Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/mIVYEOQn16f1jlgjz5i_SVEp3-0.roa
File:                     mIVYEOQn16f1jlgjz5i_SVEp3-0.roa (raw, json)
Hash identifier:          TebvOOZDtJKOPEfEtfrx6ODkTyF0pDcNp+E4lsX2Qio=
Subject key identifier:   98:85:58:10:E4:27:D7:A7:F5:8E:58:23:CF:98:BF:49:51:29:DF:ED
Certificate issuer:       /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial:       01856D13E37C81B327011C16FE03875A5E96
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/mIVYEOQn16f1jlgjz5i_SVEp3-0.roa
Signing time:             Sun 01 Jan 2023 11:24:58 +0000
ROA not before:           Sun 01 Jan 2023 11:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     945
IP address blocks:        2a06:a343:b00b::/48 maxlen: 48
                          2a06:a347:b00b::/48 maxlen: 48
                          2a06:a345:b00b::/48 maxlen: 48
                          2a06:a341:b00b::/48 maxlen: 48
                          2a06:a344:b00b::/48 maxlen: 48
                          2a06:a342:b00b::/48 maxlen: 48
                          2a06:a340:b00b::/48 maxlen: 48
                          2a06:a346:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:13:e3:7c:81:b3:27:01:1c:16:fe:03:87:5a:5e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
        Validity
            Not Before: Jan  1 11:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98855810e427d7a7f58e5823cf98bf495129dfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:cb:9b:e5:b9:ca:24:5e:57:e7:a5:66:e8:19:
                    16:c1:91:4b:06:d0:f6:b2:31:a7:1e:63:40:ca:7e:
                    7e:62:42:dd:ae:1f:73:2c:19:52:5d:ba:a1:3d:20:
                    d0:2c:d5:18:85:85:e2:13:9c:06:ed:62:c0:ee:51:
                    f4:e5:b7:de:ca:c3:21:a1:91:1b:b6:ba:f7:8e:de:
                    1a:04:5e:11:75:94:e2:7d:aa:b1:76:9a:fc:c5:07:
                    b6:f8:ac:1e:c7:9b:20:85:e0:c2:21:1e:c4:79:0f:
                    a7:83:77:d9:52:a8:0b:c4:3a:8b:24:f4:d6:48:10:
                    13:c2:6e:23:b8:41:11:5b:7d:d2:41:c0:20:76:a7:
                    b1:ce:54:9c:d7:69:ac:4d:c1:8c:e0:29:2b:de:95:
                    77:bd:43:cf:44:03:8c:ed:47:e9:e7:b4:dc:21:e8:
                    32:11:22:ae:c5:ff:ab:5e:13:2f:02:a6:52:bd:dc:
                    d0:9c:c4:3a:fa:46:de:6a:43:a8:58:6b:8f:81:3c:
                    ba:e2:aa:f1:cb:fa:0f:05:2a:bd:93:f8:f2:f2:b9:
                    1e:43:44:1c:a0:90:04:eb:67:c1:ec:06:f8:af:65:
                    30:a2:c7:68:8f:87:df:e3:a7:d0:0f:81:a3:9c:b3:
                    32:34:16:e4:64:94:fe:ca:21:9d:63:4f:56:af:a0:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:58:10:E4:27:D7:A7:F5:8E:58:23:CF:98:BF:49:51:29:DF:ED
            X509v3 Authority Key Identifier:
                keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/mIVYEOQn16f1jlgjz5i_SVEp3-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a340:b00b::/48
                  2a06:a341:b00b::/48
                  2a06:a342:b00b::/48
                  2a06:a343:b00b::/48
                  2a06:a344:b00b::/48
                  2a06:a345:b00b::/48
                  2a06:a346:b00b::/48
                  2a06:a347:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:99:75:9a:91:01:cf:70:bd:31:d4:ea:92:65:36:11:ea:
         20:2f:5b:1e:2e:dc:e7:7a:8f:2a:d7:bc:53:36:60:a6:99:08:
         45:7c:a3:ca:c0:5a:25:a6:29:0d:cb:27:3b:23:e6:a4:ab:65:
         34:05:19:e2:11:54:2a:70:24:c7:77:98:c2:30:d9:65:c3:b7:
         08:12:e6:21:df:d3:fd:ed:8b:d9:fe:82:00:62:92:4b:5f:db:
         32:c8:5d:a4:6e:be:78:d8:28:09:4e:b1:c6:6d:35:df:2c:dd:
         96:6f:f0:d5:3d:3b:c8:85:80:2a:e4:25:4c:eb:00:4e:0c:6e:
         8c:81:8b:23:92:84:b9:f8:34:b5:08:7a:b0:d7:d7:24:0c:7d:
         f9:bf:a9:da:b4:3b:ba:db:b8:27:f5:45:ec:53:45:93:30:aa:
         3e:c3:82:ec:ff:56:f3:92:89:f7:98:b6:94:60:ed:e2:a7:8c:
         09:94:c1:df:1b:7f:c0:25:fa:32:fb:eb:d9:d8:43:84:7a:60:
         e1:bf:f9:8e:36:a5:73:f8:42:ae:b7:d4:c7:6a:d4:1f:be:f7:
         46:a5:02:c4:9f:73:75:08:2a:c1:4d:05:a2:c4:6c:f0:84:37:
         7f:b0:80:5c:7c:4c:9d:0d:68:e9:c7:bf:6c:b7:cc:02:b1:6f:
         c1:dd:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----