Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/YwHQToJ4pLrZ5QodJswh59-6iUs.roa
File:                     YwHQToJ4pLrZ5QodJswh59-6iUs.roa (raw, json)
Hash identifier:          +EN/LJvtadomCtYZJWxXMOuY+xUQtL30DK8Z+2GkOfk=
Subject key identifier:   63:01:D0:4E:82:78:A4:BA:D9:E5:0A:1D:26:CC:21:E7:DF:BA:89:4B
Certificate issuer:       /CN=edf2b3f4abc31a36bee7c17f721fa294a4658ddf
Certificate serial:       0A1AFDB2
Authority key identifier: ED:F2:B3:F4:AB:C3:1A:36:BE:E7:C1:7F:72:1F:A2:94:A4:65:8D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fKz9KvDGja-58F_ch-ilKRljd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/YwHQToJ4pLrZ5QodJswh59-6iUs.roa
Signing time:             Sat 01 Jan 2022 00:53:23 +0000
ROA not before:           Sat 01 Jan 2022 00:53:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198089
IP address blocks:        2001:67c:634::/48 maxlen: 48
                          2001:67c:5f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169541042 (0xa1afdb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf2b3f4abc31a36bee7c17f721fa294a4658ddf
        Validity
            Not Before: Jan  1 00:53:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6301d04e8278a4bad9e50a1d26cc21e7dfba894b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:07:05:41:c6:73:81:cb:6e:62:75:f4:f6:
                    b8:cf:dc:2d:68:3b:3a:5e:1a:b3:d3:b6:c4:42:54:
                    14:db:86:ea:75:c0:df:7a:d6:66:c1:aa:57:cd:3e:
                    c5:12:03:b7:e4:ea:a0:86:51:fa:b4:7f:a6:11:93:
                    9e:10:e8:5d:f6:f4:b7:99:c5:27:d0:74:fc:86:e1:
                    71:13:8d:e2:c9:96:a3:80:1a:31:3e:2d:d6:97:0e:
                    ec:d3:42:45:92:a6:a1:74:62:73:af:cc:bd:a9:30:
                    8d:1a:32:f1:f4:d2:b5:77:e0:6e:4e:7b:3e:06:ed:
                    aa:ad:6c:bf:32:71:f5:85:ac:90:b2:be:9c:54:d4:
                    39:b2:f1:d5:69:5b:4f:94:ce:4d:f4:6d:18:93:08:
                    e3:4d:9a:38:77:1d:63:61:b8:31:ca:5b:be:19:0f:
                    ba:a8:19:23:d8:ca:dc:15:ee:cb:d2:ac:e1:d4:17:
                    51:4b:aa:dc:04:c9:dc:51:44:f6:c2:e6:45:ba:bb:
                    04:b7:fb:67:33:04:99:c1:e2:df:88:51:45:af:20:
                    9e:0a:ea:41:85:1c:c4:51:44:bb:b8:ae:13:c8:4e:
                    ac:04:f3:1c:42:1d:c4:a9:cb:05:3f:8f:65:13:1a:
                    54:7c:ee:46:60:08:9f:71:f3:12:05:bd:dd:23:f4:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:D0:4E:82:78:A4:BA:D9:E5:0A:1D:26:CC:21:E7:DF:BA:89:4B
            X509v3 Authority Key Identifier:
                keyid:ED:F2:B3:F4:AB:C3:1A:36:BE:E7:C1:7F:72:1F:A2:94:A4:65:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fKz9KvDGja-58F_ch-ilKRljd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/YwHQToJ4pLrZ5QodJswh59-6iUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/7fKz9KvDGja-58F_ch-ilKRljd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:5f8::/48
                  2001:67c:634::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:45:f7:4b:1a:f9:e5:5a:3d:bf:20:c5:9c:71:ad:49:36:e1:
         64:38:5c:83:b9:81:23:3a:e9:0e:5b:6b:be:fb:57:49:bb:b0:
         58:5c:b9:d5:f7:12:71:c2:64:7c:d4:1a:84:68:80:11:d9:e0:
         db:ea:7e:4c:69:a2:ec:42:91:d0:7d:19:b4:28:f9:1e:b5:b7:
         94:6b:ef:86:c5:29:f3:89:b7:5d:14:b6:df:52:a7:76:bd:ed:
         47:41:65:08:28:47:06:4e:1f:12:9a:b1:eb:5c:22:33:10:22:
         ac:47:1c:de:65:0d:61:65:0a:ea:f1:f2:99:da:41:50:95:51:
         6b:ab:29:15:f6:45:f9:33:99:dd:2d:e1:99:83:08:0b:9c:cc:
         2e:34:f6:d0:23:e1:2d:dd:9d:9c:b9:20:38:23:bb:9d:ac:0b:
         e3:c7:dd:32:e5:0b:6a:5b:6d:07:ed:37:6b:62:25:31:19:7c:
         0f:58:ed:fb:b8:c3:b4:78:bd:40:bc:3a:96:69:f6:9c:bf:76:
         69:3f:d9:26:44:69:f6:b7:79:e2:1d:a4:79:b4:81:80:e1:61:
         62:0f:8a:4a:d2:ef:46:4b:fc:8c:17:1c:7a:dc:8b:61:3a:a8:
         d1:0f:2e:54:47:62:4b:d8:6a:76:c7:d5:27:e1:2b:24:06:a6:
         df:c7:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----