Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/mis23XvvenAYXc1BinQmQxxJbMc.roa
File:                     mis23XvvenAYXc1BinQmQxxJbMc.roa (raw, json)
Hash identifier:          3Yd3Gzk+i8t79V6+yYKTBPXQ6xNQsGMqHcT65i2CreE=
Subject key identifier:   9A:2B:36:DD:7B:EF:7A:70:18:5D:CD:41:8A:74:26:43:1C:49:6C:C7
Certificate issuer:       /CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
Certificate serial:       01872FDAED138E30C6452B6661F39CBD6CE9
Authority key identifier: F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/mis23XvvenAYXc1BinQmQxxJbMc.roa
Signing time:             Thu 30 Mar 2023 00:11:29 +0000
ROA not before:           Thu 30 Mar 2023 00:11:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63018
IP address blocks:        2a03:b600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2f:da:ed:13:8e:30:c6:45:2b:66:61:f3:9c:bd:6c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
        Validity
            Not Before: Mar 30 00:11:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a2b36dd7bef7a70185dcd418a7426431c496cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:6d:29:8a:af:e0:89:9b:a2:77:4c:7a:40:
                    44:3a:02:53:42:d7:18:a4:56:a3:ac:dc:7c:08:d4:
                    7e:ae:88:ad:16:ed:17:57:04:18:39:ee:df:66:b3:
                    06:6b:8b:40:f4:f2:09:90:1d:b6:42:98:25:a8:9c:
                    ec:15:2b:89:79:9f:8a:58:d2:e6:5c:19:25:76:8c:
                    67:d7:22:2b:ed:64:c8:b7:ea:c0:a3:6a:47:6a:42:
                    1f:c1:d6:a4:2d:f6:ae:cc:af:e4:62:7c:70:31:67:
                    cc:42:f0:e7:0d:51:e0:3c:15:cd:bc:c3:db:f3:08:
                    b8:a6:a2:4b:7e:d2:ec:67:0f:59:90:be:dd:c2:c3:
                    1f:6c:ea:ff:24:c5:26:fa:d6:e9:a9:d0:2f:fa:49:
                    72:03:ed:48:67:c0:a2:f0:8d:0c:69:a2:ec:ef:5d:
                    30:89:5f:41:ee:eb:42:ee:4b:8d:b1:bc:cb:1e:6e:
                    f3:de:67:4e:3d:21:e9:32:30:6e:5c:52:91:87:52:
                    05:74:9d:ef:12:c2:e9:50:49:df:9e:d6:6d:96:53:
                    11:f8:ac:5d:53:22:67:fc:14:fe:d9:0b:ee:28:29:
                    72:9d:4f:18:68:09:7e:e9:8b:68:ca:8b:6f:aa:8a:
                    62:08:02:27:b4:65:a3:83:f0:d8:c5:4d:f6:59:a1:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2B:36:DD:7B:EF:7A:70:18:5D:CD:41:8A:74:26:43:1C:49:6C:C7
            X509v3 Authority Key Identifier:
                keyid:F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/mis23XvvenAYXc1BinQmQxxJbMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:b600::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:db:90:db:e2:69:17:fe:03:6d:ca:3c:be:c7:75:1b:29:
         e0:30:35:59:59:4a:06:84:74:33:7e:70:8c:e9:47:ab:f4:b2:
         91:c5:f0:23:7f:23:93:f8:25:e2:e9:09:c7:5d:69:4b:95:af:
         46:bd:4d:30:5c:6e:79:30:a2:7d:32:ea:3b:d8:c0:31:5a:0e:
         62:d7:45:f9:b5:db:bb:e9:ce:84:ef:f7:81:bd:e3:f6:02:00:
         25:a9:e3:96:39:10:f1:ad:66:33:4f:42:86:a8:52:9b:e0:00:
         0a:de:f9:34:0b:cd:4b:19:74:ef:11:41:de:f9:de:3f:79:f5:
         89:8d:0d:6c:bf:f6:74:f1:3f:b7:21:e6:86:20:0f:a1:c0:71:
         1a:de:89:ed:cb:29:ea:85:c8:04:7c:eb:e3:7d:b1:8c:0b:5a:
         52:b9:49:a6:9f:e4:1c:c3:dc:37:90:b7:9c:a7:6b:1c:b3:57:
         3a:75:eb:82:4c:20:cd:3b:43:1f:5d:80:b0:23:ef:bd:d1:74:
         49:15:f2:f8:3a:bd:85:58:b2:88:8e:a1:d4:e0:16:5b:b0:7a:
         e3:12:13:06:cc:91:42:ee:11:40:73:1f:7f:64:cb:4d:09:d8:
         94:12:4a:94:17:40:05:31:bc:ff:ca:f5:b8:f8:45:1f:f4:c0:
         4d:d1:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----