Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa
File:                     LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa (raw, json)
Hash identifier:          jPdydiL9q0309jErsqqWbCZshkEVYb11PbKJpexeehY=
Subject key identifier:   2C:03:BF:67:D9:C6:9D:17:44:36:67:FC:0E:BD:0B:EE:D8:86:F4:95
Certificate issuer:       /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial:       018F00FA84FDCAC05521FBC7535A6459EC01
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa
Signing time:             Sun 21 Apr 2024 14:06:08 +0000
ROA not before:           Sun 21 Apr 2024 14:06:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212516
IP address blocks:        2a0d:b287:ec30::/46 maxlen: 46
                          2a0d:b287:ec40::/48 maxlen: 48
                          2a0d:b287:ec41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:fa:84:fd:ca:c0:55:21:fb:c7:53:5a:64:59:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
        Validity
            Not Before: Apr 21 14:06:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c03bf67d9c69d17443667fc0ebd0beed886f495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:6e:df:aa:5d:34:b5:09:ad:96:e5:1f:23:
                    5c:e9:89:25:ac:8d:13:2d:e1:d9:a5:57:fd:92:93:
                    b7:17:44:c6:80:86:de:a6:1d:47:0c:41:51:18:fd:
                    f0:c3:61:92:ee:9a:d8:46:03:09:f2:23:89:30:83:
                    af:cf:e2:8b:a1:9c:de:28:2f:e1:b4:9e:4d:5e:9b:
                    a3:3d:72:fe:d5:77:64:9a:f4:04:6f:f8:b5:9a:d2:
                    bb:9e:0a:1f:7a:31:5c:89:9e:dc:9e:ed:99:6a:05:
                    ec:2c:bf:e8:4d:cc:2f:69:67:25:b1:a4:0e:7c:46:
                    7f:96:75:9d:c7:5d:1b:27:9c:64:19:41:9f:29:32:
                    a7:25:99:67:8c:8f:2f:65:37:c6:74:0c:ab:40:73:
                    e7:a5:ea:73:3a:03:ef:81:19:43:38:42:3e:b1:ac:
                    44:f9:5b:79:c6:6f:ff:3a:a8:0d:75:d6:9d:58:07:
                    f5:89:91:44:c8:ed:13:47:2a:e7:b9:e6:72:ff:0f:
                    d0:83:87:6c:d2:43:a1:10:5f:54:9a:45:58:6f:6f:
                    2c:42:5b:0a:aa:5b:99:6e:b8:ff:e8:4b:39:c8:6c:
                    59:6a:20:e4:16:84:8b:d9:5c:58:c8:0c:4f:73:ea:
                    93:9e:20:b5:43:f9:0a:61:75:e8:61:96:85:82:d7:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:BF:67:D9:C6:9D:17:44:36:67:FC:0E:BD:0B:EE:D8:86:F4:95
            X509v3 Authority Key Identifier:
                keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:b287:ec30::/46
                  2a0d:b287:ec40::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:a4:76:95:a2:36:13:9c:2a:86:05:ff:ee:3b:ce:1d:66:
         8b:91:04:f0:7b:9f:49:45:14:c6:da:eb:44:60:d7:f6:c2:12:
         f4:45:e3:9e:08:08:11:43:73:98:48:6d:e6:cc:e8:db:42:bb:
         6d:16:09:8f:a1:7f:3c:62:81:fe:6b:56:da:73:10:eb:76:8f:
         1f:d9:58:36:91:c3:a1:e4:33:59:c9:c4:00:de:47:2d:84:f5:
         c2:cc:71:f9:cc:b5:21:51:ac:06:a7:6f:46:26:3f:88:9c:e4:
         8d:a5:3b:37:ff:88:e5:68:90:f9:db:1f:2d:26:88:1d:97:3a:
         dd:46:cd:9f:53:1d:a4:d8:a7:78:56:35:67:5e:b0:d4:d4:7f:
         53:3b:b2:c0:9f:39:fd:8d:5e:14:04:3c:3d:2d:58:b9:aa:e5:
         7f:1f:f9:86:6e:50:fb:4b:00:e5:c5:2c:8d:40:0e:02:2d:59:
         01:fa:05:13:04:e4:8d:62:e1:d5:f7:ff:01:d5:3c:f0:78:8d:
         93:26:62:e0:15:05:06:32:fd:a2:61:ad:3a:3a:4e:58:80:53:
         9d:2d:2e:ec:da:a5:42:e6:b1:2a:b6:32:b7:ad:20:63:3c:b7:
         a4:ce:16:53:78:ea:b7:6c:52:d2:09:21:8b:cb:5d:f3:a6:79:
         9e:dc:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----