Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/82JLJHDcswFlvncNYMcfUVlLUto.roa
File:                     82JLJHDcswFlvncNYMcfUVlLUto.roa (raw, json)
Hash identifier:          itr/JihMEKBH3XPZ9of72uV9V8Q5zMFsmI2hw2TurSA=
Subject key identifier:   F3:62:4B:24:70:DC:B3:01:65:BE:77:0D:60:C7:1F:51:59:4B:52:DA
Certificate issuer:       /CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
Certificate serial:       018B515EE7F45F71FD6DECF75CF194EAA326
Authority key identifier: 0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/82JLJHDcswFlvncNYMcfUVlLUto.roa
Signing time:             Sat 21 Oct 2023 08:34:16 +0000
ROA not before:           Sat 21 Oct 2023 08:34:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216139
IP address blocks:        2a03:80c0:abba::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:51:5e:e7:f4:5f:71:fd:6d:ec:f7:5c:f1:94:ea:a3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
        Validity
            Not Before: Oct 21 08:34:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3624b2470dcb30165be770d60c71f51594b52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:9e:23:9d:c3:c6:92:67:02:66:8f:3b:08:
                    77:68:7c:46:93:6e:ab:f2:da:9c:70:9f:cf:6d:2f:
                    3a:15:85:5e:35:69:8c:e8:3c:24:11:5b:47:c0:5f:
                    12:67:13:0c:bb:e3:e4:94:7d:85:c2:b3:ea:db:9f:
                    32:50:f8:df:9c:da:0a:3f:31:fb:aa:1d:db:dd:1b:
                    3e:91:89:3b:fd:e1:b3:3d:b8:d5:5e:3b:80:af:de:
                    65:ab:43:28:a5:03:0e:b6:ba:f1:b5:fa:14:91:04:
                    26:ac:f9:c1:04:b9:96:4d:39:72:c0:36:ce:a8:a7:
                    d1:a5:54:7e:68:d0:f2:9a:b5:2d:60:c2:5d:17:e0:
                    f1:aa:1e:97:d9:1c:2d:45:7d:5a:67:d9:30:a5:2d:
                    65:d0:f8:e9:5f:aa:fe:4a:97:c5:56:27:91:c6:77:
                    f7:51:3c:89:b5:53:9d:0f:5d:ad:38:b4:39:5e:5d:
                    57:69:9b:06:bd:5e:05:c8:79:54:33:45:de:7f:5c:
                    08:22:8d:68:46:17:6c:1c:aa:fd:57:7f:8d:cd:a3:
                    c7:3d:d0:73:c0:82:b6:8a:1e:17:49:d6:28:b7:73:
                    c4:36:4b:72:0e:fa:62:2c:f0:48:2b:3a:2b:7e:88:
                    41:10:03:59:a9:02:a9:e9:ae:a2:89:6e:98:b9:e5:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:4B:24:70:DC:B3:01:65:BE:77:0D:60:C7:1F:51:59:4B:52:DA
            X509v3 Authority Key Identifier:
                keyid:0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/82JLJHDcswFlvncNYMcfUVlLUto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:80c0:abba::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:25:02:47:9a:d6:30:bb:bc:5b:03:ea:74:30:d1:02:fc:
         b6:88:ae:a8:e1:03:ce:12:8c:95:8e:67:c9:03:9a:90:99:0b:
         e5:ad:55:5f:e8:84:b8:6b:f5:6d:a3:e3:27:13:9f:83:b5:c8:
         aa:fe:99:6e:e8:3e:c6:74:5c:02:64:11:3d:58:0d:ab:9b:04:
         95:92:94:6e:3f:48:86:0f:0e:0b:25:02:b8:fd:14:53:ec:dc:
         8c:72:76:3a:a6:27:ab:79:ca:34:ef:8c:5d:7e:59:df:2f:78:
         26:7e:b8:25:08:57:54:35:84:4c:56:39:84:44:53:77:29:d2:
         7c:d0:5e:8c:c1:f0:f8:2d:2a:b9:5a:ac:06:29:7b:4a:ac:0e:
         a0:1e:4c:91:2f:d8:0e:9c:e0:27:f8:70:83:ce:1d:80:43:87:
         ea:98:f9:fd:8a:b0:f6:50:db:57:eb:97:97:e3:c2:25:76:70:
         4d:4c:97:fc:85:3d:bd:48:78:d4:91:67:56:d5:42:3b:79:d5:
         fe:f5:11:17:96:bb:d5:48:ba:a2:61:f7:fa:c9:f2:fb:d3:af:
         0b:b4:32:a0:71:32:83:41:17:2c:c5:fa:cd:e2:76:b9:f0:b4:
         ed:7c:65:06:de:89:d2:1b:fe:ef:d2:b3:41:2b:93:d8:7a:ad:
         33:66:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----