Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LXobd56AEMnlz4Uj6Si35Ue8jgs.roa
File:                     LXobd56AEMnlz4Uj6Si35Ue8jgs.roa (raw, json)
Hash identifier:          vdChk4lmuRLFzb8n90W5HCHCqOYls7cC6nU23MVImWA=
Subject key identifier:   2D:7A:1B:77:9E:80:10:C9:E5:CF:85:23:E9:28:B7:E5:47:BC:8E:0B
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DFDB127430270DA4DE745924EDD6
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LXobd56AEMnlz4Uj6Si35Ue8jgs.roa
Signing time:             Sun 01 Jan 2023 12:34:51 +0000
ROA not before:           Sun 01 Jan 2023 12:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211944
IP address blocks:        2a11:29c0:3df2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:df:db:12:74:30:27:0d:a4:de:74:59:24:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d7a1b779e8010c9e5cf8523e928b7e547bc8e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:f4:ba:58:32:a5:81:52:41:6d:d6:c0:e6:
                    3c:30:f5:25:1b:e9:f6:cb:d8:45:36:8d:9c:cb:cb:
                    81:c1:0a:79:56:23:c6:1f:52:45:7c:66:dd:1a:5c:
                    37:48:28:e1:30:61:69:04:53:13:ad:b2:30:3c:53:
                    41:0c:af:80:d7:db:a0:05:4d:e7:e8:26:f2:37:bc:
                    9a:6c:7b:6a:c1:b0:98:6b:3e:4b:7d:d6:55:96:97:
                    6c:95:07:e7:53:f6:79:41:d3:90:6f:d2:37:3e:ae:
                    98:ca:cd:ac:02:50:84:bf:d5:e9:b6:a6:8a:25:51:
                    d1:e0:21:49:36:c6:48:4c:1b:94:06:48:ef:b8:87:
                    9d:1b:79:04:17:47:06:38:08:1c:af:2a:a1:02:6f:
                    00:e2:e8:55:22:ab:27:04:2f:ac:3c:09:85:ce:5d:
                    b8:68:e0:a3:cd:32:12:e3:be:64:e4:4e:1e:39:fd:
                    23:9e:fc:9b:47:db:b4:91:5d:aa:20:95:c8:6d:f1:
                    32:2c:49:22:c2:f6:0b:59:4f:4a:29:32:52:ce:79:
                    9c:3c:eb:0b:c4:20:51:d1:b6:09:1a:bf:d2:e6:e8:
                    9e:10:d3:a9:fd:81:9f:23:e5:4a:2f:8c:ca:b8:ab:
                    7b:a1:04:05:8a:40:a4:d4:ba:78:30:e4:0f:3c:69:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:1B:77:9E:80:10:C9:E5:CF:85:23:E9:28:B7:E5:47:BC:8E:0B
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LXobd56AEMnlz4Uj6Si35Ue8jgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:f2:93:3e:72:24:e5:d3:7d:9f:ca:e8:27:90:dc:a6:6f:
         a9:a0:10:1e:16:d4:9e:31:89:18:c6:57:5b:9d:28:67:e2:00:
         13:aa:fa:f2:58:ed:d7:3a:5c:d9:4e:cc:d0:4d:59:79:4a:24:
         84:6f:3c:0e:4f:11:d9:97:1e:80:03:dc:90:9a:4b:42:fe:ca:
         1d:90:4f:9b:b6:fa:ae:c3:9c:2b:4d:a5:eb:de:52:d4:80:1d:
         ab:48:ee:16:da:a5:37:ee:51:ab:5f:47:67:65:de:4c:0b:9e:
         39:0f:96:f7:09:aa:d2:1c:76:e2:b3:c1:7a:c1:2d:b7:a0:c8:
         fa:98:75:0b:c0:ce:a1:bb:2d:a3:a2:8f:75:c2:77:06:34:83:
         6b:a0:17:ee:1c:4a:0e:ed:7d:71:fe:4c:10:ad:b7:92:f4:73:
         bf:26:d0:87:4b:eb:84:d2:70:b4:18:7a:cc:b4:16:86:76:3a:
         1b:b7:a3:a1:94:a3:d1:72:e4:38:35:7e:10:49:3a:9d:04:ce:
         13:36:60:2c:36:91:12:ed:ca:c3:a2:07:19:12:32:9b:90:c9:
         60:d7:73:ea:79:c9:72:50:43:ac:12:e3:bd:f4:f4:88:bb:51:
         7a:40:9a:50:03:1a:eb:3d:9f:28:ce:c3:f7:c0:1c:87:07:e9:
         ba:da:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----