Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa
File:                     bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa (raw, json)
Hash identifier:          d0UmavIMZwMye2b/lu+sbTW1E2OKVTTmL9PAHFZE90E=
Subject key identifier:   6D:35:80:18:3E:BD:9B:1D:3F:D5:91:37:F5:1E:D8:27:37:65:82:94
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       018CC56E26B522076F617F4D0417E6655004
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa
Signing time:             Mon 01 Jan 2024 14:29:39 +0000
ROA not before:           Mon 01 Jan 2024 14:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212222
IP address blocks:        2a04:2b00:14cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:26:b5:22:07:6f:61:7f:4d:04:17:e6:65:50:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Jan  1 14:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6d3580183ebd9b1d3fd59137f51ed82737658294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:f0:eb:b9:d9:b7:5e:7f:25:ab:ad:87:17:
                    52:fe:ef:36:7e:25:2b:b4:51:7f:45:60:35:c6:fd:
                    1e:fe:cf:19:16:b7:96:24:57:f7:af:a0:87:bc:a6:
                    3c:80:1d:d0:3e:f8:28:4c:0c:ae:6e:eb:d7:8c:cd:
                    a2:d0:ec:c9:84:d9:2a:f1:4a:f0:18:14:d0:e4:2c:
                    ba:7b:2c:03:0b:c3:07:84:16:21:f1:76:a0:7b:2e:
                    62:93:d9:54:6e:b3:44:0c:97:c7:e9:1a:6f:e6:a9:
                    de:72:e5:a9:4e:b3:17:04:f5:2f:78:c3:ef:53:27:
                    ef:32:bd:b7:d2:78:ab:cb:0a:85:a3:e2:57:5e:3a:
                    8a:5e:11:39:c6:12:3a:83:4f:6e:54:4e:6d:62:a2:
                    b6:5b:30:c5:02:98:f2:f9:90:59:01:5e:72:37:16:
                    39:07:d3:00:99:5a:7b:21:ae:25:8b:3c:31:e7:e5:
                    a9:d1:ae:39:32:ac:ad:26:a9:a2:79:59:c2:7b:b5:
                    6d:0e:4a:73:49:0f:5f:f6:54:04:73:ed:a2:26:33:
                    33:2e:46:55:4f:3f:de:02:0d:e2:94:a6:37:51:69:
                    87:f3:44:6e:3f:12:d7:24:0c:e6:db:50:27:ed:42:
                    ed:78:c8:e0:6d:13:79:4d:47:f2:4b:2c:db:82:27:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:35:80:18:3E:BD:9B:1D:3F:D5:91:37:F5:1E:D8:27:37:65:82:94
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:2b00:14cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:d3:08:ca:47:83:01:b1:e4:de:a5:24:9d:ad:45:1e:b6:
         8b:f9:c6:e1:ad:c9:ef:64:15:ef:2c:2f:d1:74:9d:8f:06:0f:
         e1:ec:6b:73:ee:77:0e:13:02:8c:7b:c8:2c:c4:03:f1:e4:b9:
         8f:77:56:de:c6:42:d8:66:d0:65:2d:1b:b9:11:4d:75:b3:f8:
         77:2b:a1:f2:2d:b8:30:5d:cc:b1:5d:6e:11:bf:1a:14:37:b9:
         c9:ad:f1:3d:a3:9a:c3:98:43:ad:ae:89:c1:38:8f:ed:79:fa:
         1b:6b:ce:ab:78:8e:a3:10:9f:be:5d:bd:1f:8e:fb:be:57:41:
         ae:f6:6d:6c:19:79:1a:ff:58:83:12:6f:da:19:31:9a:7d:04:
         49:20:eb:49:64:49:0f:d9:3b:6d:c9:1d:78:b0:ef:28:8a:fb:
         a7:cd:f4:3d:e8:04:15:08:6f:63:f5:31:22:93:c5:e6:b4:04:
         30:28:23:a5:53:b3:25:d9:fe:e3:12:d6:76:c3:f5:28:42:d0:
         91:60:5c:71:9a:7f:79:c0:db:f9:2f:6d:ea:a6:09:6f:03:47:
         06:9e:2c:46:d0:b7:83:28:d2:9a:ce:db:ff:cc:c0:6e:3f:dd:
         7c:4c:a4:7e:41:ca:d3:94:68:64:1e:cc:e6:2a:47:a1:db:5d:
         14:3c:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----