Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/LfpMWinqt9Y3WU-XTOl2O16i4iM.roa
File:                     LfpMWinqt9Y3WU-XTOl2O16i4iM.roa (raw, json)
Hash identifier:          pIXOwPkTLpp2Cl7q2Vb1jTJh7adotp0FSzXMETsriFQ=
Subject key identifier:   2D:FA:4C:5A:29:EA:B7:D6:37:59:4F:97:4C:E9:76:3B:5E:A2:E2:23
Certificate issuer:       /CN=6baf3b452946e4950993c3ca78e24fc455b37379
Certificate serial:       018572CCC64647C0286B3DCF764998521908
Authority key identifier: 6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/LfpMWinqt9Y3WU-XTOl2O16i4iM.roa
Signing time:             Mon 02 Jan 2023 14:05:00 +0000
ROA not before:           Mon 02 Jan 2023 14:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59729
IP address blocks:        176.103.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:cc:c6:46:47:c0:28:6b:3d:cf:76:49:98:52:19:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6baf3b452946e4950993c3ca78e24fc455b37379
        Validity
            Not Before: Jan  2 14:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dfa4c5a29eab7d637594f974ce9763b5ea2e223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:04:07:de:33:65:c9:88:3f:be:f8:74:5e:
                    22:31:69:e3:f9:2b:c3:8a:22:ce:ec:91:dc:2b:aa:
                    5d:91:d2:b0:b3:79:9e:6a:27:44:02:11:4e:6c:43:
                    04:fd:39:f0:72:05:06:6f:23:02:f8:b3:00:03:34:
                    a7:7a:bc:d9:05:77:d1:26:36:b7:2f:1c:76:de:97:
                    78:66:5e:62:c2:f4:de:57:aa:30:fe:20:61:3f:a2:
                    cc:e6:e6:23:b8:4b:2f:0c:69:7e:c7:78:0b:1f:dd:
                    d1:ac:92:4b:00:f8:48:44:55:40:a0:d4:bc:a8:0c:
                    58:d9:65:93:ec:c5:51:cf:e3:e8:ae:f6:48:4f:74:
                    b4:57:fc:ed:be:9f:ed:3a:45:81:38:de:92:ee:bc:
                    22:d0:f4:45:05:68:c5:af:0e:ae:b1:9f:93:0f:90:
                    1d:24:73:82:d2:ea:5b:5c:04:b1:61:fe:02:49:d2:
                    4a:73:5b:fb:59:24:89:64:a0:4a:40:d1:02:51:f3:
                    08:3e:d0:dc:f7:03:f5:51:ec:d7:67:ee:01:13:e4:
                    d1:75:66:4b:75:71:cc:b4:71:c1:f9:78:b1:2f:31:
                    9b:b2:b3:2d:c4:54:96:df:73:62:16:7b:80:49:e1:
                    a6:a4:18:3b:2d:5b:de:60:08:f8:04:50:d5:dc:c6:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FA:4C:5A:29:EA:B7:D6:37:59:4F:97:4C:E9:76:3B:5E:A2:E2:23
            X509v3 Authority Key Identifier:
                keyid:6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/LfpMWinqt9Y3WU-XTOl2O16i4iM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/a687RSlG5JUJk8PKeOJPxFWzc3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:3c:c7:a1:d3:6a:90:b3:5d:01:ee:17:ac:cc:25:26:4d:
         87:ed:64:3c:c1:a9:8d:fd:27:1a:19:2d:7d:37:f7:f5:23:55:
         b6:69:e6:1f:88:34:cc:3a:f6:ab:f2:d9:04:9c:51:88:4e:ff:
         fc:84:01:40:6e:be:f8:70:5d:f3:71:d6:7f:18:6d:6c:5d:be:
         4a:35:eb:e7:e9:f1:4d:bd:74:be:18:b1:2c:b7:2c:bd:e9:cf:
         4c:09:5b:f9:50:7f:5a:e9:80:55:f2:72:cb:9c:fb:47:93:d0:
         a6:54:e3:57:07:6b:0f:5b:6c:07:51:98:b4:64:6b:6b:e5:24:
         14:73:8c:12:00:0f:70:e8:b9:9c:2b:b3:e4:13:21:d9:76:b7:
         6b:c7:5a:a0:a6:64:6f:82:42:b3:58:14:fb:0d:6b:ac:bd:63:
         2e:82:4a:23:3c:c7:e2:a9:be:84:40:85:de:78:eb:3e:71:19:
         d7:e4:3f:b7:6f:db:1e:dd:3e:15:39:c6:c0:05:f0:4f:43:d8:
         b8:32:bc:13:8f:d9:92:6c:af:ee:33:db:e8:41:15:6e:20:bb:
         c8:c0:f1:d7:c0:4d:42:4f:2c:b7:5a:87:64:74:40:04:f2:4d:
         ac:62:00:eb:d9:72:ba:fb:2e:3d:75:46:ab:6b:bc:d0:f0:84:
         07:0a:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----