Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/M8a6RiX8dt0vzVelWSxUtJoOVaE.roa
File:                     M8a6RiX8dt0vzVelWSxUtJoOVaE.roa (raw, json)
Hash identifier:          bS4i5T+hhTG8KzbGLXlKYdKae1EgeWmPhvzTgH53tdk=
Subject key identifier:   33:C6:BA:46:25:FC:76:DD:2F:CD:57:A5:59:2C:54:B4:9A:0E:55:A1
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DA9A3941AF6BC216E7BC122B7CD0
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/M8a6RiX8dt0vzVelWSxUtJoOVaE.roa
Signing time:             Sun 01 Jan 2023 12:34:49 +0000
ROA not before:           Sun 01 Jan 2023 12:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208771
IP address blocks:        2a11:29c0:3df9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:da:9a:39:41:af:6b:c2:16:e7:bc:12:2b:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33c6ba4625fc76dd2fcd57a5592c54b49a0e55a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:aa:44:a9:5d:29:77:ba:b8:b4:05:07:09:
                    5a:e7:36:8c:a3:08:63:7e:f6:42:01:8a:8d:82:cb:
                    fd:3a:db:8e:cd:70:fe:4c:8d:dd:7d:f4:b2:9a:6c:
                    11:f6:81:2b:1d:26:a3:43:6d:4f:b4:6e:05:ca:fd:
                    2c:c2:d1:3b:d7:15:fc:92:5d:15:f5:8c:92:c6:e7:
                    c8:6c:8d:94:89:6c:16:38:3d:38:81:da:5e:62:eb:
                    e0:74:cb:69:2a:96:54:51:16:f9:1c:a9:6c:f8:c0:
                    24:6a:aa:98:e3:99:d5:2d:55:f5:21:04:8a:43:07:
                    05:f0:0b:de:3d:14:c2:2c:3f:9b:14:a7:ee:14:1d:
                    d7:6f:a3:14:36:21:69:64:31:cf:b8:e2:bc:da:30:
                    73:58:2f:d2:ef:41:b5:ad:05:7d:73:ba:cd:9b:e3:
                    f0:7d:5a:b3:03:c8:7e:cb:e6:a7:f8:4e:a2:b6:fb:
                    5d:4a:32:ce:b4:92:fc:d1:64:fa:3e:7d:6c:42:b5:
                    69:08:86:fa:c7:65:18:20:14:76:db:ab:39:fb:68:
                    f9:4b:eb:a3:44:9d:20:8b:85:78:96:9b:25:f9:b4:
                    2c:60:89:04:a2:1e:25:cd:55:2c:0b:7a:db:da:d8:
                    1b:88:a2:54:01:aa:68:ee:82:49:db:92:c0:2b:11:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C6:BA:46:25:FC:76:DD:2F:CD:57:A5:59:2C:54:B4:9A:0E:55:A1
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/M8a6RiX8dt0vzVelWSxUtJoOVaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df9::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:59:2f:76:5e:04:ec:ff:99:f9:8d:05:65:07:74:46:bf:db:
         48:ab:5f:c4:9b:04:bc:06:69:f2:32:44:0a:9f:79:ae:7a:f1:
         c0:59:f4:b8:8d:89:0a:6b:8a:98:c5:0a:52:0c:e6:56:61:d6:
         1d:23:f5:29:45:8b:7e:59:d4:e2:42:30:cc:16:a1:2a:85:f8:
         22:09:ab:2e:e4:17:d3:65:58:7e:c0:04:91:94:b9:b2:57:c8:
         84:ff:18:e8:85:8c:15:17:59:8c:1d:dd:e9:45:04:7a:7a:56:
         b8:42:9d:21:2e:c4:8a:4e:50:53:91:83:1c:7b:91:b7:69:4e:
         f4:c4:cc:5a:29:e6:bc:af:0b:e0:98:2a:fe:c8:a5:c3:52:19:
         e5:7f:03:48:03:60:7b:e2:94:a6:80:9a:19:0c:34:75:a7:cd:
         16:3d:23:02:c2:6d:12:ea:f9:18:08:59:0e:34:1a:cd:47:31:
         f2:5d:ca:c2:9b:1e:da:c3:4d:46:26:ce:ef:4f:3c:30:8c:18:
         d8:17:67:a4:48:b7:a1:ce:04:d9:fe:8c:c1:18:e8:49:bc:b6:
         2f:c9:20:77:8a:6b:79:22:33:60:f5:e9:73:9d:84:8d:59:7f:
         02:9e:30:2e:d3:20:d7:e3:60:75:b9:ab:1f:4f:29:3d:67:63:
         85:b2:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----