Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/HMyva1dj_F-M2tEii8Kht9N-SoI.roa
File:                     HMyva1dj_F-M2tEii8Kht9N-SoI.roa (raw, json)
Hash identifier:          LAtjr1Y1a3xQm3zSdziTU7ljER/IrqdJyEnSxc/E5pM=
Subject key identifier:   1C:CC:AF:6B:57:63:FC:5F:8C:DA:D1:22:8B:C2:A1:B7:D3:7E:4A:82
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DDE014A8A50ECF71F6D65EF13590
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/HMyva1dj_F-M2tEii8Kht9N-SoI.roa
Signing time:             Sun 01 Jan 2023 12:34:50 +0000
ROA not before:           Sun 01 Jan 2023 12:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210348
IP address blocks:        2a11:29c0:3dfc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:dd:e0:14:a8:a5:0e:cf:71:f6:d6:5e:f1:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1cccaf6b5763fc5f8cdad1228bc2a1b7d37e4a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:4b:67:28:ad:83:09:5d:bb:e6:08:74:a4:
                    e5:12:15:37:cf:81:4d:12:48:02:3f:c7:d2:55:b4:
                    43:f4:5c:75:2c:03:27:df:2a:ab:c2:43:e0:cd:52:
                    72:5f:89:a0:5a:de:f2:e8:64:25:6a:59:a9:89:f2:
                    4e:5f:b4:aa:5e:3f:e0:d8:1c:58:03:1e:ef:d5:c9:
                    39:a6:b0:b7:a1:0c:42:88:3b:e9:00:e8:b0:52:56:
                    dc:15:4e:a9:78:6d:9f:6f:6a:2a:7f:ac:53:c8:8e:
                    11:89:bc:98:12:83:ca:63:21:e7:e1:ba:62:e7:6f:
                    b1:af:ab:a1:02:5f:31:e7:6f:d3:5a:57:c7:33:3d:
                    98:43:e0:5a:85:55:4f:65:81:16:33:41:06:74:75:
                    5a:3f:35:34:16:80:cd:50:c0:ed:d0:29:0a:af:44:
                    84:dc:d0:30:32:f4:f9:d5:15:ae:ef:0f:52:a1:1f:
                    9a:7a:31:05:ee:b7:f0:16:e2:13:89:8f:04:70:ff:
                    bb:b3:72:1a:a2:82:7b:9b:a8:1b:88:d7:4a:ff:da:
                    2d:50:07:ad:d4:62:8d:60:b3:18:de:b7:9a:61:e2:
                    9b:e7:45:0a:3b:76:f1:9d:de:86:c5:f2:11:69:1f:
                    0a:8c:fd:01:94:21:0f:d5:ea:2f:23:8b:b6:91:0d:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:AF:6B:57:63:FC:5F:8C:DA:D1:22:8B:C2:A1:B7:D3:7E:4A:82
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/HMyva1dj_F-M2tEii8Kht9N-SoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3dfc::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:e9:19:83:5d:74:f5:fc:e1:04:62:c4:5e:f5:94:0d:20:
         6b:d3:10:50:8c:02:85:60:44:c7:af:46:9e:df:ec:be:15:41:
         a9:f1:25:52:74:ec:c9:7a:de:cf:65:4b:af:fa:6a:be:e5:bb:
         44:17:5d:3f:56:f3:8b:19:97:ff:5b:03:16:c5:31:84:2d:a2:
         1d:73:fb:8c:50:26:d9:f6:55:1b:d0:40:66:d8:fd:79:da:f4:
         92:cd:29:1e:dc:d2:6d:a3:c8:6b:70:dc:14:d1:86:ec:7e:eb:
         46:83:cf:41:d3:a0:34:42:23:50:e5:54:92:d2:7d:e4:58:cf:
         e6:c4:74:d9:da:62:fb:3f:20:41:be:f3:7e:f0:b5:ab:98:8f:
         2c:98:51:f8:47:6e:86:3f:48:24:0c:9d:a6:77:10:74:3c:c6:
         23:93:56:c3:31:a1:fe:33:9d:50:3e:5d:9c:0a:e8:d0:28:88:
         90:0d:3a:6c:73:17:87:c5:96:b7:87:2e:be:69:b2:4b:aa:4a:
         49:dc:e5:22:4a:d1:cc:bd:cc:67:f1:4d:94:2d:b2:93:60:bf:
         c8:cc:47:5c:4d:6c:6c:b7:4c:1b:85:90:32:a8:fb:ed:7d:90:
         20:d5:77:9c:77:6e:32:27:4c:0a:6c:24:fc:f6:01:95:01:0b:
         03:96:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----