Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/0jYd2xmmmTUZkgDg3mdK3Sd02tE.roa
File:                     0jYd2xmmmTUZkgDg3mdK3Sd02tE.roa (raw, json)
Hash identifier:          IkULFlaDcJQ1KuUeuddqOA5ar5fSrpaNFXSBH0DvrrQ=
Subject key identifier:   D2:36:1D:DB:19:A6:99:35:19:92:00:E0:DE:67:4A:DD:27:74:DA:D1
Certificate issuer:       /CN=9c11139ae553d6dc7307887f467e4207880045eb
Certificate serial:       05B3910E
Authority key identifier: 9C:11:13:9A:E5:53:D6:DC:73:07:88:7F:46:7E:42:07:88:00:45:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBETmuVT1txzB4h_Rn5CB4gARes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/0jYd2xmmmTUZkgDg3mdK3Sd02tE.roa
Signing time:             Sat 01 Jan 2022 02:54:29 +0000
ROA not before:           Sat 01 Jan 2022 02:54:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43833
IP address blocks:        2a00:4b80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95654158 (0x5b3910e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c11139ae553d6dc7307887f467e4207880045eb
        Validity
            Not Before: Jan  1 02:54:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2361ddb19a69935199200e0de674add2774dad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:ba:90:55:97:ea:ad:aa:f3:69:0f:69:7e:
                    39:38:cd:ca:be:b1:16:d0:13:a7:76:e9:36:7b:cc:
                    d3:aa:55:ec:20:1d:46:65:33:b5:bf:33:3a:5a:fb:
                    68:a8:f1:ba:7a:8b:75:02:f1:22:c9:e6:da:44:e0:
                    d9:54:4c:15:fa:1a:98:b7:77:3b:d2:fa:51:2f:c8:
                    4d:a6:cf:a3:25:a4:81:cf:a2:a5:19:d7:14:f6:d1:
                    4c:05:8d:0b:56:ea:4c:f8:94:cd:9c:71:a1:bb:bd:
                    ee:03:4e:23:de:8c:91:ab:1b:cb:89:13:a8:cd:90:
                    9e:1e:8e:a6:19:84:9b:44:7d:e5:c3:6d:2e:37:c3:
                    5c:03:5e:51:d9:37:f5:2c:ca:90:4b:90:6f:03:86:
                    54:d2:64:01:a3:42:85:b8:83:a5:ca:7a:1c:32:1a:
                    0c:17:3f:fa:a3:86:6b:6a:57:fd:93:11:83:b2:61:
                    25:d7:b5:27:49:5a:75:df:dd:13:06:ea:85:0b:26:
                    12:a3:dd:b1:1e:ff:4d:a6:c9:12:76:4a:b8:43:13:
                    e6:f1:79:12:3e:dd:ce:65:69:72:4d:ec:05:1e:7d:
                    91:6c:d2:12:ff:a4:a2:16:07:9a:66:1e:d5:33:ad:
                    d0:af:3e:62:05:8a:bc:b8:6f:7f:2a:fd:73:b9:0f:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:1D:DB:19:A6:99:35:19:92:00:E0:DE:67:4A:DD:27:74:DA:D1
            X509v3 Authority Key Identifier:
                keyid:9C:11:13:9A:E5:53:D6:DC:73:07:88:7F:46:7E:42:07:88:00:45:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBETmuVT1txzB4h_Rn5CB4gARes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/0jYd2xmmmTUZkgDg3mdK3Sd02tE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/nBETmuVT1txzB4h_Rn5CB4gARes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:4b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:1e:c5:54:a7:16:8d:ed:d7:96:b5:ab:15:1d:c3:5b:17:
         1c:d6:ec:26:8e:7a:a9:fb:e1:b1:bf:7b:9d:35:8e:62:06:be:
         39:fe:07:1b:21:03:55:07:3f:87:31:46:34:ce:79:e8:c6:32:
         1a:cb:cd:d0:46:01:d1:7b:5b:fb:21:dd:8a:f2:2c:63:bc:b8:
         c0:83:53:88:fe:69:18:fe:64:e7:5a:f6:7c:20:76:f6:98:c5:
         46:cc:f6:ca:cd:2a:ed:39:21:20:0b:d9:77:79:2a:6c:c4:2f:
         33:af:ba:ce:b4:0f:5b:b0:5d:0b:17:fa:71:61:83:4c:a7:52:
         09:77:d1:87:cd:e9:3e:de:d3:c2:12:93:fb:93:91:15:48:eb:
         6b:38:e7:40:a7:c2:93:b3:a6:98:e2:c2:ea:e7:85:b6:5e:ea:
         42:0c:0a:bd:08:5a:c1:95:92:fa:9d:3f:2b:1c:fe:ff:a0:a5:
         a0:af:4e:1e:66:90:3d:ee:2a:49:f2:bb:d3:0c:d3:86:c1:5b:
         7b:14:be:ee:3d:1f:33:d5:ae:f5:ab:f1:84:96:80:a0:24:31:
         0f:7d:95:0b:4e:fc:f0:ce:e4:d5:f8:c1:6a:55:cf:4b:10:79:
         83:f4:61:27:9f:b3:5a:01:16:ac:fa:8d:10:52:54:ea:d3:44:
         59:9d:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----