Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/II-MR3mUMxrdZB3WCnolCS0GtNU.roa
File:                     II-MR3mUMxrdZB3WCnolCS0GtNU.roa (raw, json)
Hash identifier:          tsvwKd3f84MsDX9d1Hf668A5BaUZt2T4m+dCE5oQCI4=
Subject key identifier:   20:8F:8C:47:79:94:33:1A:DD:64:1D:D6:0A:7A:25:09:2D:06:B4:D5
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       01885FFFE0A59F62B4B063FA2DAA4B7ECDE2
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/II-MR3mUMxrdZB3WCnolCS0GtNU.roa
Signing time:             Sun 28 May 2023 01:36:24 +0000
ROA not before:           Sun 28 May 2023 01:36:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21321
IP address blocks:        2a03:8ea0::/32 maxlen: 32
                          2a01:b840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5f:ff:e0:a5:9f:62:b4:b0:63:fa:2d:aa:4b:7e:cd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: May 28 01:36:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=208f8c477994331add641dd60a7a25092d06b4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:91:db:e0:4e:d5:cb:74:c6:dc:a6:c4:8a:
                    46:cc:64:7c:19:d5:40:44:40:81:c0:45:20:60:61:
                    16:aa:0f:ad:26:f4:9b:95:00:e3:b0:5f:a7:f5:2a:
                    e7:ac:e3:92:51:b4:29:fa:83:47:59:d4:c8:a3:ce:
                    1d:68:1a:90:7d:53:91:e9:dd:c6:d5:9f:b2:30:10:
                    71:b7:87:2d:05:7b:fa:cf:98:c7:4c:20:c0:3b:70:
                    14:31:61:11:79:a4:f4:75:87:41:89:e1:81:22:8f:
                    53:d3:c4:60:07:43:9c:3b:57:43:58:14:f2:16:c4:
                    6a:b4:bd:c4:54:85:b6:95:f7:99:d6:7a:1b:ef:35:
                    e3:4e:c4:30:24:06:23:18:8b:3f:78:67:6f:fb:35:
                    f3:54:67:bf:6d:76:4a:4f:cc:8b:71:75:92:4a:d9:
                    19:ed:8c:53:6d:bb:01:a0:7f:77:50:4a:0b:eb:ae:
                    fa:36:85:df:8c:2c:41:be:e8:53:25:af:c7:90:20:
                    e8:8a:34:f0:b7:41:25:49:1f:c9:a7:81:31:5e:4e:
                    c7:58:d5:bf:ef:85:05:4c:96:44:4a:48:fe:75:86:
                    4d:f6:80:ad:af:37:71:f5:78:6e:eb:97:54:f4:dd:
                    01:2f:d6:87:e0:17:92:97:cb:80:ca:64:c7:42:e2:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8F:8C:47:79:94:33:1A:DD:64:1D:D6:0A:7A:25:09:2D:06:B4:D5
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/II-MR3mUMxrdZB3WCnolCS0GtNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:b840::/32
                  2a03:8ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:c9:39:f3:54:50:ec:2d:7a:b4:64:c6:53:bc:f7:bc:2a:
         45:e5:2b:e2:10:10:73:94:aa:21:49:f8:b4:c8:fc:5b:7e:37:
         ea:93:d7:c3:57:dd:0f:2b:c9:19:05:ca:cf:c6:2d:12:06:6e:
         bb:b3:77:5b:ac:14:2a:0e:a7:87:3c:25:00:39:60:2f:27:a4:
         88:77:ab:d4:93:46:62:df:03:7e:47:5b:f7:f5:02:de:18:11:
         0b:ba:5d:87:55:87:f2:c4:4e:37:c7:42:c7:1e:a9:be:a0:9f:
         e6:a9:93:76:4a:2f:89:a2:cb:36:ba:d5:a4:2a:c6:cb:2b:e3:
         94:5c:e1:2c:1f:d8:00:b3:e4:ea:a5:41:14:24:fe:65:bc:fc:
         9b:35:fb:cd:c0:71:4e:f9:81:85:d9:ff:16:3e:96:46:1e:8a:
         28:de:e8:c0:45:09:6c:38:30:6c:5a:9e:02:f1:a3:91:8f:61:
         81:63:20:63:be:47:2f:c1:06:40:29:f0:2c:95:47:9e:19:00:
         5d:a2:b1:f2:b7:35:06:88:7c:3b:6e:99:dd:8e:8c:94:e3:21:
         05:b7:59:ba:93:fc:a5:9c:03:37:08:66:fc:b6:b4:89:de:f4:
         74:92:d6:7f:3a:47:4d:83:b9:77:f5:1b:ae:93:55:03:e2:f7:
         5b:93:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----