Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/YfP3UTZddVydeATAvZa8_JRxyhw.roa
File:                     YfP3UTZddVydeATAvZa8_JRxyhw.roa (raw, json)
Hash identifier:          CIRbMPj5TVhgnWVkvqMu0MZS197cCz0/NHWDUqeoIUs=
Subject key identifier:   61:F3:F7:51:36:5D:75:5C:9D:78:04:C0:BD:96:BC:FC:94:71:CA:1C
Certificate issuer:       /CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Certificate serial:       0185718320EB3D19845EB52DA40849579A5F
Authority key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/YfP3UTZddVydeATAvZa8_JRxyhw.roa
Signing time:             Mon 02 Jan 2023 08:04:57 +0000
ROA not before:           Mon 02 Jan 2023 08:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49413
IP address blocks:        2a02:8d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:83:20:eb:3d:19:84:5e:b5:2d:a4:08:49:57:9a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
        Validity
            Not Before: Jan  2 08:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61f3f751365d755c9d7804c0bd96bcfc9471ca1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:37:a9:62:9a:81:18:e3:6e:de:83:6d:65:
                    d6:4f:f0:9b:e7:b3:a5:c7:b8:77:3f:21:fe:f3:69:
                    4e:52:72:55:c8:5c:8f:38:c4:19:b1:d4:b9:2f:75:
                    8f:96:55:7c:c2:12:07:f5:17:ca:ed:2e:42:94:77:
                    e3:84:ce:fc:e8:89:da:1c:f6:c3:4b:6d:13:e3:0a:
                    7a:9b:ec:16:64:c7:19:f6:fa:56:c4:d2:d0:47:b8:
                    fb:88:c7:4a:d5:7f:28:66:22:bb:1d:b0:02:de:ec:
                    c7:c6:60:76:8e:25:cc:43:89:ec:07:ef:6a:56:42:
                    4f:73:44:b4:bd:df:1a:51:1c:d1:85:ec:72:91:1c:
                    13:55:42:35:98:5d:05:ae:53:ce:0e:60:8e:bb:d1:
                    82:29:8c:99:69:65:98:48:76:60:4e:b3:6c:e3:56:
                    42:b8:5a:19:f4:55:4b:4b:09:b5:fd:2f:0c:cd:70:
                    e4:7e:cd:e8:f6:d2:6c:ff:3e:ed:11:16:66:4a:0d:
                    96:04:6d:8b:31:11:a6:bf:dc:00:c2:15:9a:32:ca:
                    98:e4:54:c9:82:f4:7c:21:9f:3d:c3:36:d5:f1:1d:
                    f4:88:d7:83:45:4f:90:b6:12:f2:f6:03:0c:67:2f:
                    52:5a:bc:bb:ac:a3:a9:07:73:8a:41:e5:08:3d:bf:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:F7:51:36:5D:75:5C:9D:78:04:C0:BD:96:BC:FC:94:71:CA:1C
            X509v3 Authority Key Identifier:
                keyid:D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/YfP3UTZddVydeATAvZa8_JRxyhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:8d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:11:36:80:1a:41:f5:4a:ea:10:ec:e7:ff:c8:3c:97:d2:d2:
         80:2a:cd:e2:8f:1e:53:55:8f:8d:89:64:ca:43:27:31:7c:2e:
         99:0d:cc:33:60:8d:1e:4a:82:23:e8:61:39:9f:4b:20:54:89:
         24:b8:17:e3:c4:6f:8d:e8:20:d4:de:3b:b2:b1:4a:f0:df:fc:
         c4:33:0d:6c:58:c5:ed:47:4e:91:1b:73:09:01:61:50:7a:fe:
         54:6e:ef:d8:bc:15:50:e3:24:70:07:ee:fa:fc:02:5a:13:42:
         e0:e4:2b:a0:08:84:f3:0d:2a:07:b6:e3:a0:98:c8:52:8e:9e:
         7e:ad:ca:93:bf:6a:f6:87:88:76:73:da:66:5c:23:e5:fb:0f:
         9b:af:27:02:27:7f:ca:65:5b:f2:a4:66:97:15:20:1a:fd:61:
         3a:24:55:e2:8b:ca:7e:d5:11:92:fa:25:00:36:b3:3e:03:ee:
         ff:12:2a:e2:0a:b8:8e:43:06:12:4b:0f:48:68:45:84:79:53:
         16:e1:25:e7:38:f1:2e:71:28:48:32:9d:75:b6:d5:04:57:44:
         b3:94:1e:de:38:ae:eb:7f:54:1c:d5:9f:a1:db:d7:73:7f:16:
         9c:09:4e:fb:de:b6:4e:a9:57:36:67:df:e6:7f:cf:b2:95:c2:
         03:57:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----