Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/nzSxFMaFmDtXPyNdFQtuzCf-V1w.roa
File:                     nzSxFMaFmDtXPyNdFQtuzCf-V1w.roa (raw, json)
Hash identifier:          Dth3xoUu8Ywk+OX2P5LKa17+opTebPmVonMGxAvcB0g=
Subject key identifier:   9F:34:B1:14:C6:85:98:3B:57:3F:23:5D:15:0B:6E:CC:27:FE:57:5C
Certificate issuer:       /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial:       018CC8DEBF9696A8F698A13746AC7D541B72
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/nzSxFMaFmDtXPyNdFQtuzCf-V1w.roa
Signing time:             Tue 02 Jan 2024 06:31:30 +0000
ROA not before:           Tue 02 Jan 2024 06:31:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8767
IP address blocks:        2a01:4800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:bf:96:96:a8:f6:98:a1:37:46:ac:7d:54:1b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
        Validity
            Not Before: Jan  2 06:31:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f34b114c685983b573f235d150b6ecc27fe575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:df:0c:6e:c7:0c:3c:2d:52:e9:66:d0:0a:
                    58:23:db:cd:25:b0:27:e8:0e:fc:e8:98:0a:61:2d:
                    fe:05:f7:08:f1:b0:a4:7a:5c:1c:0c:de:50:9c:0c:
                    a3:e3:ac:4d:c3:02:34:b7:e6:b0:a3:45:f1:f3:1d:
                    6a:ee:ab:df:be:0e:59:c1:92:e7:d8:2b:53:25:b5:
                    ee:f8:e7:b6:25:4a:bb:3d:05:23:be:b9:fc:68:97:
                    e7:ee:16:21:ac:ff:b4:77:bd:8c:2b:72:4f:67:8b:
                    d0:fa:cd:ae:06:6d:82:01:bf:41:84:90:80:41:51:
                    9f:e9:f6:d7:84:dc:33:e9:fe:b3:9c:fb:5e:25:63:
                    26:bd:c8:ff:6a:3a:ba:f8:30:c2:92:44:3d:45:11:
                    20:9e:0e:e6:41:91:cf:f7:f7:17:9c:08:db:cb:62:
                    46:06:3e:fd:15:a8:01:b4:da:41:ce:84:a1:0a:b5:
                    df:ea:0f:98:29:b8:fc:aa:fc:22:9e:0f:8c:69:c6:
                    82:a9:bd:51:19:aa:44:c0:af:1e:10:f3:51:6b:dc:
                    e0:07:21:10:a9:eb:8a:27:34:0d:b7:56:f4:fc:b7:
                    2d:24:cb:6d:a7:68:b0:19:0c:fa:ce:82:b9:0d:3f:
                    ea:51:c5:6f:c2:76:ea:3d:3e:4f:66:a5:3a:9b:87:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:34:B1:14:C6:85:98:3B:57:3F:23:5D:15:0B:6E:CC:27:FE:57:5C
            X509v3 Authority Key Identifier:
                keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/nzSxFMaFmDtXPyNdFQtuzCf-V1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:4800::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:ae:6f:f8:b5:c0:f4:48:6e:3c:2d:98:8e:26:79:27:9d:
         8f:0e:98:ce:e7:8f:94:8d:3a:d2:ee:e8:44:ca:d2:2b:01:8e:
         bb:d3:40:42:f4:dc:00:d5:90:7d:1a:b7:bf:bd:f3:a8:bd:d5:
         80:90:fb:a6:8d:14:13:98:cd:8d:c2:49:6c:25:99:b3:45:72:
         08:2b:46:6c:1b:dc:9a:24:c6:28:e4:43:06:16:2e:bd:99:de:
         60:7c:a9:e1:80:46:e9:a6:20:fc:65:24:50:6c:c7:03:1b:a4:
         78:8b:8e:0e:b7:5e:77:64:bd:28:0c:a7:1c:1e:5d:a8:23:bd:
         75:fd:df:1a:8e:18:79:86:9a:67:66:70:fa:49:93:dc:a0:3f:
         ec:06:5e:dc:0d:c5:61:35:a8:8d:2b:d6:cf:13:f6:38:9c:7d:
         eb:7b:55:e1:af:22:8c:8c:2b:22:33:ef:6c:4c:b7:48:99:c9:
         b1:c1:21:f0:75:a3:8a:3c:89:a5:59:ec:b0:a8:f4:83:53:14:
         66:59:8e:86:1c:bd:b0:25:9d:3b:05:fe:1c:0a:3b:2c:54:13:
         42:43:9b:88:d3:99:a1:a1:ce:e9:0d:ab:3e:8f:43:37:59:00:
         f8:0f:69:f1:dd:d1:62:42:6b:a6:e0:fb:da:23:a2:c4:af:30:
         95:ec:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----