Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Rmq_FigLDkhPxXxiSay3CEnxCO4.roa
File:                     Rmq_FigLDkhPxXxiSay3CEnxCO4.roa (raw, json)
Hash identifier:          5avp9BFnb2+BqEtqBDU1uVa5PTPJLpOD3N/anDucWLM=
Subject key identifier:   46:6A:BF:16:28:0B:0E:48:4F:C5:7C:62:49:AC:B7:08:49:F1:08:EE
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53DB490666B69AA307A2A5E244B818
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Rmq_FigLDkhPxXxiSay3CEnxCO4.roa
Signing time:             Sun 01 Jan 2023 12:34:50 +0000
ROA not before:           Sun 01 Jan 2023 12:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209389
IP address blocks:        2a11:29c0:3df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:db:49:06:66:b6:9a:a3:07:a2:a5:e2:44:b8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=466abf16280b0e484fc57c6249acb70849f108ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:5e:0f:b3:53:15:ab:dd:46:38:02:5b:42:
                    ac:1a:1a:75:53:55:c0:7e:a8:0b:dc:b7:e6:a6:cc:
                    8e:d5:18:21:1f:ee:2a:44:3d:91:8c:5b:c4:53:41:
                    df:4f:3e:f1:89:a7:31:3d:d5:63:89:29:c1:7f:69:
                    a8:0e:ea:39:99:84:73:86:5a:73:5f:6e:3d:db:fa:
                    2b:ec:62:c2:cb:f3:f9:73:d0:e3:37:87:8e:dd:b5:
                    39:44:67:77:94:ba:61:ec:35:18:d0:44:7b:64:85:
                    69:10:62:2f:ac:e7:0e:f4:8a:9f:9c:b5:b0:1b:5a:
                    d0:e9:7f:ef:9b:6e:62:85:63:ee:8e:fd:86:bb:ab:
                    3a:cc:98:12:39:f9:7c:f8:58:98:f3:bc:af:28:b9:
                    f8:84:7f:16:d5:0f:5b:ec:f9:18:55:51:e3:cb:03:
                    15:0c:3c:4b:d8:a4:80:5c:35:74:b4:5a:25:24:19:
                    1d:b8:d8:a1:89:7a:b4:a8:42:bb:4c:ae:16:25:9f:
                    87:6a:17:76:4a:e4:25:22:a2:5f:c0:66:da:ec:27:
                    3d:84:4c:67:72:31:2e:6f:3f:02:e9:3b:a7:6e:87:
                    2a:3b:17:cd:77:76:08:c9:a5:e8:5c:4e:b9:11:82:
                    e7:1b:00:26:3c:2c:34:3f:06:25:21:79:a6:8e:9e:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:BF:16:28:0B:0E:48:4F:C5:7C:62:49:AC:B7:08:49:F1:08:EE
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Rmq_FigLDkhPxXxiSay3CEnxCO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:91:c7:23:54:cb:f0:43:83:a9:53:30:0a:2b:93:12:e1:ff:
         a5:ab:b5:26:9f:1e:fb:d3:6e:1b:fd:84:87:70:51:7c:9f:76:
         58:e0:51:8e:08:ef:9c:d8:2c:e5:f6:36:b7:2d:fa:7f:e0:25:
         c7:3b:ef:93:f2:36:ce:ef:3c:6c:43:75:4a:4c:d5:ba:4d:50:
         5e:7f:00:dd:ac:8e:fd:40:7c:46:95:a0:c6:59:c8:74:55:cd:
         0f:6a:59:e5:da:19:53:32:a4:d6:4d:5c:9e:6e:97:8f:4a:4d:
         a8:73:1a:13:b9:5c:dd:0b:77:6b:31:55:55:24:48:d5:8b:24:
         2d:7c:99:04:3c:56:b1:88:db:a0:96:82:35:a5:97:40:d8:8c:
         b5:b5:07:15:fc:84:12:ba:a1:65:67:08:32:fa:17:9a:02:57:
         fe:6e:c0:58:3f:34:8a:a2:40:11:70:94:ca:e7:17:a7:13:d2:
         5b:ec:07:ea:25:63:af:56:ca:2a:e2:2e:4b:b0:59:4c:ca:27:
         8b:6a:82:c4:35:55:66:71:2c:b1:8b:ca:fb:70:32:01:80:45:
         33:1a:69:ad:6b:bc:5b:c5:d7:42:65:3e:7d:92:5c:74:ce:2e:
         04:2c:58:e8:6a:c0:b4:e4:db:f6:97:26:53:91:aa:9d:07:56:
         f3:e0:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----