Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/tIVTEeVCZOcGQifUFevCpn0z00A.roa
File:                     tIVTEeVCZOcGQifUFevCpn0z00A.roa (raw, json)
Hash identifier:          AUD2/DRU9BfqzGAilPdfhXA8h5JIlnE99dzraDhwNtU=
Subject key identifier:   B4:85:53:11:E5:42:64:E7:06:42:27:D4:15:EB:C2:A6:7D:33:D3:40
Certificate issuer:       /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial:       01879AF7273FD2D5B110ABF7F9441D97C5DF
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/tIVTEeVCZOcGQifUFevCpn0z00A.roa
Signing time:             Wed 19 Apr 2023 19:21:41 +0000
ROA not before:           Wed 19 Apr 2023 19:21:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29491
IP address blocks:        2a06:5e80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9a:f7:27:3f:d2:d5:b1:10:ab:f7:f9:44:1d:97:c5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
        Validity
            Not Before: Apr 19 19:21:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4855311e54264e7064227d415ebc2a67d33d340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:4a:ec:bd:8a:92:ce:d8:bb:69:af:e3:49:
                    6c:78:25:e3:45:ea:32:a7:a1:32:c3:b0:0d:60:e1:
                    8d:f5:65:fe:b7:28:16:b0:e1:85:3f:d0:b7:3f:87:
                    5e:66:81:38:6f:0e:16:c1:56:b6:08:02:43:f1:fa:
                    fc:d0:ad:92:9b:60:77:9a:4f:0a:43:60:5b:87:d4:
                    f5:19:1e:df:87:2d:9f:46:01:fe:ea:13:91:c4:21:
                    26:b5:d7:3c:34:94:86:bf:98:b8:03:ec:5f:58:79:
                    1c:5c:4c:0b:d5:70:32:3f:fa:0c:5d:e9:f4:27:2b:
                    e0:19:9e:e2:48:cf:bb:cf:d3:ca:fe:8d:77:bc:10:
                    78:ea:ff:0d:c9:d1:b1:e0:04:c3:2e:6d:3e:35:b2:
                    4b:23:f3:bb:6b:ee:1f:a9:d6:ac:5d:15:10:63:f5:
                    df:29:ce:e3:49:b6:10:5e:61:43:a7:ea:54:f6:9b:
                    b5:ab:c0:55:c1:b6:bd:13:35:ca:0d:f9:e4:13:84:
                    2c:63:3c:91:fc:aa:97:d3:a3:fd:db:6b:d7:7e:86:
                    ff:69:9f:72:51:ca:1e:46:dc:5e:d2:fa:9b:a2:45:
                    34:9f:fc:a8:54:fb:5d:f1:47:0a:cf:10:e8:cd:67:
                    83:2a:ea:12:7f:73:14:6c:8f:49:9d:e2:b3:49:5d:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:85:53:11:E5:42:64:E7:06:42:27:D4:15:EB:C2:A6:7D:33:D3:40
            X509v3 Authority Key Identifier:
                keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/tIVTEeVCZOcGQifUFevCpn0z00A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:d9:d8:d1:6e:bf:56:2e:3e:de:1d:6e:54:28:6d:1e:1d:
         03:03:c0:f9:b2:28:92:63:07:9c:7b:f5:64:da:a4:71:ed:d6:
         9c:57:e5:e1:04:8e:72:9a:57:2d:7c:76:32:6e:64:fd:c8:68:
         47:5c:95:f6:9f:e7:6e:45:79:98:72:c9:29:96:20:d2:4a:97:
         30:70:68:7b:eb:19:f9:be:b1:6f:ec:bf:b9:0d:da:d4:22:fa:
         83:8d:2b:24:3e:6c:e6:00:96:ab:6e:dc:ad:a3:f5:7a:75:14:
         5c:12:0a:5f:4c:13:c5:42:e7:e6:3a:2b:9d:08:5d:44:68:a2:
         28:9b:1b:2c:5a:94:84:1b:c2:4d:72:15:b5:01:d2:d8:75:a9:
         0c:16:1c:05:59:9c:da:f9:bc:ea:65:18:5b:b3:f8:c4:0e:36:
         3e:68:bf:cf:b0:f4:be:54:50:3d:c0:50:d4:a6:03:62:fc:be:
         9b:a9:40:73:51:82:e6:69:af:24:bc:2c:dd:04:14:d6:5f:ee:
         16:e6:cf:a8:d8:c9:04:29:24:77:97:73:0b:cf:93:f6:74:af:
         3c:51:d1:52:2f:96:64:a9:ef:b1:7b:f2:20:ca:96:3c:38:81:
         81:71:50:bc:6e:8e:63:67:4d:d2:73:48:ef:46:ff:ec:8b:5c:
         2b:c5:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----