Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/kUaC-IIEHVsHKnED40Wz_Feg7CY.roa
File:                     kUaC-IIEHVsHKnED40Wz_Feg7CY.roa (raw, json)
Hash identifier:          cq72+5vwbOpRs+qN7x0Kppu9oZaYl73e91BmjbgS/Ao=
Subject key identifier:   91:46:82:F8:82:04:1D:5B:07:2A:71:03:E3:45:B3:FC:57:A0:EC:26
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53E0A1C86C261B8139427AF779CCF7
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/kUaC-IIEHVsHKnED40Wz_Feg7CY.roa
Signing time:             Sun 01 Jan 2023 12:34:51 +0000
ROA not before:           Sun 01 Jan 2023 12:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212149
IP address blocks:        2a11:29c4:b00b::/48 maxlen: 48
                          2a11:29c2:b00b::/48 maxlen: 48
                          2a11:29c0:b00b::/48 maxlen: 48
                          2a11:29c6:b00b::/48 maxlen: 48
                          2a11:29c5:b00b::/48 maxlen: 48
                          2a11:29c3:b00b::/48 maxlen: 48
                          2a11:29c7:b00b::/48 maxlen: 48
                          2a11:29c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:e0:a1:c8:6c:26:1b:81:39:42:7a:f7:79:cc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=914682f882041d5b072a7103e345b3fc57a0ec26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:63:36:bb:36:c2:0c:3c:b4:05:51:e4:2d:
                    c2:25:2e:77:6a:b1:a9:92:38:57:90:54:c4:32:63:
                    50:48:ca:13:bb:8a:45:22:dd:d9:a8:3f:aa:2c:80:
                    ed:e8:4b:a2:ce:de:7a:c4:70:83:46:11:b0:cd:11:
                    63:1b:2b:aa:f6:4b:f5:bd:bb:37:9c:06:e9:01:40:
                    51:78:9f:bc:b4:2a:f4:25:24:47:af:1d:2c:ca:65:
                    de:82:e4:dc:ac:2b:9b:6b:eb:9c:d0:f8:ae:5d:96:
                    42:63:c9:3c:37:47:13:a0:91:a8:72:b8:3a:84:73:
                    30:7c:ea:68:25:7d:2d:fe:c4:ef:a0:f2:7d:46:64:
                    b1:c6:7f:fa:30:0b:c9:5d:91:e3:4f:2e:32:ef:15:
                    bc:d6:2f:46:a7:f9:b5:d3:43:a2:16:93:c2:1d:bb:
                    f7:c7:d4:bc:01:fd:71:9d:72:9d:a1:da:4e:71:30:
                    c1:77:b7:e4:da:ae:28:85:a5:10:c8:ff:68:f0:18:
                    c4:0c:6b:7d:54:2f:0e:e9:dd:c8:5b:c4:70:e3:23:
                    c7:55:b0:5a:ba:cf:18:f0:dd:06:2f:83:1e:7e:36:
                    5f:bc:74:c8:91:93:9a:53:e9:6b:32:8c:b9:85:e5:
                    10:da:be:0e:34:55:ba:0e:e0:65:a9:bb:f2:34:da:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:46:82:F8:82:04:1D:5B:07:2A:71:03:E3:45:B3:FC:57:A0:EC:26
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/kUaC-IIEHVsHKnED40Wz_Feg7CY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:b00b::/48
                  2a11:29c1:b00b::/48
                  2a11:29c2:b00b::/48
                  2a11:29c3:b00b::/48
                  2a11:29c4:b00b::/48
                  2a11:29c5:b00b::/48
                  2a11:29c6:b00b::/48
                  2a11:29c7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:4d:d9:31:de:e7:a1:25:c5:7c:37:6d:ab:a3:bb:5a:d9:
         7c:4e:00:bd:88:a9:d5:f2:1e:e8:9f:3d:c0:34:5b:7b:e5:4c:
         50:15:1a:f4:e8:5f:1e:60:29:7b:8d:ae:88:3f:c2:de:14:2c:
         e0:8e:6d:92:ae:0d:39:d1:81:49:1b:e6:25:fb:6f:df:38:df:
         c7:dd:be:56:be:3a:e5:ad:b8:e3:82:00:0f:95:6e:bd:ff:7d:
         ef:7a:7e:2a:8e:f7:cb:4c:88:9b:02:66:ec:d0:c2:1f:83:5c:
         7a:8d:96:f2:4e:98:52:7e:27:15:8a:48:17:e2:df:e8:cc:2c:
         7a:7a:1a:17:13:67:11:35:cc:b5:17:a2:96:56:f7:a1:17:5d:
         85:21:04:35:2f:63:4a:d0:72:af:3a:e1:08:94:a5:7a:e8:d1:
         ea:22:ba:f3:67:74:a0:d0:ae:f0:53:2d:ea:94:cc:d1:23:83:
         cc:11:d8:cd:b4:cf:50:a7:3b:ac:d6:c5:3b:f9:02:04:0e:70:
         12:90:76:43:5f:31:03:b0:1f:6d:19:bf:4c:88:5d:91:ad:f3:
         ba:92:e6:e6:c3:fc:7f:4a:d7:13:5b:4f:19:6c:a5:55:fe:52:
         f3:e0:c8:32:76:d4:16:19:14:27:c9:30:52:4d:08:2e:9d:c1:
         d3:ec:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----