Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/sh_g49s2cFt2KWd-4QXqJw6RnxA.roa
File:                     sh_g49s2cFt2KWd-4QXqJw6RnxA.roa (raw, json)
Hash identifier:          jJ8FwGv32NZglOVSfIkMDWhzjY1Dl0oQFd2AZmG7img=
Subject key identifier:   B2:1F:E0:E3:DB:36:70:5B:76:29:67:7E:E1:05:EA:27:0E:91:9F:10
Certificate issuer:       /CN=64e995f046e92f02b216a0478a0060f3cb9ef7b3
Certificate serial:       01856F8239B1CC25212ED360B424A2A7BC5A
Authority key identifier: 64:E9:95:F0:46:E9:2F:02:B2:16:A0:47:8A:00:60:F3:CB:9E:F7:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOmV8EbpLwKyFqBHigBg88ue97M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/sh_g49s2cFt2KWd-4QXqJw6RnxA.roa
Signing time:             Sun 01 Jan 2023 22:44:43 +0000
ROA not before:           Sun 01 Jan 2023 22:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204840
IP address blocks:        2001:678:3f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:39:b1:cc:25:21:2e:d3:60:b4:24:a2:a7:bc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e995f046e92f02b216a0478a0060f3cb9ef7b3
        Validity
            Not Before: Jan  1 22:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b21fe0e3db36705b7629677ee105ea270e919f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:ee:f1:8b:8a:bd:5c:22:ef:cc:86:0e:d5:
                    2e:5a:0a:9a:9f:c6:a8:55:12:01:25:0d:b2:5d:05:
                    49:64:00:bd:d0:c1:8c:6e:0b:49:1a:98:81:69:e0:
                    d6:8a:90:a2:1a:4e:24:92:40:7a:e2:63:86:2c:86:
                    f9:e9:36:6d:e0:59:6a:64:3f:a5:e1:8f:1d:06:66:
                    21:0a:e1:31:cf:be:3c:48:98:8a:24:75:8e:d9:5e:
                    0a:03:36:b6:8f:05:b6:63:1f:70:79:43:a9:4b:da:
                    d2:01:2c:4c:50:b1:a3:3a:da:3f:ae:94:5a:e8:df:
                    43:61:78:34:e7:ea:f7:7d:10:56:9e:29:cd:4c:33:
                    aa:52:2c:3d:5d:aa:28:45:e6:a6:7f:e0:b5:b5:4e:
                    63:7f:71:94:2e:f4:f0:d2:c0:96:5b:24:67:ac:b1:
                    06:1d:a4:16:88:ca:dd:9b:bf:fd:b4:8f:6d:1c:bf:
                    b6:bf:d2:6e:0b:67:fa:31:e7:92:89:05:df:f1:af:
                    17:65:ed:cf:46:aa:6a:b4:ae:90:b1:3f:2a:b7:94:
                    23:cb:7d:c4:0e:5a:7c:0f:ef:22:2b:9f:c2:18:ae:
                    8f:68:d1:e0:0e:bd:7f:84:9b:d5:39:45:8d:d9:16:
                    dc:01:2e:03:ac:06:89:71:13:d8:54:27:8e:2a:c9:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:E0:E3:DB:36:70:5B:76:29:67:7E:E1:05:EA:27:0E:91:9F:10
            X509v3 Authority Key Identifier:
                keyid:64:E9:95:F0:46:E9:2F:02:B2:16:A0:47:8A:00:60:F3:CB:9E:F7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOmV8EbpLwKyFqBHigBg88ue97M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/sh_g49s2cFt2KWd-4QXqJw6RnxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/ZOmV8EbpLwKyFqBHigBg88ue97M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:c0:af:c6:a1:88:22:6e:f1:c6:82:4b:9b:19:17:18:36:
         d7:d3:6e:9b:36:b6:db:fd:2f:d7:c4:c2:86:d9:8d:06:1a:0e:
         a7:33:53:9c:0c:29:1b:bb:a3:3c:45:b0:dd:71:c3:6b:ae:29:
         1d:be:73:76:d4:5a:f4:91:91:0c:12:4e:f8:ea:48:f2:2c:ef:
         63:34:93:ce:f4:c5:e6:4d:a4:bf:ba:14:fc:5d:d8:f8:c1:2c:
         11:c2:32:d0:9e:00:49:b1:49:5a:59:25:5e:5e:40:09:71:67:
         6f:e1:89:20:bd:30:dd:50:7e:e6:54:d7:ee:b7:fd:57:70:cb:
         b7:d9:51:54:b0:14:50:4c:db:72:13:42:78:6a:35:c8:87:b1:
         3b:73:b8:49:99:3c:a3:dd:e3:0f:4e:04:9a:0c:ca:80:8f:50:
         75:25:a8:0e:e1:d0:ae:b3:cb:ce:4d:ea:10:55:e5:04:83:5c:
         f7:c1:02:b0:2c:62:5b:74:29:e0:6b:4c:c5:5c:3a:37:68:b1:
         18:03:c1:17:1c:eb:67:67:95:51:11:86:0f:ed:ae:22:bf:15:
         a5:64:32:f7:8a:26:fc:93:c6:8e:ba:0b:10:49:a1:75:4b:ca:
         64:01:ca:5a:49:ed:0d:da:4f:a6:bc:80:e9:e0:eb:62:d4:80:
         3d:f7:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----