Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/T2wayHUfaea8SedfHpHdXUPSw28.roa
File:                     T2wayHUfaea8SedfHpHdXUPSw28.roa (raw, json)
Hash identifier:          VReEJn7+hsJy80EsQAoRVhs/Q5AZ7QTTPcM/siuVkP8=
Subject key identifier:   4F:6C:1A:C8:75:1F:69:E6:BC:49:E7:5F:1E:91:DD:5D:43:D2:C3:6F
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53D8BD9BEB52EBC90D310C0FFDF473
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/T2wayHUfaea8SedfHpHdXUPSw28.roa
Signing time:             Sun 01 Jan 2023 12:34:49 +0000
ROA not before:           Sun 01 Jan 2023 12:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208471
IP address blocks:        2a11:29c0:3df7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:d8:bd:9b:eb:52:eb:c9:0d:31:0c:0f:fd:f4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f6c1ac8751f69e6bc49e75f1e91dd5d43d2c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:5c:de:c7:5e:ad:07:c0:c6:bd:44:35:0b:
                    87:77:5a:31:8c:1e:2d:45:8a:c1:c6:47:75:e3:73:
                    54:18:9e:54:ca:3e:92:82:62:98:38:41:86:17:0f:
                    0f:11:07:4d:c2:3e:3e:b5:79:b2:18:90:97:cb:08:
                    cc:e9:26:38:c7:a5:3a:ef:36:b3:06:40:a7:91:2c:
                    d0:42:82:97:4c:00:09:be:13:cf:63:8b:34:57:be:
                    08:c2:bd:a4:f3:a5:c0:47:1a:58:cd:41:1c:72:b3:
                    61:99:5f:8f:50:54:60:4b:e1:33:a7:85:40:c5:66:
                    15:c0:cf:18:a4:27:20:8e:a9:22:d4:4b:e3:04:a7:
                    d3:36:ed:ae:6b:82:6d:34:2e:92:88:a7:e0:82:38:
                    f2:43:da:17:fa:5c:3e:2b:1a:c0:c0:6d:13:b8:68:
                    43:67:42:97:b9:3d:ad:49:a7:fd:6e:ca:b8:46:b1:
                    e8:e0:81:a9:eb:98:0c:12:fc:83:4e:53:d8:1b:9c:
                    c0:74:78:0e:0d:aa:8f:6e:3b:68:21:fc:89:44:15:
                    5f:aa:82:f7:da:83:c7:12:ef:83:a3:f4:18:ac:8f:
                    6d:bb:5d:09:5b:e1:27:00:e0:3d:e7:87:1a:6d:b2:
                    96:05:47:97:a0:15:11:f9:1f:a7:33:a2:09:78:e0:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:1A:C8:75:1F:69:E6:BC:49:E7:5F:1E:91:DD:5D:43:D2:C3:6F
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/T2wayHUfaea8SedfHpHdXUPSw28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3df7::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:d2:7e:a5:c7:38:29:7d:b4:85:39:e6:7a:71:fd:fa:23:
         a9:06:f6:8a:c7:99:ea:3e:f7:cd:38:75:58:74:c8:d1:c4:d8:
         c3:77:5d:bb:d1:8c:49:de:0b:1f:05:4c:86:de:6f:e6:a7:b4:
         da:b6:e1:54:31:7b:15:f1:b6:36:4e:66:ff:4d:94:7a:84:22:
         84:dc:ff:48:75:99:8a:5b:e4:c8:e4:71:77:a4:33:d8:6a:9f:
         b5:c0:da:34:1e:fa:16:20:ec:cf:66:a6:db:db:d0:87:2e:61:
         86:72:db:f7:66:a0:f9:8d:31:7f:ff:44:8c:dd:cf:fe:93:3b:
         14:d4:72:1a:09:c3:e3:44:8e:d7:bc:9b:0e:31:3f:6f:2b:34:
         b3:a5:b0:b4:05:07:a2:35:de:ec:53:d4:f3:22:28:2e:74:7d:
         f2:2d:18:32:86:3c:8c:9e:18:ad:3e:69:39:2c:e4:f2:52:8d:
         91:6e:09:c4:89:3c:6a:6d:9f:54:93:d8:0a:03:cf:c3:41:1d:
         47:5e:9a:53:a1:85:c2:38:6c:64:63:35:53:df:7d:07:20:bc:
         bd:af:3f:b3:2e:77:f9:1a:38:93:3c:dc:b2:99:9b:f7:3e:c7:
         d1:b0:a8:83:c9:11:f0:8f:f2:62:ca:7f:ac:95:0a:83:2d:c3:
         d7:80:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----