Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/5_rgWnL5SLLRwgploEqyh9ZSdZg.roa
File:                     5_rgWnL5SLLRwgploEqyh9ZSdZg.roa (raw, json)
Hash identifier:          bRnHtQj5yH81gGb9GPBR68ONZFrcXTtlPqfW4uaLGj8=
Subject key identifier:   E7:FA:E0:5A:72:F9:48:B2:D1:C2:0A:65:A0:4A:B2:87:D6:52:75:98
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018BEDC6A9D24F17A569E84E39FF578CA8C7
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/5_rgWnL5SLLRwgploEqyh9ZSdZg.roa
Signing time:             Mon 20 Nov 2023 17:28:21 +0000
ROA not before:           Mon 20 Nov 2023 17:28:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216398
IP address blocks:        2a13:ef41:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:c6:a9:d2:4f:17:a5:69:e8:4e:39:ff:57:8c:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Nov 20 17:28:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7fae05a72f948b2d1c20a65a04ab287d6527598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:a6:ea:8e:bc:89:7b:59:be:da:c5:2a:77:
                    29:e8:66:11:0f:01:ae:17:52:9b:81:dd:42:ae:ee:
                    11:15:cf:81:34:a4:a2:0b:9e:cb:30:a4:92:9f:13:
                    c3:b7:bc:1d:62:ed:b4:a1:a9:76:51:1f:69:2b:75:
                    37:24:59:e5:7c:ef:2a:8a:30:b6:ce:0d:6c:d5:1c:
                    68:5e:b2:c5:d5:df:88:c6:ac:c8:45:6e:85:57:d6:
                    37:33:a5:7e:03:46:f7:27:79:14:eb:ed:64:ce:51:
                    2e:06:22:03:7d:42:2d:5d:d7:25:66:6e:9e:65:ab:
                    90:42:37:e5:3e:0c:c6:7b:0a:87:30:f7:c7:99:0f:
                    10:0e:de:f2:49:11:f4:1f:81:a1:21:cc:d2:31:6f:
                    1d:51:03:28:80:0a:06:ad:e8:85:49:53:b1:10:8f:
                    af:84:06:3d:0b:b2:4c:37:66:a8:c8:00:ff:80:2d:
                    8f:13:74:76:88:93:4f:09:49:04:69:15:21:a8:0c:
                    40:3b:78:60:d6:07:09:e2:d5:4c:85:25:72:f1:1a:
                    2e:32:50:95:7a:87:8e:01:9a:de:60:f8:e0:71:7f:
                    0a:e5:86:55:82:6b:19:6d:a8:ba:a7:36:dd:64:9e:
                    b7:0a:60:dd:31:fa:e5:b7:22:72:2f:64:60:bf:96:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:E0:5A:72:F9:48:B2:D1:C2:0A:65:A0:4A:B2:87:D6:52:75:98
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/5_rgWnL5SLLRwgploEqyh9ZSdZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:25:8f:27:5c:26:cb:6e:65:c3:59:c8:b0:cf:9f:64:0c:3f:
         f0:ba:21:52:3a:74:e9:36:4e:29:71:e4:3e:b3:2c:62:e4:1d:
         17:e5:98:a0:d6:c5:9a:c8:c3:05:45:b8:29:92:5a:76:71:46:
         e1:f8:41:9a:36:7a:4b:6a:92:80:15:d9:76:cb:17:df:d7:b0:
         0d:d7:aa:d7:7f:dd:5a:be:26:54:41:a0:69:7a:89:b4:42:15:
         f7:89:b3:1a:e0:68:86:90:bc:22:8a:05:16:57:0a:2b:d3:0a:
         9a:69:c8:97:08:5a:85:b7:aa:56:58:9a:dc:44:1a:26:c6:fb:
         fc:9d:a7:b3:71:f1:18:6b:9b:d7:02:c3:ae:f1:86:dc:e8:86:
         b5:4d:2c:2c:13:0c:5d:fd:56:d1:61:8d:74:4c:af:a1:54:84:
         98:c4:cb:30:d7:fb:64:4d:6c:83:bf:4e:06:0e:4e:12:e3:25:
         2c:a6:82:f0:7a:58:06:69:c2:09:a5:a2:f2:af:58:d1:f5:31:
         51:3f:00:f7:ef:a8:4c:5f:2b:51:f8:21:ac:eb:be:4e:5d:be:
         6f:a6:a3:ba:f4:b1:3c:a3:d0:ca:3a:32:12:b7:03:17:41:f8:
         80:36:68:68:aa:79:25:40:b6:34:d7:69:4b:9b:74:b3:70:62:
         a5:56:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----