Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/V8lvStC1EBsjmDbW-LuI1zc_kxQ.roa
File:                     V8lvStC1EBsjmDbW-LuI1zc_kxQ.roa (raw, json)
Hash identifier:          nOBw7Em4gzuuzT/VlbvZB5GKi6RWg4JjQn3d88vR9NE=
Subject key identifier:   57:C9:6F:4A:D0:B5:10:1B:23:98:36:D6:F8:BB:88:D7:37:3F:93:14
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       018CCA2B45935915DA867D1743B318C6018B
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/V8lvStC1EBsjmDbW-LuI1zc_kxQ.roa
Signing time:             Tue 02 Jan 2024 12:34:42 +0000
ROA not before:           Tue 02 Jan 2024 12:34:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     148996
IP address blocks:        2a0f:7880:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:45:93:59:15:da:86:7d:17:43:b3:18:c6:01:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Jan  2 12:34:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57c96f4ad0b5101b239836d6f8bb88d7373f9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:2d:6c:8d:dd:e5:d1:c4:fd:11:a0:53:6a:
                    24:41:df:2d:44:d0:64:5b:96:f1:f4:58:54:3b:e4:
                    6c:ed:4c:90:33:20:ca:1f:3e:bf:e7:db:1c:f1:7b:
                    e7:86:df:f7:57:78:f0:a8:62:2b:41:7e:88:0d:4e:
                    20:51:f9:8c:de:13:62:fe:0c:80:8b:7c:24:12:95:
                    4b:c7:09:c2:bb:2f:30:d1:08:18:db:3f:70:89:d1:
                    9f:1a:9c:32:f9:61:1c:04:01:65:bb:46:f8:a1:82:
                    24:8c:5b:f3:44:ef:9d:f1:f2:57:cb:f3:6b:0d:37:
                    19:f4:b1:b9:c8:68:1d:48:3c:db:96:22:a5:84:74:
                    f2:05:fd:5b:7a:53:d5:63:80:d4:3d:63:e7:f0:6f:
                    8b:e2:4d:b3:f3:9b:95:a9:3b:a9:7f:96:78:a5:35:
                    ea:ea:b6:89:36:04:16:8d:1b:3c:1c:61:ab:64:df:
                    36:e9:32:fa:54:a1:0d:1c:de:b9:9e:fd:a7:74:cd:
                    ef:9a:60:29:18:f7:54:c3:03:de:9f:f7:e7:57:d5:
                    6c:0a:e1:29:8c:c7:66:2f:b6:ca:ca:97:ee:53:ed:
                    d0:fa:bf:c3:86:80:bc:d6:fa:54:db:0c:82:e8:03:
                    d9:ae:67:34:36:29:be:de:94:84:4c:c1:61:16:41:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:6F:4A:D0:B5:10:1B:23:98:36:D6:F8:BB:88:D7:37:3F:93:14
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/V8lvStC1EBsjmDbW-LuI1zc_kxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7880:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:99:8e:ca:52:7f:12:36:16:b5:38:49:c9:8e:40:98:7a:
         f1:a7:31:2c:71:59:43:48:27:1c:c6:e3:20:22:63:43:dc:87:
         bb:e9:5d:d5:d1:d0:68:1e:cc:a2:44:e9:23:24:25:54:f4:40:
         0f:e4:aa:b8:be:3d:90:80:15:51:29:96:43:e7:1c:03:46:6d:
         51:34:22:30:df:bc:ff:91:2e:f9:7e:03:29:26:a8:70:ed:6f:
         57:21:6f:9b:a5:93:c8:91:94:04:bf:61:5b:4d:84:81:42:55:
         0b:49:21:a1:0f:2f:76:ce:da:67:37:88:99:66:60:4f:e2:43:
         2e:55:e7:5d:ff:f4:53:a9:f6:92:ff:c8:19:77:1b:df:27:4e:
         0c:a9:1b:5f:c6:e6:ef:53:8f:8a:fa:02:be:f7:3a:a2:e0:ea:
         c5:89:7e:3f:3a:6f:06:b8:e9:67:8a:89:f7:8d:0d:1f:5f:7a:
         ed:59:20:01:13:d7:45:ac:a1:88:52:4e:1b:67:e3:a9:35:d5:
         c8:4d:9b:f3:ba:86:6e:45:8d:9a:33:d8:32:83:dd:64:98:47:
         ef:a2:30:55:78:a0:26:f2:5d:17:79:11:fa:42:f3:24:16:c5:
         14:82:ae:1c:ce:95:15:78:9f:5d:08:22:6d:6b:93:be:b4:05:
         06:fc:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----