Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/R1F98gGPjqCVl6rlWzM5bOJh70E.roa
File:                     R1F98gGPjqCVl6rlWzM5bOJh70E.roa (raw, json)
Hash identifier:          24Z+7G4X+8wMtR4JKAE811KO9580GBpZWQFNcFur8jw=
Subject key identifier:   47:51:7D:F2:01:8F:8E:A0:95:97:AA:E5:5B:33:39:6C:E2:61:EF:41
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F0222C3665B33B9B45240244EC1CA67
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/R1F98gGPjqCVl6rlWzM5bOJh70E.roa
Signing time:             Sun 01 Jan 2023 20:24:49 +0000
ROA not before:           Sun 01 Jan 2023 20:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:728:1808::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:22:c3:66:5b:33:b9:b4:52:40:24:4e:c1:ca:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47517df2018f8ea09597aae55b33396ce261ef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:b2:aa:5b:15:c1:17:6e:fa:ea:ef:eb:3f:
                    09:b6:fe:e9:36:54:0b:f8:24:94:9e:e8:f6:13:55:
                    46:ad:39:de:fa:af:45:e7:de:8d:14:1e:9a:88:45:
                    06:4a:85:22:6f:50:44:10:f1:38:95:14:c4:ac:25:
                    c8:f3:77:14:fc:07:79:33:7c:d3:65:9c:ba:74:b6:
                    d1:13:72:e1:9d:61:de:b5:fb:5a:99:cc:2e:f6:45:
                    fd:4b:c0:a4:25:54:9e:40:d0:89:81:30:87:39:fe:
                    cc:42:85:a1:a2:75:b8:ba:69:ce:38:08:ff:34:d4:
                    32:f9:ca:0f:f9:dc:ca:4c:c9:72:c7:68:de:6a:7b:
                    b6:21:c2:16:93:a1:4f:e6:f8:1e:d5:df:cc:cc:36:
                    27:c0:19:0d:a9:80:71:91:43:98:31:50:d6:74:93:
                    e9:5c:bd:fe:90:4d:08:ac:ab:1f:13:71:31:82:f5:
                    bb:29:00:f3:20:c6:65:38:92:2d:e2:5c:70:0f:bf:
                    0c:66:21:6a:39:08:f5:ac:5d:08:e9:e9:85:ce:fd:
                    ea:d2:1c:e0:e5:72:13:99:b8:c5:a5:57:7c:53:ee:
                    33:1e:be:df:cd:f0:4f:d1:0d:a6:0b:ac:9a:d0:ae:
                    2c:19:3a:71:73:34:6d:3d:3b:8d:30:dd:89:0d:b3:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:7D:F2:01:8F:8E:A0:95:97:AA:E5:5B:33:39:6C:E2:61:EF:41
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/R1F98gGPjqCVl6rlWzM5bOJh70E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:728:1808::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:8e:a1:a1:7d:1d:f0:26:63:d9:cd:aa:2a:1e:12:fe:8b:
         ea:41:99:5b:e0:92:1a:a0:f5:3f:a8:45:ad:52:41:4e:bf:38:
         fd:c7:2e:fb:2d:de:65:1b:79:1a:45:22:f9:fc:0f:94:80:dc:
         79:f9:e4:af:00:c6:a6:35:57:eb:cb:7a:9d:9b:1e:4c:78:cd:
         50:91:5a:d9:9e:5d:71:ce:ba:d8:eb:cd:d0:00:f5:82:0a:a6:
         2e:51:a2:03:82:5d:23:eb:ce:46:5d:12:08:ae:9a:0e:82:5f:
         c4:f9:40:97:0b:eb:93:1f:3d:a1:c5:2f:20:5e:b7:a0:bb:b5:
         59:24:20:72:9e:01:e3:3b:1c:8a:c7:cc:a7:23:5c:0b:20:44:
         b8:9e:b4:96:a1:fc:3c:a0:30:03:d0:95:ba:c2:03:e8:da:3c:
         0e:00:81:cd:c7:59:31:44:60:0d:55:5f:89:7e:f4:d7:14:b0:
         5a:16:a6:bb:b0:56:bc:09:09:e3:a5:8e:a5:47:fd:0b:53:bd:
         fc:ea:88:a2:1c:f7:89:14:4b:5c:29:b8:14:e7:de:b7:e4:81:
         c4:70:a4:04:70:ca:74:45:c0:9d:ee:a0:c5:e3:25:cb:14:a6:
         7c:fe:84:c3:7c:5c:fc:66:e8:72:1e:32:49:ce:57:ea:09:76:
         6c:5d:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----