Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/83u_nkIzOb71WCxJaQIKNtPwsjg.roa
File:                     83u_nkIzOb71WCxJaQIKNtPwsjg.roa (raw, json)
Hash identifier:          HfhxDZYREXa5wCu8IctuudejGhxce9aVPcSSmgMRTn0=
Subject key identifier:   F3:7B:BF:9E:42:33:39:BE:F5:58:2C:49:69:02:0A:36:D3:F0:B2:38
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DBBFD1FF0B0E03F4E55B746AFC10
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/83u_nkIzOb71WCxJaQIKNtPwsjg.roa
Signing time:             Sun 01 Jan 2023 12:34:50 +0000
ROA not before:           Sun 01 Jan 2023 12:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209600
IP address blocks:        2a11:29c0:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:db:bf:d1:ff:0b:0e:03:f4:e5:5b:74:6a:fc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f37bbf9e423339bef5582c4969020a36d3f0b238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:e2:9d:b0:62:54:9f:72:32:64:b3:91:81:
                    e2:b5:46:b0:df:90:ea:58:d8:90:db:00:e6:3c:a6:
                    0e:af:7f:80:af:7a:de:32:68:b2:15:bd:3a:52:1b:
                    ba:37:00:13:57:97:c0:47:ae:9c:bb:5e:7f:59:1a:
                    b3:f1:c0:3f:3d:fe:52:71:12:71:6d:35:7d:a3:e4:
                    7f:79:54:f9:07:ee:44:52:36:f9:2c:b5:21:19:d2:
                    2d:ab:5b:3f:c4:4b:5d:ed:2f:67:e4:6f:6e:82:fb:
                    8c:21:f6:4e:aa:e8:c0:b3:49:99:d2:b8:55:0e:f4:
                    1d:ea:fe:ef:19:e9:7a:8f:66:09:1d:e4:a8:66:a3:
                    5a:bc:a9:a7:ee:9f:c6:a6:e9:71:ec:cf:30:42:4c:
                    58:f7:fb:fe:04:c6:94:17:3f:a5:35:26:32:7f:10:
                    dd:f7:b1:73:3a:d4:12:1e:0f:30:b8:d1:56:8b:7c:
                    31:fe:af:6e:56:82:13:a4:73:91:b2:dc:11:ae:6f:
                    04:df:13:7a:44:30:ff:99:d7:3c:4a:fd:15:f2:14:
                    78:fc:96:e8:1d:2a:7e:83:c4:82:6f:30:04:96:37:
                    67:b7:94:dc:c1:8e:47:97:08:5c:59:c9:ef:db:41:
                    76:38:92:9d:bd:92:e8:5e:31:36:c8:c3:94:46:93:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7B:BF:9E:42:33:39:BE:F5:58:2C:49:69:02:0A:36:D3:F0:B2:38
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/83u_nkIzOb71WCxJaQIKNtPwsjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:61:81:1f:1b:1a:80:b4:15:da:72:94:a4:00:04:47:e3:7a:
         22:a1:0e:15:48:f4:98:93:69:12:dd:cb:63:41:14:f4:13:df:
         fa:d0:09:03:cc:2a:06:b0:31:e6:6e:16:88:6c:f8:b6:78:82:
         49:21:43:d9:61:66:3a:96:b8:f2:6f:f2:85:1d:11:b5:f1:16:
         ab:c2:82:06:58:5f:2f:be:31:2c:15:fe:ec:c2:57:25:b7:2f:
         69:b0:74:a5:17:29:8a:df:0c:53:ae:ab:f6:f8:74:f8:42:4d:
         15:e1:82:d6:e2:45:87:ba:a6:da:5a:ee:a1:85:82:83:e0:26:
         a9:69:9f:ee:bd:d6:4e:2a:32:d1:cb:26:46:90:06:72:85:8a:
         58:da:b6:26:6f:ba:ad:85:77:0a:f9:19:66:d9:99:5e:2e:d3:
         14:20:4e:f2:6a:d4:01:f8:f5:2c:43:26:a8:00:c7:bb:30:3a:
         7c:92:c7:83:c4:f1:37:fe:07:9a:d1:32:38:6e:73:b1:a6:66:
         4f:61:b3:0d:01:e1:05:71:5a:ef:b3:ac:8d:bb:77:b2:0c:b8:
         ee:34:87:d9:e5:da:9d:db:9c:35:39:7e:8f:38:1b:c7:52:95:
         30:40:09:70:6f:28:ad:3d:78:3f:68:d3:af:3a:64:46:1f:0e:
         5b:fa:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----