Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/O6E06ThQqhmnRJGc-6sZrEpmCto.roa
File:                     O6E06ThQqhmnRJGc-6sZrEpmCto.roa (raw, json)
Hash identifier:          9/PlClJ65GmF1RQei1gLesAjSD2w1+8EjRZvOYeMdkE=
Subject key identifier:   3B:A1:34:E9:38:50:AA:19:A7:44:91:9C:FB:AB:19:AC:4A:66:0A:DA
Certificate issuer:       /CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
Certificate serial:       01856F548737411E3713EEFCABA58C5A769F
Authority key identifier: F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/O6E06ThQqhmnRJGc-6sZrEpmCto.roa
Signing time:             Sun 01 Jan 2023 21:54:48 +0000
ROA not before:           Sun 01 Jan 2023 21:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52148
IP address blocks:        2a03:b600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:54:87:37:41:1e:37:13:ee:fc:ab:a5:8c:5a:76:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
        Validity
            Not Before: Jan  1 21:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ba134e93850aa19a744919cfbab19ac4a660ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:8b:0a:90:75:94:ec:d1:d0:71:63:ce:9a:
                    d8:fc:a1:ae:ee:0f:af:93:09:8e:54:fb:0d:f0:da:
                    2c:b6:28:17:09:52:3e:c8:00:f2:c7:43:34:78:e3:
                    4d:51:3d:c7:6f:84:b4:2a:ad:e7:77:51:56:2c:44:
                    fd:7d:35:78:6d:96:a1:ed:22:01:70:b3:18:af:d0:
                    09:0e:30:d2:68:a9:2c:bc:88:06:d1:d6:83:15:ec:
                    d2:b3:a2:75:97:82:df:e8:40:66:ac:44:7f:24:3e:
                    61:6b:58:ed:56:d7:ab:df:54:6b:ee:2f:04:80:0c:
                    14:c2:6f:47:24:34:38:00:0f:8e:76:65:d1:65:a8:
                    cb:04:55:bb:de:2e:d1:27:eb:3e:cd:5b:a1:00:5d:
                    94:af:3c:f8:46:ec:aa:61:b3:9a:04:ed:8a:91:70:
                    09:bc:00:87:1f:4d:61:bf:28:dc:3f:03:c6:90:43:
                    88:4e:21:33:51:7a:ed:dd:69:57:fc:b2:9c:eb:3a:
                    62:aa:42:8a:80:33:d7:d8:08:fe:f9:ae:01:b2:d7:
                    5d:78:50:62:33:1f:d0:c6:1a:1c:2a:f6:3b:5d:42:
                    d6:71:14:d4:eb:17:49:99:8a:5f:ca:59:08:0a:ee:
                    6d:b6:6e:fa:2e:2b:60:d6:e3:2f:2a:a0:5f:61:29:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:34:E9:38:50:AA:19:A7:44:91:9C:FB:AB:19:AC:4A:66:0A:DA
            X509v3 Authority Key Identifier:
                keyid:F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/O6E06ThQqhmnRJGc-6sZrEpmCto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:b600::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:de:5d:af:78:ea:78:4b:ff:78:29:dc:94:b8:b8:e4:5e:59:
         f2:1c:fb:bc:a7:85:e0:87:ff:e7:4a:ed:8d:6f:25:d9:71:92:
         0e:32:e4:9e:0d:a2:98:81:5f:64:10:7e:e4:b3:c1:6b:6b:f2:
         4d:bd:4f:97:ab:08:d3:3f:39:68:5a:2d:69:4e:09:54:d7:42:
         41:9b:24:11:96:a2:08:e4:41:cd:29:86:b7:8a:c3:75:dc:80:
         58:83:96:42:65:a1:e7:93:6d:df:03:75:94:e3:2b:17:0c:5c:
         91:71:d3:79:48:8b:77:88:4b:d3:71:6a:a3:a6:4a:47:3c:85:
         78:c1:e1:a4:74:6e:4e:3b:fb:d8:7e:11:25:17:12:20:77:e1:
         44:51:a3:67:d3:92:15:9c:63:69:c4:47:16:74:b2:44:53:c4:
         5f:2d:23:c5:de:41:97:4b:8c:59:48:14:18:0b:05:50:dc:c5:
         08:b3:9d:73:6b:d1:fd:48:d3:37:17:0b:a1:c1:e5:5b:cb:01:
         81:dc:1b:04:ae:3d:27:88:9a:bd:eb:9b:40:c0:f6:11:a5:ae:
         b2:26:b1:78:fd:0b:ec:05:ad:91:41:8e:dd:ef:ab:ce:43:ac:
         97:70:e5:ad:c0:68:6b:da:09:f2:ac:52:f7:a6:bc:28:a5:7d:
         12:d2:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----