Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/pvbRI62dvmAS4X5FJbB4PIS2yvw.roa
File:                     pvbRI62dvmAS4X5FJbB4PIS2yvw.roa (raw, json)
Hash identifier:          uFfCJLjzz+o3BGkdMD0hrpqMuwISyHNd3Gse1LhbJYU=
Subject key identifier:   A6:F6:D1:23:AD:9D:BE:60:12:E1:7E:45:25:B0:78:3C:84:B6:CA:FC
Certificate issuer:       /CN=29fb641a0d1a36c2b6478f7dcf3a8546405f9b45
Certificate serial:       01856F42A82EC9454B8306FEEB67F08DAC28
Authority key identifier: 29:FB:64:1A:0D:1A:36:C2:B6:47:8F:7D:CF:3A:85:46:40:5F:9B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KftkGg0aNsK2R499zzqFRkBfm0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/pvbRI62dvmAS4X5FJbB4PIS2yvw.roa
Signing time:             Sun 01 Jan 2023 21:35:17 +0000
ROA not before:           Sun 01 Jan 2023 21:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:8640::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a8:2e:c9:45:4b:83:06:fe:eb:67:f0:8d:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fb641a0d1a36c2b6478f7dcf3a8546405f9b45
        Validity
            Not Before: Jan  1 21:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6f6d123ad9dbe6012e17e4525b0783c84b6cafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:0b:c7:7a:c8:bb:2d:17:d2:a7:08:8f:a3:
                    51:26:2a:d0:84:81:78:c0:4c:a8:37:ee:2c:38:e0:
                    e2:c6:79:24:f0:79:ee:c1:bf:72:bd:78:c8:92:8f:
                    bb:5c:6c:1e:78:19:52:51:c7:e2:b5:d0:26:7c:2c:
                    d7:43:7d:3b:28:19:3c:17:9a:fe:cd:4f:b0:63:da:
                    75:a4:c8:b4:eb:7d:0f:17:8f:75:69:17:ba:23:e8:
                    d0:e8:63:ed:7f:91:1f:89:75:25:74:a5:ae:96:de:
                    0e:15:78:cd:df:6a:f6:93:b3:8b:70:e6:eb:92:a3:
                    81:0e:05:bb:12:aa:23:d5:b6:00:67:26:ae:20:69:
                    a8:a0:da:1a:0c:63:44:7e:ce:46:5d:41:60:ac:69:
                    61:20:b9:93:48:af:74:d9:7e:e0:25:69:db:14:b6:
                    48:cd:95:28:f4:20:8d:09:a0:26:a0:d4:0c:03:ad:
                    ac:59:9b:8d:d0:e3:88:96:fb:86:05:04:93:7f:91:
                    1c:c3:40:81:48:94:41:85:1e:3a:fa:66:5d:cf:6c:
                    1b:0a:12:f8:6a:84:a1:00:39:65:fe:90:c3:01:6f:
                    49:8b:32:f3:a9:e3:22:55:48:7b:e2:f0:30:da:80:
                    f3:91:a9:e9:9d:33:7a:23:54:03:d8:6d:77:23:fa:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:D1:23:AD:9D:BE:60:12:E1:7E:45:25:B0:78:3C:84:B6:CA:FC
            X509v3 Authority Key Identifier:
                keyid:29:FB:64:1A:0D:1A:36:C2:B6:47:8F:7D:CF:3A:85:46:40:5F:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KftkGg0aNsK2R499zzqFRkBfm0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/pvbRI62dvmAS4X5FJbB4PIS2yvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/KftkGg0aNsK2R499zzqFRkBfm0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8640::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:8d:38:a5:b6:3f:11:72:d8:48:73:a7:ed:9e:f1:97:bf:
         63:c0:2f:75:94:70:1a:92:5f:6a:c4:42:9d:c7:af:48:78:98:
         21:64:d7:9d:41:0b:4e:ed:66:c5:7f:3c:f6:eb:be:f0:87:12:
         2b:65:a0:ed:ea:f5:00:22:fb:fe:c1:b3:ad:37:5d:2d:6b:ec:
         44:ae:f5:aa:44:5b:64:92:0b:93:12:3f:64:76:96:72:4c:11:
         e9:85:5c:67:8b:c2:99:73:57:4f:55:a0:ff:ce:40:ad:38:8f:
         f4:ed:04:6a:88:17:7a:e7:63:5a:bf:82:80:7f:df:08:ac:60:
         4a:9b:78:67:60:29:6d:33:b5:99:75:67:ab:83:b0:d2:61:4f:
         c1:8c:9f:8e:76:46:2f:ee:52:40:c7:66:3e:6e:d0:b3:49:25:
         8f:b5:eb:63:84:1a:b7:64:68:42:aa:46:97:5d:24:9e:86:56:
         5b:60:a1:c8:b6:b1:cc:65:ec:9f:58:37:15:fe:4d:b9:87:c6:
         33:8b:15:4c:7c:5c:b0:15:5e:6b:7a:93:29:43:15:5e:59:cf:
         0e:c7:91:64:f1:de:ce:6c:13:7c:15:12:16:7f:3d:20:88:11:
         cf:00:8a:ea:dc:c3:e1:90:fa:0f:2d:73:b1:4c:ff:0d:7c:5d:
         d1:b4:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----