Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/d8QE8LxERPthoe6kqHWle846Tzo.roa
File:                     d8QE8LxERPthoe6kqHWle846Tzo.roa (raw, json)
Hash identifier:          0m+FFMlaLZrwMOENfd9QzCnOyw2kMos0BooOAkV60ck=
Subject key identifier:   77:C4:04:F0:BC:44:44:FB:61:A1:EE:A4:A8:75:A5:7B:CE:3A:4F:3A
Certificate issuer:       /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial:       018635D2A655E7B18F5ABF0CED26CF7B79E8
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/d8QE8LxERPthoe6kqHWle846Tzo.roa
Signing time:             Thu 09 Feb 2023 10:57:22 +0000
ROA not before:           Thu 09 Feb 2023 10:57:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a13:a700::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:35:d2:a6:55:e7:b1:8f:5a:bf:0c:ed:26:cf:7b:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308e4f050668d45e3918384500b175a87680199c
        Validity
            Not Before: Feb  9 10:57:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77c404f0bc4444fb61a1eea4a875a57bce3a4f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:78:47:4f:a7:08:56:13:d3:8c:98:15:9c:
                    b2:46:22:10:ed:0f:08:a6:46:f6:a0:58:1b:24:2b:
                    7b:da:76:85:60:29:e9:e9:2d:73:c6:4f:9c:2f:b4:
                    ca:a9:88:ec:1e:88:1d:ac:32:e7:3d:6f:2a:0b:0d:
                    ce:b5:46:e9:47:c9:71:1d:45:a6:fc:6a:ab:e6:a0:
                    8c:f3:10:18:07:80:e2:70:ae:cb:31:79:cf:d3:01:
                    6e:5b:b0:51:86:29:74:b5:fb:63:cb:7d:14:d7:a2:
                    ed:fe:0c:7a:93:b8:18:99:ca:aa:61:fd:91:79:f5:
                    b1:c9:1f:9e:c9:07:02:c6:1e:4c:4d:9d:05:bb:1f:
                    9f:1c:ac:38:c3:28:66:c4:2c:22:3c:d3:80:64:ae:
                    c4:a6:4f:4f:33:4f:ea:14:3c:46:12:ac:46:64:3c:
                    9b:15:60:e6:5b:ce:22:c6:50:68:76:b2:5d:7e:1e:
                    50:c6:3b:70:6a:5a:af:53:bb:a9:d0:32:ed:a9:48:
                    d9:c6:1f:f0:df:e8:82:f5:2f:7a:00:a6:b2:76:0d:
                    a1:fe:6c:0d:d1:34:6f:6d:e6:42:01:3b:e7:f5:d4:
                    e2:8e:35:4a:6a:88:fd:29:c5:9b:d1:39:52:16:dc:
                    b9:21:ad:b7:35:8e:48:ce:e4:56:4f:d5:d2:c7:89:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:04:F0:BC:44:44:FB:61:A1:EE:A4:A8:75:A5:7B:CE:3A:4F:3A
            X509v3 Authority Key Identifier:
                keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/d8QE8LxERPthoe6kqHWle846Tzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a700::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:35:60:5f:f3:12:39:62:36:c1:20:61:7f:e9:09:42:4a:
         73:54:ba:e5:2a:f9:06:a1:11:25:d2:16:53:26:48:81:78:f6:
         d1:40:36:01:9d:72:5e:19:04:82:92:04:46:42:08:16:05:95:
         f3:71:d7:a5:53:da:d8:c1:e9:e0:66:c2:41:54:85:f7:e5:3d:
         8c:40:df:76:cb:06:13:d1:04:8e:57:e1:54:87:b7:e7:bd:e4:
         6a:4b:df:f6:eb:b0:ff:1e:43:e4:d8:53:df:79:16:3c:5f:b2:
         13:b1:ff:9d:2e:20:ce:e4:97:f8:15:a7:53:78:9f:4c:a6:9a:
         d8:9a:67:07:5a:13:fb:96:dd:1f:c0:43:85:2a:b2:42:d9:fe:
         ee:2c:62:11:ba:9b:53:c7:ae:07:b4:e4:49:51:6a:88:1f:5e:
         b9:10:c5:89:77:df:34:e0:12:39:fc:d7:98:10:81:83:d1:f9:
         e5:9c:b4:96:b8:32:64:00:84:03:91:7f:e7:33:d7:33:5a:c0:
         bf:fd:bf:96:d6:a3:41:c9:d8:7c:41:89:1b:6a:24:7e:b9:2c:
         d7:53:71:6d:92:e7:3d:7c:ab:28:98:ce:b9:e1:f6:10:08:74:
         bd:17:fb:b6:39:ac:0e:e4:9b:b6:11:19:33:dc:d5:63:6d:f5:
         d2:e0:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----