Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/FL8wQCmuHoQmNxe8Q6cjxUmr-AI.roa
File:                     FL8wQCmuHoQmNxe8Q6cjxUmr-AI.roa (raw, json)
Hash identifier:          4fKfsXZpAEgPcOwFUtNrLMAUX5XdoVg/rAT+OLbjHLY=
Subject key identifier:   14:BF:30:40:29:AE:1E:84:26:37:17:BC:43:A7:23:C5:49:AB:F8:02
Certificate issuer:       /CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Certificate serial:       018ACC47E08BDFF9A07A4C557F9AB250DB3D
Authority key identifier: 54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/FL8wQCmuHoQmNxe8Q6cjxUmr-AI.roa
Signing time:             Mon 25 Sep 2023 12:19:37 +0000
ROA not before:           Mon 25 Sep 2023 12:19:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212817
IP address blocks:        2a13:ee47::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:47:e0:8b:df:f9:a0:7a:4c:55:7f:9a:b2:50:db:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
        Validity
            Not Before: Sep 25 12:19:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14bf304029ae1e84263717bc43a723c549abf802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:79:ce:07:da:08:88:11:4e:4e:b5:c0:d2:
                    0a:4f:c3:a8:ee:37:d6:bb:b9:ce:0b:45:2b:62:43:
                    de:ec:7e:c6:3d:ea:92:4b:48:56:09:4f:7d:da:ec:
                    d3:72:46:ac:5e:20:42:7d:00:50:16:65:06:0f:aa:
                    3a:eb:14:3a:cc:d4:02:b7:f2:98:4a:6a:cd:4e:a3:
                    a6:cb:2c:2f:ba:60:bf:c4:e9:7d:e0:01:1b:7e:9b:
                    fe:34:a0:39:bc:6b:2c:71:0b:08:56:12:30:3c:de:
                    63:a9:86:6f:37:81:b4:5c:28:22:6a:70:44:b8:1e:
                    a4:2c:e2:68:48:34:2b:39:df:b2:1c:a9:cf:79:26:
                    86:b4:82:da:f7:d2:d7:f4:ec:9e:5f:32:62:0c:46:
                    f9:97:ba:7c:33:0f:4d:db:dc:c9:bc:d8:c6:78:51:
                    82:9e:f7:d3:7b:a5:c1:4b:f4:78:5e:ca:7c:db:59:
                    15:44:50:c6:3d:67:91:f1:1f:1e:39:76:41:67:62:
                    da:09:9c:ee:51:9f:ed:5f:0d:f6:61:f4:f1:27:47:
                    8f:98:14:74:95:e5:ab:92:a1:68:ab:84:28:bb:36:
                    cf:45:18:ee:a6:7d:2b:3f:dd:ab:5b:e6:c8:2f:97:
                    1c:1b:7a:9f:61:f9:14:cd:34:0c:58:ae:4f:bf:40:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:30:40:29:AE:1E:84:26:37:17:BC:43:A7:23:C5:49:AB:F8:02
            X509v3 Authority Key Identifier:
                keyid:54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/FL8wQCmuHoQmNxe8Q6cjxUmr-AI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ee47::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:23:b7:3a:5d:7d:ba:71:92:c2:a7:5f:53:27:d3:2e:09:
         3d:cb:d2:74:c7:fb:cc:1d:df:48:9c:4e:47:37:ce:15:9a:43:
         d5:66:d3:55:4d:90:1f:04:7c:f1:28:71:de:ca:ad:82:d9:44:
         c6:20:77:41:bc:1d:3d:bc:e3:04:f0:93:36:ed:e0:91:4d:45:
         98:c6:46:77:8b:74:22:30:5b:b0:2f:d0:14:e3:12:4f:c6:cd:
         08:fe:36:55:7f:52:c1:83:04:84:5c:bd:64:c0:3c:2a:da:e8:
         9e:6f:52:cd:ff:7d:ea:94:22:4a:1f:b1:23:6b:95:3c:a1:84:
         7f:bc:dd:f4:0a:6e:4a:ee:50:d6:78:19:aa:50:19:1b:26:d8:
         28:68:29:3c:05:34:e5:b8:55:f7:ff:02:36:3c:8e:6e:83:ed:
         56:4c:dc:72:e4:b0:f2:ce:0f:23:12:ac:e8:49:72:14:ca:9c:
         a5:c0:8a:3e:f9:54:f8:ba:66:6d:52:10:36:47:63:04:5f:d3:
         5d:f7:bd:bc:30:53:a3:69:35:32:94:f3:7e:b8:cc:4b:15:15:
         08:96:1b:51:9c:18:6b:13:a7:28:5b:cd:e1:ec:89:9b:b5:57:
         2e:f5:1d:5f:59:d3:25:7a:15:7a:d7:97:ee:e2:9a:07:9b:00:
         0d:dd:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----