Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/8IHi3qAF6M_YZUH9bKZgMRhdjDA.roa
File:                     8IHi3qAF6M_YZUH9bKZgMRhdjDA.roa (raw, json)
Hash identifier:          xwl/E3UoYxi5Jfm9wJtBC0LoQQFx24KXiKM8/QFVBCs=
Subject key identifier:   F0:81:E2:DE:A0:05:E8:CF:D8:65:41:FD:6C:A6:60:31:18:5D:8C:30
Certificate issuer:       /CN=60eea357508922b49bdb83de6827202955d7db8d
Certificate serial:       01840F98555AC27FCC3A6EE498DE2BBEBED8
Authority key identifier: 60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/8IHi3qAF6M_YZUH9bKZgMRhdjDA.roa
Signing time:             Tue 25 Oct 2022 14:42:32 +0000
ROA not before:           Tue 25 Oct 2022 14:42:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4826
IP address blocks:        2a0e:eb44::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0f:98:55:5a:c2:7f:cc:3a:6e:e4:98:de:2b:be:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60eea357508922b49bdb83de6827202955d7db8d
        Validity
            Not Before: Oct 25 14:42:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f081e2dea005e8cfd86541fd6ca66031185d8c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:b5:82:ab:97:99:81:7a:ef:33:3f:89:a8:
                    29:45:3c:d6:01:b6:1d:f6:ab:b7:2c:47:52:ee:a1:
                    69:0b:6c:c0:af:7e:f6:b9:a4:c1:7a:bc:4d:bd:37:
                    f4:e6:cd:64:58:e0:04:00:a4:4c:4f:f7:e1:8e:50:
                    03:0c:76:4e:33:91:3b:7d:78:1d:66:f6:f5:e4:8e:
                    01:fe:00:fb:85:38:a5:6b:94:16:9a:36:78:ff:ef:
                    15:83:c2:a7:67:65:fe:a5:94:81:83:8f:01:72:b1:
                    a0:70:8c:d9:3b:61:3e:08:2c:13:25:ea:67:f1:80:
                    19:52:5a:19:50:27:c7:c0:80:58:ea:e5:80:5c:48:
                    5f:4f:3d:b1:b3:b3:6f:93:a8:fd:c8:36:a0:db:10:
                    13:f1:00:a4:f2:d6:15:0f:c4:89:cf:35:e6:b0:11:
                    cc:5a:4b:97:1d:5a:38:45:b2:0b:d9:69:a2:c0:d8:
                    bd:ad:c3:6c:b4:1d:1a:24:79:59:f3:8a:1c:f8:b8:
                    f5:fe:c6:69:94:40:d6:1d:d4:18:6f:d0:0f:74:cc:
                    7b:ed:eb:bb:73:76:4a:b8:d3:e3:c7:02:3a:55:5b:
                    b3:2b:bc:01:79:5d:d3:4d:9e:24:b6:af:5d:02:78:
                    59:37:04:23:52:64:af:b8:4b:27:00:62:ee:72:32:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:E2:DE:A0:05:E8:CF:D8:65:41:FD:6C:A6:60:31:18:5D:8C:30
            X509v3 Authority Key Identifier:
                keyid:60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/8IHi3qAF6M_YZUH9bKZgMRhdjDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:eb44::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:48:1c:4a:ee:80:b7:c5:02:9e:c3:9d:65:f9:a9:e6:26:
         39:e6:f5:83:2b:44:14:1c:86:e4:6c:26:71:b2:9c:4f:74:84:
         f8:ee:b5:0d:56:e1:25:7d:10:2a:dd:db:97:9a:88:3a:d1:dd:
         fd:5c:ca:e8:45:fd:22:33:0a:88:31:79:b7:ff:ee:ea:e7:41:
         92:b8:1b:a5:52:2e:d7:23:f1:89:84:b9:46:a9:83:d5:46:27:
         ff:08:d2:32:12:53:20:ec:84:5c:76:f9:83:af:da:6b:e0:7a:
         a8:79:3d:ed:86:7e:22:6a:82:d9:9c:4d:2a:5d:17:57:28:14:
         58:3f:a2:17:d0:91:d4:61:0c:0a:06:78:a0:3f:b4:d3:fc:34:
         cd:c1:07:62:b8:1e:6b:e5:21:61:f3:dd:91:69:1b:d6:45:48:
         b8:d6:88:5d:73:8d:c7:87:c3:c6:3f:b9:08:35:66:8b:cb:eb:
         2b:bf:37:85:2b:b3:1b:84:3d:09:cc:a1:f0:a2:62:93:31:87:
         fd:aa:19:b1:f6:6f:c1:24:6b:ec:d6:53:aa:3e:8c:6d:12:01:
         41:75:12:d0:37:27:69:aa:bf:bc:9b:16:99:ad:3a:b4:8b:38:
         25:45:eb:4d:3d:9c:26:d2:39:c8:9d:01:c8:05:32:d7:be:ad:
         e1:51:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----