Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9LVetlzpk4cJ96RL-cbjOVAPBmU.roa
File:                     9LVetlzpk4cJ96RL-cbjOVAPBmU.roa (raw, json)
Hash identifier:          Dpl2fb5HWQXlN9DKhMTl+8vrhfS0jPcN+NSjnfZm5nk=
Subject key identifier:   F4:B5:5E:B6:5C:E9:93:87:09:F7:A4:4B:F9:C6:E3:39:50:0F:06:65
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DE5EDB0DF7BEFF78EBE9D41D2531
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9LVetlzpk4cJ96RL-cbjOVAPBmU.roa
Signing time:             Sun 01 Jan 2023 12:34:51 +0000
ROA not before:           Sun 01 Jan 2023 12:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210985
IP address blocks:        2a11:29c0:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:de:5e:db:0d:f7:be:ff:78:eb:e9:d4:1d:25:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4b55eb65ce9938709f7a44bf9c6e339500f0665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:70:6f:a6:90:24:ef:9d:b9:1e:a1:03:ed:
                    54:90:93:35:25:94:3f:4c:d6:44:8c:38:b9:55:5d:
                    da:42:a0:e8:14:57:2e:2d:a9:eb:3c:04:60:76:96:
                    4a:7a:58:16:e1:93:00:20:db:15:cb:e6:ad:e1:17:
                    93:36:85:2e:8f:17:85:e8:75:de:df:68:9d:f1:ac:
                    63:6a:9c:71:c6:5c:2e:15:f4:a4:1b:57:8e:af:04:
                    e9:9f:2f:94:5e:67:50:5c:42:a8:36:6e:db:4f:3c:
                    dc:2b:a1:1d:5b:4c:87:24:0b:4f:8a:3a:91:8d:be:
                    0b:f9:1f:2b:37:99:a7:d4:25:71:87:ff:39:70:c5:
                    53:70:6c:d0:ce:d3:8d:9a:d5:a5:d0:c5:75:6a:37:
                    95:e0:88:1a:72:5b:21:59:c2:9f:18:ed:5a:fe:aa:
                    8c:bb:55:e3:d3:eb:b8:c7:de:b5:2d:1f:e4:7b:52:
                    de:e7:e3:58:23:b1:ed:b4:cb:ee:dd:b7:5d:44:db:
                    02:ee:34:e2:2e:d2:1e:32:63:14:1d:c0:b5:10:b7:
                    9c:28:72:06:84:83:36:0f:29:5b:ee:0c:5e:21:b7:
                    94:80:83:4b:12:a1:08:87:43:b5:3d:ec:7e:f1:26:
                    91:28:6b:16:ba:02:ba:b6:14:20:b9:6a:a5:4a:d9:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:5E:B6:5C:E9:93:87:09:F7:A4:4B:F9:C6:E3:39:50:0F:06:65
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9LVetlzpk4cJ96RL-cbjOVAPBmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:f2:85:be:71:69:8f:d7:8a:cb:54:e0:6a:ff:22:4e:4e:
         ab:b7:b2:d5:2a:4b:8f:d8:4f:99:8d:79:2c:a9:9a:6a:31:10:
         06:3a:58:bd:19:44:b1:ca:3e:5f:f5:c4:5c:1e:c0:a9:ba:04:
         32:6b:bc:78:24:73:96:a3:a8:c5:83:aa:1a:43:bf:01:b4:e5:
         40:f8:0d:ff:87:55:f6:49:57:d5:bf:8a:08:2d:35:6d:4a:53:
         dd:03:b4:7b:ea:3f:65:33:98:99:ff:6f:03:46:51:ce:88:4b:
         a3:f1:5a:f6:44:a8:2a:6a:dd:e0:ae:02:11:f9:9d:5a:bf:46:
         8a:c2:9e:40:f0:1c:48:01:13:b2:1a:26:66:81:78:9b:63:ec:
         37:71:a5:76:bd:b7:cb:5a:92:e3:05:bf:2b:f7:d1:5c:b8:a1:
         2d:da:ce:07:3e:6f:b6:86:6d:fe:97:66:7f:6d:ea:9d:ad:b8:
         05:20:81:27:9e:a6:33:89:1c:ab:d3:70:14:b2:2c:01:1f:32:
         b3:1a:3a:f3:02:bb:e2:cd:67:0a:f4:d0:3c:2f:70:ec:1e:c2:
         92:bf:39:65:d8:ea:0d:5b:d4:41:e5:85:b4:26:8d:7a:b0:e0:
         78:4b:bb:9f:98:90:58:72:eb:ec:c0:47:23:7f:83:ec:79:04:
         25:53:a0:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtU95e2w33vv946+nUHSUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY4NDEzNjEyNGE1Y2FjYmU3YmY3ZDlmNjlmYTQyMWVj
Y2ZkMzcwHhcNMjMwMTAxMTIzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGI1NWViNjVjZTk5Mzg3MDlmN2E0NGJmOWM2ZTMzOTUwMGYwNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZFwb6aQJO+duR6hA+1UkJM1JZQ/
TNZEjDi5VV3aQqDoFFcuLanrPARgdpZKelgW4ZMAINsVy+at4ReTNoUujxeF6HXe
32id8axjapxxxlwuFfSkG1eOrwTpny+UXmdQXEKoNm7bTzzcK6EdW0yHJAtPijqR
jb4L+R8rN5mn1CVxh/85cMVTcGzQztONmtWl0MV1ajeV4IgaclshWcKfGO1a/qqM
u1Xj0+u4x961LR/ke1Le5+NYI7HttMvu3bddRNsC7jTiLtIeMmMUHcC1ELecKHIG
hIM2Dylb7gxeIbeUgINLEqEIh0O1Pex+8SaRKGsWugK6thQguWqlStmxVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPS1XrZc6ZOHCfekS/nG4zlQDwZlMB8GA1UdIwQY
MBaAFHgWhBNhJKXKy+e/fZ9p+kIezP03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAt
NDJjMGI3NTYxZDI5LzEvOUxWZXRsenBrNGNKOTZSTC1jYmpPVkFQQm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAtNDJjMGI3NTYxZDI5
LzEvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEpwAAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCc4/KFvnFpj9eKy1Tgav8iTk6rt7LVKkuP2E+Z
jXksqZpqMRAGOli9GUSxyj5f9cRcHsCpugQya7x4JHOWo6jFg6oaQ78BtOVA+A3/
h1X2SVfVv4oILTVtSlPdA7R76j9lM5iZ/28DRlHOiEuj8Vr2RKgqat3grgIR+Z1a
v0aKwp5A8BxIAROyGiZmgXibY+w3caV2vbfLWpLjBb8r99FcuKEt2s4HPm+2hm3+
l2Z/beqdrbgFIIEnnqYziRyr03AUsiwBHzKzGjrzArvizWcK9NA8L3DsHsKSvzll
2OoNW9RB5YW0Jo16sOB4S7ufmJBYcuvswEcjf4PseQQlU6Av
-----END CERTIFICATE-----