Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/1llN7pFMJKJur0MpJEm2azZ_aD0.roa
File:                     1llN7pFMJKJur0MpJEm2azZ_aD0.roa (raw, json)
Hash identifier:          1lnOjuHIHcgLKeK9CW3YcmetXXZylu0U/OHXcx4CMyg=
Subject key identifier:   D6:59:4D:EE:91:4C:24:A2:6E:AF:43:29:24:49:B6:6B:36:7F:68:3D
Certificate issuer:       /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial:       0189AFB623271360A34CCBDA684E88033DBA
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/1llN7pFMJKJur0MpJEm2azZ_aD0.roa
Signing time:             Tue 01 Aug 2023 06:08:16 +0000
ROA not before:           Tue 01 Aug 2023 06:08:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0d:3c80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:af:b6:23:27:13:60:a3:4c:cb:da:68:4e:88:03:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
        Validity
            Not Before: Aug  1 06:08:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6594dee914c24a26eaf43292449b66b367f683d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:a6:08:56:60:90:d4:41:71:e6:fd:5b:9f:
                    ed:01:e5:d6:75:38:1a:c3:04:da:84:41:08:71:6c:
                    2c:b7:2c:86:e1:82:15:8f:f0:47:6a:97:9c:3b:78:
                    3b:cd:5c:ef:f2:ae:44:0c:62:86:eb:e9:fa:a3:c2:
                    32:d8:30:5a:9e:2a:4e:67:80:a7:7b:e5:8a:f8:bc:
                    0f:19:ff:9d:fe:23:f3:fb:7c:8f:78:6e:11:ee:68:
                    13:6a:23:bb:b1:37:95:85:32:63:24:d8:91:6a:fa:
                    af:3c:df:d6:2b:3c:df:fb:09:5d:a9:a3:67:6b:07:
                    53:c4:52:d2:f5:9a:4f:9d:e1:5c:e1:00:8a:79:b5:
                    e4:a4:77:80:dd:ae:4d:ba:ca:4f:a0:0b:d8:18:93:
                    a3:1a:e6:91:cd:ea:62:db:c2:67:e2:a4:25:23:d7:
                    dc:eb:25:bc:93:cf:24:40:af:1b:1a:1c:56:d6:29:
                    49:4c:aa:0a:35:a4:61:46:bb:1b:b6:0b:5d:3f:1c:
                    9f:5e:fa:0c:32:2c:0f:ad:80:71:ff:a0:66:72:12:
                    7f:79:cd:98:80:03:95:b1:a6:9f:bf:7e:63:4a:1c:
                    c3:f7:f8:12:1e:ee:23:e8:01:01:7a:b7:0a:b5:b3:
                    15:f0:b1:00:16:db:63:f6:b1:cf:dc:cf:28:5c:8a:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:4D:EE:91:4C:24:A2:6E:AF:43:29:24:49:B6:6B:36:7F:68:3D
            X509v3 Authority Key Identifier:
                keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/1llN7pFMJKJur0MpJEm2azZ_aD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:3c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:02:7a:e0:51:3c:50:b3:dc:00:5c:d9:ba:f8:45:7b:9b:78:
         4b:69:f4:f5:5c:dc:fb:07:6f:c0:8b:a0:0f:dd:67:3f:86:85:
         c9:90:56:93:57:a7:1f:64:38:da:52:05:82:db:4b:9c:95:c5:
         7e:31:28:ee:7e:ae:92:0c:5b:88:dc:25:07:bf:d3:33:11:c2:
         12:4a:c6:d2:82:d8:3e:26:29:9d:cc:6d:00:fe:e3:f5:05:70:
         b7:45:90:30:d7:6f:b6:92:cd:33:2e:9f:e1:11:dd:71:56:0e:
         be:fe:5b:3e:2b:d5:96:54:a4:00:7b:98:8e:5c:28:ff:c5:91:
         d5:d0:8a:0b:35:25:d6:58:75:bd:80:62:45:66:08:79:26:06:
         59:e5:1c:14:17:af:ea:ab:a2:b3:b9:76:3b:c3:19:71:63:24:
         9c:d3:32:8f:11:16:7f:de:c6:77:a4:56:6a:a2:89:2f:55:e6:
         e3:ba:b8:ec:cd:cb:4b:d6:42:35:37:4d:ca:d6:4a:52:60:a4:
         d6:4c:fd:72:a7:a9:11:3f:a7:23:db:66:ed:47:80:47:23:21:
         88:20:51:f8:2f:a0:cf:9e:a0:22:a0:d0:99:43:fe:75:0d:6f:
         c9:2f:14:74:76:49:36:ee:cb:1c:e8:d3:95:ab:06:d6:b5:bb:
         af:c9:ed:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYmvtiMnE2CjTMvaaE6IAz26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGExZjhjZjNiODAxNmJlODgzMmY3OGIxMDFiMzY0ZTEx
MTQwMjUwHhcNMjMwODAxMDYwODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjU5NGRlZTkxNGMyNGEyNmVhZjQzMjkyNDQ5YjY2YjM2N2Y2ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3KmCFZgkNRBceb9W5/tAeXWdTga
wwTahEEIcWwstyyG4YIVj/BHapecO3g7zVzv8q5EDGKG6+n6o8Iy2DBanipOZ4Cn
e+WK+LwPGf+d/iPz+3yPeG4R7mgTaiO7sTeVhTJjJNiRavqvPN/WKzzf+wldqaNn
awdTxFLS9ZpPneFc4QCKebXkpHeA3a5NuspPoAvYGJOjGuaRzepi28Jn4qQlI9fc
6yW8k88kQK8bGhxW1ilJTKoKNaRhRrsbtgtdPxyfXvoMMiwPrYBx/6BmchJ/ec2Y
gAOVsaafv35jShzD9/gSHu4j6AEBercKtbMV8LEAFttj9rHP3M8oXIq2IQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNZZTe6RTCSibq9DKSRJtms2f2g9MB8GA1UdIwQY
MBaAFMoKH4zzuAFr6IMveLEBs2ThEUAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDct
YjU5NDc0MGE0MGE3LzEvMWxsTjdwRk1KS0p1cjBNcEpFbTJhelpfYUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDctYjU5NDc0MGE0MGE3
LzEveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg08gAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBoAnrgUTxQs9wAXNm6+EV7m3hLafT1XNz7B2/A
i6AP3Wc/hoXJkFaTV6cfZDjaUgWC20uclcV+MSjufq6SDFuI3CUHv9MzEcISSsbS
gtg+JimdzG0A/uP1BXC3RZAw12+2ks0zLp/hEd1xVg6+/ls+K9WWVKQAe5iOXCj/
xZHV0IoLNSXWWHW9gGJFZgh5JgZZ5RwUF6/qq6KzuXY7wxlxYySc0zKPERZ/3sZ3
pFZqookvVebjurjszctL1kI1N03K1kpSYKTWTP1yp6kRP6cj22btR4BHIyGIIFH4
L6DPnqAioNCZQ/51DW/JLxR0dkk27ssc6NOVqwbWtbuvye1Y
-----END CERTIFICATE-----