Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/RvuOKX5Vu-Z_cLRkWC0j7LUOWHc.roa
File:                     RvuOKX5Vu-Z_cLRkWC0j7LUOWHc.roa (raw, json)
Hash identifier:          xSi7KbNMz2qRw04WLqdVqun39FuyLSrMjIxXOFn6CT4=
Subject key identifier:   46:FB:8E:29:7E:55:BB:E6:7F:70:B4:64:58:2D:23:EC:B5:0E:58:77
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53D75D3833BF798F195E5B7517230D
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/RvuOKX5Vu-Z_cLRkWC0j7LUOWHc.roa
Signing time:             Sun 01 Jan 2023 12:34:49 +0000
ROA not before:           Sun 01 Jan 2023 12:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208333
IP address blocks:        2a11:29c0:3df5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:d7:5d:38:33:bf:79:8f:19:5e:5b:75:17:23:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46fb8e297e55bbe67f70b464582d23ecb50e5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:37:c8:dd:8e:9a:f7:4c:7d:31:cb:bb:92:
                    ab:7b:9f:c1:ba:7b:fa:cc:59:ae:ba:21:cf:a6:19:
                    6a:6f:b3:10:f4:3d:ac:8e:43:b9:19:01:a5:ff:d2:
                    e5:43:b8:db:ed:46:20:f2:1f:f9:e5:72:a8:e9:53:
                    87:cb:d6:7d:e3:ef:f5:63:5f:ce:9f:ff:3b:7b:75:
                    02:4c:12:30:13:b4:3b:11:82:48:74:84:3f:0a:11:
                    4b:2f:f2:31:d3:73:55:a1:37:28:66:9c:56:60:eb:
                    89:22:7c:2f:b6:60:f8:54:e1:38:b8:fa:54:17:17:
                    9c:76:b2:a9:0a:fd:21:7f:16:8e:2d:70:d7:c7:0f:
                    1f:05:16:da:34:78:5f:7a:c9:c6:33:76:9f:69:29:
                    fd:39:55:c8:4c:7d:b6:e8:e7:a9:8f:22:a0:0a:bd:
                    22:34:48:53:ec:f5:56:a6:66:32:06:b5:9d:01:d8:
                    38:3c:73:cc:8e:c2:ba:09:c4:70:a2:81:37:be:34:
                    02:7f:61:5e:62:eb:5e:55:bf:0f:28:bf:d4:95:f6:
                    52:29:25:5a:59:27:b7:75:f6:ac:58:2b:60:eb:fc:
                    0a:f5:73:ad:fb:90:3a:d7:46:5f:c4:83:da:44:c3:
                    66:9b:28:b7:08:2a:ec:e9:3f:b9:e8:fc:bf:53:36:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:8E:29:7E:55:BB:E6:7F:70:B4:64:58:2D:23:EC:B5:0E:58:77
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/RvuOKX5Vu-Z_cLRkWC0j7LUOWHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:c4:ae:31:05:08:81:d4:b1:79:48:98:c9:30:e2:de:8a:
         ee:ae:66:f1:03:4c:23:c4:f7:32:c8:d9:dd:09:13:8f:88:d8:
         a6:5e:06:d4:b6:33:d0:26:45:96:d3:25:00:2e:09:70:cf:6f:
         57:a6:26:08:a3:32:1b:bb:e5:76:41:6f:8d:6d:bd:37:13:4a:
         62:14:ba:e5:39:61:ac:35:b6:d8:ac:37:0c:26:16:49:3a:51:
         f9:30:02:fa:2f:61:9f:d6:0f:3b:e3:89:2e:97:59:0e:67:c8:
         ed:c9:9f:69:57:5b:a6:06:6d:bb:05:89:61:f9:a1:8e:70:a7:
         e8:0d:17:76:86:1b:db:9b:e8:70:cb:0d:2f:06:b1:01:ab:fb:
         f3:42:51:a9:a9:3e:2a:64:8c:b9:9a:39:e5:0f:84:2e:69:fb:
         6c:fd:66:97:f0:e9:6a:f7:f3:50:2a:59:c9:5c:96:96:46:54:
         37:6d:e9:97:3f:dd:40:48:6a:33:ba:85:77:a7:c8:77:44:16:
         25:b5:ac:ca:fb:08:b2:0e:0e:3c:24:80:b3:d9:02:b4:83:2b:
         10:76:48:c5:ac:2d:6f:2b:09:0a:5b:30:5d:1d:76:b4:1b:1e:
         4b:7e:4c:e7:3c:63:8b:09:7b:0c:28:b7:c5:5d:67:5c:06:8b:
         21:ca:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----