Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5hIe8vxqgIgStICnkxkw1Sv4Hno.roa
File:                     5hIe8vxqgIgStICnkxkw1Sv4Hno.roa (raw, json)
Hash identifier:          DHmjAqmu2nq+VVgqJN9RjleJgCDHIgINgnP49Gc9EK8=
Subject key identifier:   E6:12:1E:F2:FC:6A:80:88:12:B4:80:A7:93:19:30:D5:2B:F8:1E:7A
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018CC6B89509E12BEF4F7E1E33482C77AC52
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5hIe8vxqgIgStICnkxkw1Sv4Hno.roa
Signing time:             Mon 01 Jan 2024 20:30:34 +0000
ROA not before:           Mon 01 Jan 2024 20:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212423
IP address blocks:        188.93.247.128/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:95:09:e1:2b:ef:4f:7e:1e:33:48:2c:77:ac:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  1 20:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e6121ef2fc6a808812b480a7931930d52bf81e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:72:84:7f:e3:c0:8f:8d:7a:4b:c5:c3:1d:
                    f2:da:51:b9:a1:7f:a5:56:31:d4:c4:7d:da:60:58:
                    39:8a:da:11:1c:17:3b:cb:18:ba:f4:df:c9:c4:f3:
                    2d:82:a7:90:6d:bf:4c:06:d1:fa:b6:b6:cd:92:40:
                    f1:9b:ca:01:50:19:8e:34:e1:db:9e:6d:e8:fe:9f:
                    25:49:bd:62:4a:3b:44:91:1f:36:db:7c:d2:1c:77:
                    00:0f:1d:e0:df:bb:70:9f:b2:27:d5:58:78:a8:28:
                    26:09:91:b1:af:16:c1:d2:bb:e1:2e:03:08:68:d1:
                    42:98:c4:5a:c5:c8:0c:7d:09:ca:d3:32:f0:b4:6d:
                    69:db:6c:57:1c:a2:77:e8:e2:0a:03:27:98:98:71:
                    6a:7c:ae:98:b7:07:d0:bc:2a:24:76:42:aa:b2:96:
                    2c:e5:5a:e9:87:27:ee:d9:19:15:b9:41:7c:d1:e6:
                    0a:7f:aa:5d:71:4d:ee:bf:5e:d9:9c:22:03:91:2a:
                    05:85:ba:e9:bd:38:58:d1:23:5f:3d:a8:71:34:7f:
                    b9:91:c8:ed:79:48:72:33:ad:f2:fc:ab:77:6e:da:
                    8e:0a:43:48:79:61:bf:c7:77:35:e3:5e:81:85:a7:
                    c2:6b:0f:0a:ad:7d:66:7c:d9:ec:43:12:60:d3:5d:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:1E:F2:FC:6A:80:88:12:B4:80:A7:93:19:30:D5:2B:F8:1E:7A
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5hIe8vxqgIgStICnkxkw1Sv4Hno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.247.128/28

    Signature Algorithm: sha256WithRSAEncryption
         44:0f:00:db:97:75:bf:f3:ab:44:d3:ca:22:e3:27:0f:cc:6b:
         bb:ae:75:17:0a:6a:aa:22:c3:05:df:f3:d1:e6:3e:df:02:e5:
         59:28:e8:b2:c4:94:78:87:1b:2f:14:2b:93:fd:57:3f:25:f1:
         50:45:f4:f6:47:29:0e:56:2f:a6:f5:b4:b0:1a:3b:3b:fa:42:
         fa:a1:83:90:11:56:0e:0b:15:a8:47:71:f3:43:97:d4:a7:c9:
         d7:84:43:c4:c6:23:b6:bb:6b:9a:a5:93:74:04:44:a9:9a:65:
         39:a5:a5:8a:83:08:50:2c:11:5e:bf:59:59:df:e0:eb:2a:4c:
         8d:be:a0:82:7b:41:46:a6:c4:db:6f:9f:21:60:46:f1:9d:12:
         e1:e0:e6:1c:9c:50:e5:ff:e8:75:85:c1:5b:73:41:05:f3:63:
         9a:50:d8:ec:a9:18:68:26:03:ad:7c:db:88:9a:f3:bf:cf:56:
         0c:82:24:f1:bf:cb:de:9d:8a:10:31:43:43:3f:ca:98:7d:7b:
         0a:a7:38:0b:0b:01:22:48:be:d1:31:70:8b:10:27:8f:0f:44:
         9a:e1:97:76:cf:a7:78:6c:d0:9c:d9:2b:d0:26:8e:d9:5d:11:
         6a:d5:7c:04:2d:30:78:e0:53:9d:90:2d:b0:74:1c:70:d1:f9:
         13:f6:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----