Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/b4Nfj9uiiIiRQoVH6691l7D60Lo.roa
File:                     b4Nfj9uiiIiRQoVH6691l7D60Lo.roa (raw, json)
Hash identifier:          uBJ07kzeOG4RUQWfrOekL8xRCGPkKS3swFZ0Bk+J5pg=
Subject key identifier:   6F:83:5F:8F:DB:A2:88:88:91:42:85:47:EB:AF:75:97:B0:FA:D0:BA
Certificate issuer:       /CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Certificate serial:       018BC86F456D6C960F864B494CF44A82CA37
Authority key identifier: 54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/b4Nfj9uiiIiRQoVH6691l7D60Lo.roa
Signing time:             Mon 13 Nov 2023 11:26:57 +0000
ROA not before:           Mon 13 Nov 2023 11:26:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216007
IP address blocks:        2a13:ee40:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:6f:45:6d:6c:96:0f:86:4b:49:4c:f4:4a:82:ca:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
        Validity
            Not Before: Nov 13 11:26:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f835f8fdba2888891428547ebaf7597b0fad0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:ec:66:74:31:69:97:5d:e1:9a:a5:4d:3f:
                    cf:28:40:68:26:29:7f:97:44:4a:f5:48:a6:c9:ea:
                    00:5f:ae:80:a7:98:13:4d:d7:3f:42:3b:e7:c9:15:
                    22:0c:08:42:15:db:a0:a2:cd:83:08:71:d0:09:5c:
                    0d:43:09:83:46:79:92:25:12:13:f1:5c:84:19:4b:
                    63:13:8c:30:f4:9d:1f:b3:8c:e7:b0:d6:6e:8c:72:
                    ea:ed:ae:ab:79:e0:89:04:fd:ff:4a:84:22:d6:a3:
                    3c:03:a4:bc:cc:45:c3:2b:35:82:c4:fe:ec:d6:c5:
                    90:ce:ea:16:ea:cb:62:4d:ad:b0:08:88:95:d2:12:
                    3c:a6:69:ed:fc:cf:c9:1c:1d:67:e0:37:00:06:8c:
                    a0:bf:39:97:23:0a:99:a9:51:b8:17:7e:77:2b:2a:
                    9a:64:e3:3a:e5:1d:dd:66:51:8b:7e:9c:2b:ee:ec:
                    77:f3:19:05:e3:3d:2c:1c:4f:f3:01:d9:49:41:60:
                    9a:36:41:f3:a0:fc:16:92:b5:a4:88:4d:e6:d2:bc:
                    18:34:52:33:14:cd:10:3c:b5:60:55:96:16:5c:41:
                    cf:e1:80:c6:ab:6a:e5:57:d5:7e:ae:b8:14:18:b8:
                    b7:ca:f5:00:d5:46:6a:b7:76:42:db:9b:bb:05:28:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:5F:8F:DB:A2:88:88:91:42:85:47:EB:AF:75:97:B0:FA:D0:BA
            X509v3 Authority Key Identifier:
                keyid:54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/b4Nfj9uiiIiRQoVH6691l7D60Lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ee40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:88:08:ec:e1:e7:06:e3:82:c8:5e:fe:74:30:05:30:f9:
         57:89:b8:42:71:94:3c:10:65:2b:de:f7:9e:62:d8:8f:51:50:
         ac:d2:7d:19:c1:b4:5c:45:5e:7a:03:d1:a3:8c:91:b7:42:1c:
         15:11:24:15:7a:1f:e0:8c:6c:40:35:af:90:65:fa:ab:ba:f1:
         66:5a:ac:76:97:5d:66:de:68:98:ad:5c:fe:dd:d5:ac:81:68:
         d3:75:3e:1a:72:89:94:d4:3f:69:ff:b4:0c:f3:08:ff:d0:9e:
         58:57:34:bb:85:6d:f4:b9:2a:85:84:b8:42:77:fb:36:a7:e5:
         f2:db:42:20:95:d5:5e:5b:e9:9b:6e:7c:f7:7a:02:82:44:d0:
         25:4a:22:90:86:b2:3c:15:a5:84:ff:b2:57:ab:a3:1a:b1:84:
         66:07:f6:06:24:14:c6:d6:61:d4:81:9e:26:ab:ed:7d:9b:75:
         27:bd:30:26:f3:93:fe:11:dd:f9:40:fb:53:a4:a9:93:59:90:
         dc:1b:0f:53:5d:1b:b6:09:af:f9:34:9b:c7:a8:dc:73:c4:c7:
         b2:21:7b:57:38:ac:bf:a0:8f:91:93:af:7e:8c:17:78:f2:b2:
         e6:52:aa:f4:77:6f:3f:74:e1:a3:69:b1:87:f3:c4:12:3b:f8:
         cc:b2:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----