8x
L0x2bXZrWnQtWWc3ZW56MG1nTlZDS2pnclpqQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
NzY4ZTZmLTk0NDQtNDYzMy04MjVkLTYwMTAyNjFlZWU5MS8xL3VuSDVnVkJUanU1
cDN1MHRVeU1TcWluWHh5RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoRvUAwDQYJKoZIhvcNAQELBQAD
ggEBACG1RT7CdSs6mKsi7oAcR/Pd0BE6cA59lfFLIDDCounpv6sI79vwVwZrGchG
ppu9Z7QgZ1C07rq3quQ4TwGv0IFCqw+zB5bAXiCec8D0JWHlM2Wtcs4uNEXwtYjJ
0vokaEgQRXUWTHMfZIdIqWiDgiU8p59YJxwIdIr0XUkl5ddnUsmMwyKWjAh+Covt
dJyHzL3g1k9r3bEd5SZddYOJjAZHJgjFR4lv+ANNvZiADss+vX1sRobkIqokUDSE
wjtmSjSiBnOwX09AyFq+z8GuDeUV2FrFUIFfKaCgP7gAt0dugHcDfdveLyVPdkgC
EFMjd9ACM/+1y/it75MFy2KB2C4=
-----END CERTIFICATE-----