Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/_34W1FrWgbkpzSFJEiKI-fW7_Bo.roa
File:                     _34W1FrWgbkpzSFJEiKI-fW7_Bo.roa (raw, json)
Hash identifier:          zvMKrCQYMw+uppMpzA4coM/SjGQ2/mmwk9AzkHvgiAk=
Subject key identifier:   FF:7E:16:D4:5A:D6:81:B9:29:CD:21:49:12:22:88:F9:F5:BB:FC:1A
Certificate issuer:       /CN=7dcf341f51a88ce92457cca1e68b66ccb631fe02
Certificate serial:       0187614458CA718FF3B5273480066B880FF9
Authority key identifier: 7D:CF:34:1F:51:A8:8C:E9:24:57:CC:A1:E6:8B:66:CC:B6:31:FE:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fc80H1GojOkkV8yh5otmzLYx_gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/_34W1FrWgbkpzSFJEiKI-fW7_Bo.roa
Signing time:             Sat 08 Apr 2023 14:28:01 +0000
ROA not before:           Sat 08 Apr 2023 14:28:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208626
IP address blocks:        2a11:7e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:61:44:58:ca:71:8f:f3:b5:27:34:80:06:6b:88:0f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcf341f51a88ce92457cca1e68b66ccb631fe02
        Validity
            Not Before: Apr  8 14:28:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff7e16d45ad681b929cd2149122288f9f5bbfc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:46:4f:0c:df:4a:0c:27:97:38:0f:b9:44:
                    3a:4e:84:36:22:ff:e1:ff:04:e2:8b:60:f0:ed:de:
                    45:11:55:20:bf:b3:af:3f:1b:98:b4:e3:25:ba:94:
                    aa:96:55:e6:87:d1:b3:c4:4e:68:27:6f:da:6b:62:
                    32:ed:0e:4d:a7:ff:77:00:b5:de:88:b8:d6:c6:01:
                    85:ae:8b:01:c3:5b:8a:02:a5:da:12:79:7d:8f:c3:
                    09:ac:05:67:81:0f:3d:eb:38:76:54:6d:a1:5a:1a:
                    a2:57:05:3a:5e:22:f6:23:d8:ae:09:12:65:9b:3c:
                    bc:9b:4a:0c:e6:a3:0a:23:cb:a0:33:eb:10:45:a0:
                    14:60:8a:e7:15:eb:c9:ba:9a:17:eb:35:fd:71:25:
                    fd:b4:fd:44:6c:5b:67:1c:d3:a3:4d:72:b5:9a:dc:
                    09:eb:bf:2f:cb:0a:8d:21:bf:2c:08:15:0c:d5:03:
                    28:ad:cb:e3:ee:8c:b3:34:91:60:71:23:e9:3a:e8:
                    69:17:d0:fe:7a:63:d4:0c:ec:07:89:33:ac:ec:8b:
                    28:97:48:55:18:44:f0:11:ec:1a:38:f5:44:8d:7d:
                    10:3a:cf:de:12:32:64:70:ab:89:47:97:d3:7e:8a:
                    61:a1:f6:a7:bb:45:5b:38:41:32:98:92:da:f9:d8:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:16:D4:5A:D6:81:B9:29:CD:21:49:12:22:88:F9:F5:BB:FC:1A
            X509v3 Authority Key Identifier:
                keyid:7D:CF:34:1F:51:A8:8C:E9:24:57:CC:A1:E6:8B:66:CC:B6:31:FE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc80H1GojOkkV8yh5otmzLYx_gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/_34W1FrWgbkpzSFJEiKI-fW7_Bo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/fc80H1GojOkkV8yh5otmzLYx_gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:7e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:2a:a0:17:5e:f5:65:88:fd:2b:84:c9:26:1b:a3:ab:99:
         6b:d2:1c:2d:cd:45:8d:14:4c:b2:55:11:45:17:0c:50:d4:22:
         7a:e7:8e:c8:5e:f1:57:08:82:f7:ab:c4:c0:12:e5:fc:e0:11:
         ff:f5:d7:47:24:49:98:12:ef:fd:38:a7:9c:78:e6:32:3c:40:
         4f:9a:b6:13:49:3e:68:38:f5:29:28:ea:c2:c8:94:b9:7c:41:
         95:b4:25:b4:b9:cd:e7:1d:da:79:9d:e1:f1:c6:1c:88:0e:c6:
         f6:e5:38:b1:51:40:04:70:46:63:d2:3e:3b:96:aa:e9:44:34:
         71:a4:60:a7:24:bf:b1:3f:21:0e:8f:49:95:05:1b:d5:5f:67:
         a9:5c:c0:59:f0:fc:08:e2:06:08:65:7c:44:ac:f4:2f:05:72:
         e9:69:8e:4d:1a:0f:95:a9:37:64:3b:74:23:3a:88:06:99:67:
         35:b5:3d:2e:33:d8:0e:c5:1e:41:a9:6f:1f:86:58:69:17:20:
         7f:f3:35:8b:11:59:ff:75:f2:08:eb:b8:d5:95:e7:31:dd:3e:
         25:c4:aa:be:59:d3:70:60:bd:3f:a3:50:cd:d6:d1:38:be:67:
         28:12:96:07:b1:70:d7:6f:ea:b0:92:91:38:2c:86:fb:a3:a1:
         40:f5:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----