Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/vzhRSRT0i2gSZ5AdHjjp1u356b4.roa
File:                     vzhRSRT0i2gSZ5AdHjjp1u356b4.roa (raw, json)
Hash identifier:          smHVAf3e7QmjiK1z0yZj+Loku3oxSUrLdjmss+HVmQw=
Subject key identifier:   BF:38:51:49:14:F4:8B:68:12:67:90:1D:1E:38:E9:D6:ED:F9:E9:BE
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       018CC500F6B8E4E2D932AE3322341B837F6E
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/vzhRSRT0i2gSZ5AdHjjp1u356b4.roa
Signing time:             Mon 01 Jan 2024 12:30:23 +0000
ROA not before:           Mon 01 Jan 2024 12:30:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199614
IP address blocks:        2a13:a280::/29 maxlen: 29
                          2a13:a280::/33 maxlen: 33
                          2a13:a280:8000::/33 maxlen: 33
                          2a13:a281::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:f6:b8:e4:e2:d9:32:ae:33:22:34:1b:83:7f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Jan  1 12:30:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bf38514914f48b681267901d1e38e9d6edf9e9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:9e:c8:52:36:46:5a:61:a5:51:7b:10:4a:
                    f7:7d:96:72:98:ed:e6:df:9e:07:67:f3:4b:79:39:
                    a0:3d:be:86:ce:7e:ba:dc:61:75:7d:23:16:2b:16:
                    1d:e6:53:91:6e:c3:94:ac:9e:69:64:e0:87:3a:51:
                    08:9a:7b:a1:fa:00:f4:03:40:2c:ae:f3:78:4d:53:
                    65:30:55:83:6a:c5:c0:e0:e5:b1:c7:8a:cf:df:1d:
                    7a:32:bd:6b:f5:e0:ef:48:ed:9d:f5:15:b0:d3:40:
                    ab:d5:5e:11:8c:11:ce:02:9a:f3:71:a1:87:ea:3c:
                    b9:42:c4:b0:11:16:fb:c2:7c:ff:ad:57:5d:e1:07:
                    27:e9:9f:2a:0b:8e:04:96:7a:12:f0:9a:cd:1b:a2:
                    a5:34:5a:35:82:3c:64:df:65:9a:5c:a6:e9:dd:45:
                    b0:45:ca:b8:2a:bc:02:f0:31:81:ac:b5:1e:7a:da:
                    f6:2b:2f:b8:61:db:f6:7c:9e:5b:43:b0:d9:6e:7e:
                    5a:14:51:7c:63:ea:c9:c2:43:a9:8a:bc:17:fa:54:
                    25:07:12:ac:fa:7a:6f:29:fb:35:cf:83:11:18:5c:
                    0b:45:be:47:7f:c9:f9:22:97:7d:23:e3:19:32:f6:
                    9b:a9:72:26:4a:20:9d:c9:91:cf:ce:23:aa:0d:ff:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:51:49:14:F4:8B:68:12:67:90:1D:1E:38:E9:D6:ED:F9:E9:BE
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/vzhRSRT0i2gSZ5AdHjjp1u356b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a280::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:18:28:a6:23:3e:2e:2f:2d:0c:22:9c:9c:9f:d4:f8:93:9f:
         21:77:0d:8c:26:c1:fc:cd:3d:94:aa:77:5f:48:2c:20:02:53:
         ec:1e:0b:58:18:c7:39:14:4a:82:95:d7:98:34:a7:77:98:fd:
         4e:1e:8a:2d:85:34:e3:17:16:47:83:84:c1:c8:67:89:d8:1a:
         27:2c:14:08:4d:74:dd:c9:ba:b0:95:8e:b8:f0:d2:8f:fc:69:
         33:77:d7:0e:0a:26:48:e0:78:35:75:df:65:96:b6:48:a9:aa:
         a6:18:46:d1:26:ac:68:6c:f1:19:21:8f:d8:20:88:7e:58:62:
         a9:fe:eb:14:55:f2:02:10:f7:64:f7:00:7f:e3:ba:11:36:e5:
         54:03:f7:96:60:7c:2c:8d:80:cb:1d:66:e4:8f:92:7b:91:96:
         87:8f:35:98:f9:53:6c:53:c9:ae:3a:60:50:ae:1e:c1:ad:36:
         07:25:5b:13:4f:1c:72:d9:07:90:08:50:7d:d2:78:4c:58:5f:
         9b:76:b1:7a:6f:f7:81:29:97:6e:c4:03:ee:5c:e9:4b:78:20:
         fa:02:49:46:35:83:31:1d:d1:80:ad:32:2f:ab:14:d3:65:84:
         5c:51:79:0d:d6:ba:46:43:1f:35:17:7f:4e:b9:09:db:d8:e9:
         9f:24:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----