Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/TKptWyUHEJz0ednTJxSVLeCjyUI.roa
File:                     TKptWyUHEJz0ednTJxSVLeCjyUI.roa (raw, json)
Hash identifier:          mVODXlxGkECGxAB1Sk0imVK+aPJXiY1TvyrNC1XH9p0=
Subject key identifier:   4C:AA:6D:5B:25:07:10:9C:F4:79:D9:D3:27:14:95:2D:E0:A3:C9:42
Certificate issuer:       /CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
Certificate serial:       01856DAF4D2669167A6E82171FF263229D53
Authority key identifier: 07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/TKptWyUHEJz0ednTJxSVLeCjyUI.roa
Signing time:             Sun 01 Jan 2023 14:14:43 +0000
ROA not before:           Sun 01 Jan 2023 14:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:6c00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:af:4d:26:69:16:7a:6e:82:17:1f:f2:63:22:9d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
        Validity
            Not Before: Jan  1 14:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4caa6d5b2507109cf479d9d32714952de0a3c942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:48:a7:84:92:b4:19:98:43:72:c7:bc:50:
                    b0:27:27:f7:42:80:dd:02:f6:d7:fd:18:69:0e:32:
                    f4:77:d9:dd:71:5e:58:95:12:b6:51:b3:89:92:9d:
                    07:7b:ec:ba:ef:da:6e:bf:5a:c4:a6:c3:97:0a:2c:
                    c5:20:d8:60:91:3f:2a:15:be:f0:65:12:7e:c1:9c:
                    78:26:e4:b4:68:99:f3:d6:7e:b9:1e:10:68:9c:22:
                    6d:22:ec:6b:a5:72:66:ba:0f:f5:ed:02:cd:23:2b:
                    92:07:1e:7a:d6:29:47:ed:27:5b:3c:10:37:08:b4:
                    44:69:08:9d:9f:85:bc:65:26:fb:6b:b9:06:9b:5b:
                    fa:9e:35:f1:bf:65:ba:80:e6:fd:fa:bf:13:14:c8:
                    34:fe:73:63:d2:f1:c1:40:a4:13:77:0d:9e:9c:c2:
                    9b:55:e1:67:cf:be:e0:a1:42:10:84:16:05:3e:47:
                    eb:b9:69:82:dd:5f:9b:91:98:32:70:ab:3e:68:28:
                    c3:9d:58:4f:ab:ea:77:eb:f2:6c:30:55:e9:0e:22:
                    3b:b1:c7:39:af:6b:dd:e1:b7:5b:9a:1d:41:6e:3c:
                    bb:26:72:e4:b3:24:01:0d:b1:66:aa:e7:9d:71:e2:
                    c6:e5:b7:c5:24:4c:b5:9e:47:5d:9b:38:a9:b4:3d:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AA:6D:5B:25:07:10:9C:F4:79:D9:D3:27:14:95:2D:E0:A3:C9:42
            X509v3 Authority Key Identifier:
                keyid:07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/TKptWyUHEJz0ednTJxSVLeCjyUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:6c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:5d:6c:d1:0e:79:93:2d:02:3c:8c:0f:de:cf:80:a4:6e:
         e6:b0:28:e5:ea:18:89:80:67:09:81:5d:db:e7:f3:58:1f:6e:
         ba:fa:0f:41:e4:24:b1:f0:7f:43:e8:42:61:ce:7c:83:de:ea:
         81:97:b6:e2:c0:12:2f:12:6c:d0:c7:2a:aa:d8:a3:12:90:b8:
         39:bc:f5:11:84:1d:0d:8c:a5:3a:e6:e1:81:11:12:15:42:64:
         a0:37:fd:e5:79:ff:98:47:63:6c:1e:ef:11:68:a2:2d:88:fe:
         16:91:16:76:e8:f0:8e:97:a9:92:f6:d6:43:50:2c:4d:f1:6a:
         63:86:df:2f:39:fa:de:f6:6a:98:15:ab:96:83:c6:3d:62:ba:
         62:97:c7:1c:73:06:e3:ac:eb:2d:d9:65:63:37:c7:16:bb:88:
         7c:ae:f7:17:87:40:ff:68:4d:80:b3:70:ae:f6:0e:2d:8d:48:
         0f:60:21:fe:7c:5e:2c:be:e7:6d:c0:79:0c:e0:23:b9:6e:a9:
         ce:27:e9:e7:fc:01:c5:94:a5:07:30:1b:06:2f:6f:21:19:85:
         d9:b7:e5:4b:2a:99:c9:b9:a4:4f:be:6f:aa:a7:e9:0d:44:75:
         ba:2f:28:e2:cc:11:40:e2:9a:4e:f4:59:9d:8f:39:59:90:b2:
         96:dd:35:cc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtr00maRZ6boIXH/JjIp1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZTQwNWU5ZDliNzU3ZTgxNDFiNGM2MzhkNjVmNTQxMWFk
YjBlMmYwHhcNMjMwMTAxMTQxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2FhNmQ1YjI1MDcxMDljZjQ3OWQ5ZDMyNzE0OTUyZGUwYTNjOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIBIp4SStBmYQ3LHvFCwJyf3QoDd
AvbX/RhpDjL0d9ndcV5YlRK2UbOJkp0He+y679puv1rEpsOXCizFINhgkT8qFb7w
ZRJ+wZx4JuS0aJnz1n65HhBonCJtIuxrpXJmug/17QLNIyuSBx561ilH7SdbPBA3
CLREaQidn4W8ZSb7a7kGm1v6njXxv2W6gOb9+r8TFMg0/nNj0vHBQKQTdw2enMKb
VeFnz77goUIQhBYFPkfruWmC3V+bkZgycKs+aCjDnVhPq+p36/JsMFXpDiI7scc5
r2vd4bdbmh1Bbjy7JnLksyQBDbFmquedceLG5bfFJEy1nkddmziptD1dPQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEyqbVslBxCc9HnZ0ycUlS3go8lCMB8GA1UdIwQY
MBaAFAfkBenZt1foFBtMY41l9UEa2w4vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1RRjZkbTNWLWdVRzB4ampXWDFRUnJiRGk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZDI3YTgtNWUyMS00OGZmLTlkZmUt
Y2Y1ZTFlYWEzN2UxLzEvVEtwdFd5VUhFSnowZWRuVEp4U1ZMZUNqeVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jZDI3YTgtNWUyMS00OGZmLTlkZmUtY2Y1ZTFlYWEzN2Ux
LzEvQi1RRjZkbTNWLWdVRzB4ampXWDFRUnJiRGk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJsADAN
BgkqhkiG9w0BAQsFAAOCAQEAVKJdbNEOeZMtAjyMD97PgKRu5rAo5eoYiYBnCYFd
2+fzWB9uuvoPQeQksfB/Q+hCYc58g97qgZe24sASLxJs0McqqtijEpC4Obz1EYQd
DYylOubhgRESFUJkoDf95Xn/mEdjbB7vEWiiLYj+FpEWdujwjpepkvbWQ1AsTfFq
Y4bfLzn63vZqmBWrloPGPWK6YpfHHHMG46zrLdllYzfHFruIfK73F4dA/2hNgLNw
rvYOLY1ID2Ah/nxeLL7nbcB5DOAjuW6pzifp5/wBxZSlBzAbBi9vIRmF2bflSyqZ
ybmkT75vqqfpDUR1ui8o4swRQOKaTvRZnY85WZCylt01zA==
-----END CERTIFICATE-----