Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa
File:                     ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa (raw, json)
Hash identifier:          An6NxEH4Gy1tdsLpWghymCBFCDnYQxT94KoiHT8wnhM=
Subject key identifier:   65:3B:0D:0B:95:44:85:99:9F:D4:55:A1:0C:CC:F6:DD:2E:14:35:2C
Certificate issuer:       /CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
Certificate serial:       01856C6F037456B2CE9B705D8C7C98DABF78
Authority key identifier: A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa
Signing time:             Sun 01 Jan 2023 08:24:52 +0000
ROA not before:           Sun 01 Jan 2023 08:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39080
IP address blocks:        2a0d:f47::/32 maxlen: 128
                          2a0d:f40::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6f:03:74:56:b2:ce:9b:70:5d:8c:7c:98:da:bf:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
        Validity
            Not Before: Jan  1 08:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=653b0d0b954485999fd455a10cccf6dd2e14352c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:ea:c2:48:0d:24:7d:81:a5:19:15:2c:93:
                    cc:33:7c:80:f3:c7:d4:b3:ac:af:ca:ec:78:24:ed:
                    86:02:50:91:85:98:1f:1f:dc:68:c5:3f:2e:88:b8:
                    6b:f8:13:0f:69:d6:6b:bf:ab:b2:9f:18:0a:56:f5:
                    30:d4:bc:6f:e9:95:8b:a4:0a:0a:92:5c:a2:c5:b7:
                    08:09:dc:d6:03:98:dd:af:a5:3d:0a:93:94:e2:66:
                    db:48:fa:11:8d:ec:e1:a7:ce:71:84:83:83:0e:65:
                    d8:a7:07:3e:40:ae:44:e3:0d:b2:4e:91:3d:6a:4e:
                    b0:70:fb:de:bc:c0:1f:cb:ff:13:2a:a5:9f:fd:58:
                    29:59:df:82:1f:1f:9e:32:ef:59:d5:96:fe:98:fa:
                    39:4f:6f:80:26:15:f7:ff:aa:fb:f5:db:e9:a8:e1:
                    79:26:10:1a:73:70:38:43:5c:69:33:b5:e9:0f:fc:
                    24:92:29:8b:e5:54:40:19:01:34:1e:5c:e1:47:de:
                    4a:b9:5a:1d:d5:c9:69:23:6e:ad:4c:e9:90:27:f9:
                    52:52:ab:1a:54:73:5d:26:ad:4f:5a:d3:13:06:93:
                    df:d8:a1:5e:c5:c7:4e:6b:e5:c6:b5:86:6b:5b:da:
                    f4:c0:4a:a0:a5:cb:88:49:5d:12:84:70:0a:70:6a:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3B:0D:0B:95:44:85:99:9F:D4:55:A1:0C:CC:F6:DD:2E:14:35:2C
            X509v3 Authority Key Identifier:
                keyid:A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/pPCloPFpOpdC1_qvT4_RfoHMKrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:f40::/32
                  2a0d:f47::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:a1:f1:b1:ca:14:61:08:82:e8:bc:57:aa:ca:d7:66:76:
         5b:1b:dd:6a:39:8a:b2:c8:93:4e:85:56:a3:48:7a:4e:12:86:
         71:0f:50:a6:75:d6:b7:e0:c9:11:71:4c:af:ef:b9:b0:fc:ff:
         08:60:5d:3f:e7:ac:8f:70:8f:5d:58:85:16:9d:e0:10:4e:b3:
         a5:b7:0d:43:35:f9:07:cc:11:c7:a1:c6:91:15:c9:53:91:8d:
         a3:9b:f6:6a:c6:7c:88:5b:53:9a:bb:e5:d4:53:2c:26:1e:d4:
         5b:52:eb:6c:a9:88:2f:76:fa:14:f5:df:52:10:fd:2c:42:1c:
         10:5b:db:ec:ea:cd:00:ea:ed:f6:66:99:08:18:64:fd:71:2e:
         9a:f2:eb:63:7f:6b:c3:0d:ff:fc:62:49:f5:34:00:2c:26:2d:
         64:67:cd:2f:a0:a0:4b:ea:df:81:1b:91:2b:58:9f:22:7b:7f:
         f3:f3:36:b1:91:07:88:ce:b8:44:9f:92:aa:6c:a9:4e:73:50:
         0a:1a:00:a1:f0:c4:0a:c6:5a:91:85:7e:9d:7c:3f:3a:2c:c0:
         d2:78:23:03:dd:cb:ce:e9:67:ad:06:0a:10:f1:33:73:1e:1c:
         71:11:8f:e6:6d:67:ae:94:36:65:b2:8a:dc:37:ad:86:67:fa:
         4c:52:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----