Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa
File:                     5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa (raw, json)
Hash identifier:          aeP6mNnmqs+npQCFWpvTEKthSUguNJNIetnu/mSLRfA=
Subject key identifier:   E4:07:04:2B:27:95:03:DD:4E:C1:2D:16:C3:E6:0D:CD:7F:B7:20:9A
Certificate issuer:       /CN=4db717e04be5e20435836ed7328b41395334f8a1
Certificate serial:       01853509C394E4E78C1FDD855DAC9A758D81
Authority key identifier: 4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa
Signing time:             Wed 21 Dec 2022 14:15:10 +0000
ROA not before:           Wed 21 Dec 2022 14:15:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200360
IP address blocks:        2001:67c:b3c::/48 maxlen: 48
                          2001:67c:b38::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:35:09:c3:94:e4:e7:8c:1f:dd:85:5d:ac:9a:75:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db717e04be5e20435836ed7328b41395334f8a1
        Validity
            Not Before: Dec 21 14:15:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e407042b279503dd4ec12d16c3e60dcd7fb7209a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:3a:64:73:83:d1:09:54:c0:f7:d0:c2:06:
                    7c:de:85:30:6f:2d:1c:87:cd:cc:79:7e:7a:e0:6b:
                    51:ac:bb:c2:80:7d:9b:0c:c3:e1:94:e7:69:05:dd:
                    fa:e5:93:28:fb:d3:36:64:2a:e1:3c:96:61:4f:9c:
                    8d:11:73:fc:70:18:9b:76:87:35:dd:93:3e:98:2d:
                    7c:90:53:25:87:f6:20:2b:24:07:a8:ca:8f:f0:95:
                    b8:9a:79:d5:fa:d2:c5:8a:6d:f0:35:42:5f:aa:09:
                    e7:d2:3e:ab:34:28:89:78:9b:6c:46:d1:88:e8:72:
                    24:71:0b:15:41:6d:fe:36:52:8a:6f:21:ee:c2:e3:
                    72:9f:cf:fc:6e:8f:96:7d:56:65:8a:2f:63:2e:31:
                    92:bd:dd:75:b2:a2:bb:7a:af:e1:30:71:38:4e:a1:
                    d4:e1:2f:27:7f:93:8c:2f:4b:cf:43:c1:e8:ec:63:
                    f1:bf:3a:32:04:c9:ba:b6:bd:e2:61:8f:40:35:a2:
                    92:6d:d4:d1:63:ed:87:1c:fd:7b:04:41:ac:45:da:
                    f3:48:75:71:5f:ba:ed:c7:59:66:ce:35:3d:57:7d:
                    eb:fa:c0:ae:55:0d:bc:c4:9a:1f:a7:88:2d:47:d1:
                    28:a3:f6:55:70:11:a3:7c:6c:bc:ca:83:f7:47:6e:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:04:2B:27:95:03:DD:4E:C1:2D:16:C3:E6:0D:CD:7F:B7:20:9A
            X509v3 Authority Key Identifier:
                keyid:4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b38::/48
                  2001:67c:b3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:99:55:b2:af:7b:47:e7:92:00:49:df:1b:ea:d2:d3:47:
         b9:c2:a9:43:1c:26:ab:c6:48:0a:2f:04:86:84:b9:8e:ac:47:
         78:a3:2d:99:f5:16:af:3e:e8:b5:f0:a8:6a:e9:7a:57:8c:8d:
         32:4e:79:95:31:df:e9:88:99:fe:cf:7b:6c:3c:2c:f2:8f:78:
         33:3e:d3:d0:0b:36:1c:0c:bf:a3:63:55:72:d3:a3:af:6e:95:
         75:35:c4:c6:9c:4b:52:1b:fb:a9:26:43:52:08:98:84:5d:c8:
         47:e0:bd:e0:7f:78:f9:a9:e6:84:a9:41:e6:ee:70:78:bd:34:
         74:09:a9:e5:30:53:08:b8:4c:ba:2e:39:ee:74:29:ed:ba:1d:
         95:40:6a:a2:57:7e:c4:d8:5d:c4:50:47:af:2b:c5:47:94:f5:
         6b:6f:f0:e6:0f:2e:7f:1a:7e:2c:ca:24:1c:b8:de:9d:da:ba:
         c7:09:a2:ab:d4:5d:40:7b:d0:11:3b:b7:85:68:6a:b6:0b:ad:
         7b:f4:7b:ec:23:30:09:d5:03:21:5e:bf:14:f2:04:0d:a3:ad:
         20:b1:c2:d1:52:f7:eb:4b:8f:45:64:07:14:18:3a:3d:eb:5c:
         82:67:47:7e:7d:61:08:0c:84:7b:97:af:c4:12:9d:37:ad:fe:
         9e:e4:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----