Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa
File:                     W5m5nOpftvrePRl-I-LXT1JpHSY.roa (raw, json)
Hash identifier:          d1vbiG2xaAiukwpq/F1cQ2G+G9Sh3m3aucX7Cqr3e+Q=
Subject key identifier:   5B:99:B9:9C:EA:5F:B6:FA:DE:3D:19:7E:23:E2:D7:4F:52:69:1D:26
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       01890B5FD88CA35FD7CC0577E9D55E0D6323
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa
Signing time:             Fri 30 Jun 2023 08:16:17 +0000
ROA not before:           Fri 30 Jun 2023 08:16:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        2a09:3705::/32 maxlen: 32
                          2a09:3704::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0b:5f:d8:8c:a3:5f:d7:cc:05:77:e9:d5:5e:0d:63:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Jun 30 08:16:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b99b99cea5fb6fade3d197e23e2d74f52691d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:6e:23:a3:98:ba:a8:7b:3b:03:81:5e:e7:
                    db:bc:fb:b0:d6:1a:2c:62:cf:91:7d:c4:8a:56:71:
                    01:21:56:ad:6a:d1:a0:f7:27:2e:00:b0:f9:d6:61:
                    5d:71:6f:0f:bd:1f:c9:00:24:e9:f8:22:a6:5e:d9:
                    16:d6:23:cc:bb:a7:51:3b:90:f2:69:fd:51:ff:37:
                    36:58:fc:e6:5e:9f:bf:9e:fa:45:53:78:40:c1:17:
                    e5:b7:88:94:71:07:40:e6:c0:20:44:6d:83:32:63:
                    70:66:4f:29:2e:48:bc:61:ba:b1:a3:95:90:64:71:
                    99:81:65:ee:03:ad:00:64:fa:f9:10:71:28:97:cf:
                    14:c8:94:db:c3:5e:a4:28:c4:a2:06:dd:43:5c:b8:
                    fe:e7:fa:af:1d:73:50:50:ed:ac:85:95:70:73:e1:
                    01:48:69:73:df:aa:b4:13:67:2c:1d:99:a0:f5:1c:
                    1d:aa:48:31:4e:c2:e7:f5:34:57:83:34:d9:a7:04:
                    ee:6c:24:80:11:46:2e:ad:89:80:45:12:0f:7a:f3:
                    40:89:26:e1:53:50:9d:1e:36:6f:23:89:8c:59:f9:
                    3a:45:28:03:df:cc:33:7f:4b:9e:05:55:67:17:1b:
                    e3:8f:ee:63:d7:fb:2b:03:a6:74:d7:9a:0e:7e:3f:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:99:B9:9C:EA:5F:B6:FA:DE:3D:19:7E:23:E2:D7:4F:52:69:1D:26
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:3704::/31

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:eb:a9:34:8a:e6:14:a8:e9:3d:9c:49:d1:16:e3:32:9a:
         10:be:a7:ab:be:4c:b7:36:aa:ea:c1:5d:e7:b6:a8:13:b6:3b:
         76:7f:e4:ab:89:15:24:27:66:ea:9a:7d:25:0d:02:93:db:c1:
         f2:9c:94:6f:f7:f5:e9:11:09:95:b5:3b:4d:74:38:98:26:d3:
         17:76:43:0a:03:19:8f:8d:27:b9:6f:a2:e3:cd:8a:6c:93:8b:
         ad:f6:40:63:c8:61:48:19:85:7c:7b:3d:df:9f:fc:38:54:f6:
         91:8a:f7:77:76:f1:eb:58:d0:04:ce:bf:87:5d:2c:93:3b:3b:
         1c:64:28:83:5e:bf:d3:00:83:74:35:8e:63:08:0a:d6:29:f3:
         b9:3b:6c:92:d4:5a:2a:d3:52:df:22:ca:8b:2b:66:46:08:fd:
         c5:bd:a2:d2:38:73:86:f8:af:dd:75:58:a8:33:a5:d3:9d:bc:
         87:2e:b5:5e:a4:61:87:e1:1e:09:d9:c0:c1:f4:f8:72:58:e8:
         ad:e6:ce:4c:f2:d7:b1:8c:af:20:8c:9a:68:8c:05:52:90:6d:
         5b:a7:1b:38:39:64:3b:9b:33:7a:4c:d6:01:e0:f4:9e:4e:f7:
         43:d2:7a:89:3c:2e:3a:21:2f:21:76:17:dd:d7:f3:ba:ce:b1:
         55:84:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----