Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/ByeikD4FR2d7_qTzBe3CV6N-NnU.roa
File:                     ByeikD4FR2d7_qTzBe3CV6N-NnU.roa (raw, json)
Hash identifier:          IAf9ZCDpWkjma2Rz9DCvMuCIYJfdX+88DaOsPyd/wIs=
Subject key identifier:   07:27:A2:90:3E:05:47:67:7B:FE:A4:F3:05:ED:C2:57:A3:7E:36:75
Certificate issuer:       /CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Certificate serial:       01856FF02EF32FAA6B05CD118C396A0C576A
Authority key identifier: 6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/ByeikD4FR2d7_qTzBe3CV6N-NnU.roa
Signing time:             Mon 02 Jan 2023 00:44:49 +0000
ROA not before:           Mon 02 Jan 2023 00:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47232
IP address blocks:        2a0f:fec0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:2e:f3:2f:aa:6b:05:cd:11:8c:39:6a:0c:57:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
        Validity
            Not Before: Jan  2 00:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0727a2903e0547677bfea4f305edc257a37e3675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:c3:07:15:ee:31:fe:69:eb:fc:18:70:35:
                    b1:d7:c2:90:6d:16:22:6f:07:32:8f:ea:da:09:35:
                    9d:ac:56:98:c3:d3:ed:31:09:70:4d:04:1c:a9:32:
                    92:15:70:7c:4a:48:15:75:dc:05:67:cb:0f:a4:64:
                    e7:54:4b:98:7a:13:78:a7:fc:46:da:37:f4:46:de:
                    dd:bf:92:38:4e:a1:3e:91:46:01:16:23:ae:f2:58:
                    99:5d:5c:2d:b9:3a:59:61:8c:13:9b:e6:7f:29:73:
                    48:77:1b:0c:cc:e5:11:da:0e:d8:7a:2b:a9:63:00:
                    bb:98:89:25:14:29:52:ac:89:ad:23:61:36:26:4c:
                    b4:41:f5:bb:ce:1d:5d:59:89:49:2e:7d:8f:8b:62:
                    98:45:4a:54:cc:cf:ab:e2:9e:a5:4a:14:0d:67:0d:
                    64:73:5a:0d:34:8a:e3:33:e5:21:79:2d:fd:cb:ee:
                    30:94:2f:ed:dd:1f:a5:7c:f1:5f:94:b5:c2:d3:20:
                    45:c5:1c:c1:35:60:12:b1:f0:d3:ab:02:ac:fd:d9:
                    0c:eb:2c:48:35:6c:10:71:16:6f:8a:e8:bb:da:00:
                    3a:63:61:9c:b5:35:51:38:6e:f5:90:18:58:60:f6:
                    1c:bb:75:08:e0:8e:d6:df:ff:81:93:bf:e5:60:cc:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:27:A2:90:3E:05:47:67:7B:FE:A4:F3:05:ED:C2:57:A3:7E:36:75
            X509v3 Authority Key Identifier:
                keyid:6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/ByeikD4FR2d7_qTzBe3CV6N-NnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/bslGy0-fj7Q6bY_uz8J8HCE7GQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:fec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:2c:eb:51:60:e6:6a:e2:ca:cf:98:90:cc:3d:36:93:11:
         89:c6:ce:02:a3:cc:16:c2:c9:c2:e9:89:fa:af:45:fd:17:31:
         a8:eb:b9:3b:e8:c2:b9:52:20:d3:55:18:14:36:fb:6c:5f:2d:
         92:b7:2d:06:2d:88:93:9d:aa:d3:b2:29:cd:eb:47:82:26:33:
         dc:f9:8d:14:fd:e6:5a:15:8f:fb:52:4b:88:3c:a4:26:70:2c:
         dc:b1:e0:fe:1b:43:3d:ec:02:59:17:00:0d:24:cb:2b:e4:41:
         09:36:30:59:d5:8f:3a:34:43:c3:e7:f6:d4:2a:4c:1c:f5:e1:
         14:d1:7d:ed:bf:cc:e0:9e:20:81:57:b7:6b:e2:37:a7:31:19:
         97:e0:ef:fa:b4:53:67:19:4b:f1:0f:49:41:93:11:c1:a2:f0:
         23:e9:9d:45:04:3a:8a:ab:54:01:17:3c:39:84:d5:11:21:f1:
         1e:b0:84:7d:f5:ca:63:07:65:b4:27:4a:91:9c:e8:08:e9:dd:
         a6:1c:25:e2:4a:f8:a2:43:9e:7d:5e:18:cc:2e:ec:ec:62:ae:
         77:d6:2f:aa:66:22:78:f5:3a:2f:c3:fb:05:b0:61:92:91:89:
         99:75:31:f9:49:da:55:d8:0c:c2:55:0a:ba:b5:01:75:0f:26:
         c5:92:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----