Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/wZS9yp24X0xKIPdBKFfJTQmQqUg.roa
File:                     wZS9yp24X0xKIPdBKFfJTQmQqUg.roa (raw, json)
Hash identifier:          o6CbWxrYH1lU70SBaCoFOAeUVK24y9xt0jmaT0Q9dkQ=
Subject key identifier:   C1:94:BD:CA:9D:B8:5F:4C:4A:20:F7:41:28:57:C9:4D:09:90:A9:48
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       06883BEE
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/wZS9yp24X0xKIPdBKFfJTQmQqUg.roa
Signing time:             Sat 01 Jan 2022 12:56:29 +0000
ROA not before:           Sat 01 Jan 2022 12:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205749
IP address blocks:        2a0f:8ac1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109591534 (0x6883bee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Jan  1 12:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c194bdca9db85f4c4a20f7412857c94d0990a948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:79:1f:91:50:d5:16:3c:09:77:36:ae:41:
                    1b:a1:07:bf:2f:c9:25:e3:7b:39:f2:c1:26:7a:53:
                    07:a5:5c:c4:eb:7d:47:1c:31:12:52:5f:0b:08:69:
                    ec:21:9d:26:e6:dd:be:c5:80:e2:65:c8:2d:7b:17:
                    0f:19:63:3a:ec:71:79:4c:87:71:de:cb:f7:86:a5:
                    75:ec:4d:d4:44:ff:e4:af:0d:09:b8:b4:2b:22:a0:
                    36:fc:21:07:5f:3d:d0:86:b6:7e:a2:5b:54:35:57:
                    e1:31:8c:48:de:91:3b:52:40:29:18:ec:38:10:5f:
                    97:fc:60:85:eb:41:34:ac:3f:20:4a:4e:a7:c7:81:
                    89:f9:ce:56:c4:d2:29:e3:04:ac:84:7a:73:5c:8e:
                    24:81:47:c4:aa:fd:5f:3b:47:cc:63:0a:55:8a:e2:
                    6c:8a:8b:5a:47:f9:9d:97:8d:ac:17:76:2e:c9:0f:
                    e4:42:f5:2e:3f:98:4c:9f:bb:8c:dc:c1:94:01:91:
                    20:a3:10:33:c1:9b:1f:d8:ed:e0:46:11:b2:92:e5:
                    3f:ba:d4:7e:c1:3f:bd:09:cd:3d:99:bd:57:99:79:
                    f9:03:03:8d:af:80:a3:e4:86:16:b3:11:ed:15:8a:
                    8e:97:e4:47:a9:fc:0d:22:f6:4e:57:9e:51:62:19:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:94:BD:CA:9D:B8:5F:4C:4A:20:F7:41:28:57:C9:4D:09:90:A9:48
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/wZS9yp24X0xKIPdBKFfJTQmQqUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:8ac1::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:61:b8:1c:0f:6f:13:2e:eb:d2:29:bb:3e:a7:84:dd:88:
         79:02:ed:99:ad:fb:e9:ad:b3:96:0d:4a:de:91:9a:a4:87:00:
         40:b2:db:06:1f:20:89:bc:bc:f6:c3:47:72:26:b6:36:52:00:
         d5:99:4b:4e:75:a9:5e:b1:1a:ad:1c:96:cc:7f:9f:50:8d:f3:
         4b:f4:d9:21:87:ee:16:c9:e6:72:db:52:f9:b8:a2:8b:5a:6f:
         24:84:54:b5:f7:a7:e2:68:2b:1f:5c:13:da:97:8f:2b:63:57:
         f8:d1:af:ca:e9:ef:cb:bc:c3:eb:f6:e1:94:7c:7f:c1:b4:a1:
         99:8f:76:c3:a3:e4:d5:bd:ad:0d:80:74:93:c1:81:58:66:e4:
         c2:b8:a8:a9:96:50:11:ea:52:19:1f:7e:bf:de:9e:98:87:20:
         13:69:8f:6a:b2:9e:fb:e0:4f:25:02:69:97:72:75:dc:21:0d:
         36:25:20:42:b2:e3:13:b3:63:55:fa:93:2d:56:db:a4:3d:e2:
         be:5f:59:da:f8:d3:d7:6d:a7:b8:93:f7:4f:be:cb:51:5b:00:
         31:1e:a4:4d:df:1a:bb:22:df:ae:28:3d:22:0e:8b:78:53:c2:
         84:00:61:06:fd:3a:50:72:3f:5b:81:6b:e2:36:ef:e2:91:0e:
         4c:40:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----