Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa
File:                     uvuzmRx8-6cGlxneouFp2r3cQLs.roa (raw, json)
Hash identifier:          Q8jSuQVbZnL0m4YW+amp+qk6XrA14M8l2UlAYa8wHIw=
Subject key identifier:   BA:FB:B3:99:1C:7C:FB:A7:06:97:19:DE:A2:E1:69:DA:BD:DC:40:BB
Certificate issuer:       /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial:       01862C4C664BB6C7F30D96419A29E4524EB0
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa
Signing time:             Tue 07 Feb 2023 14:34:09 +0000
ROA not before:           Tue 07 Feb 2023 14:34:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a13:9300::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2c:4c:66:4b:b6:c7:f3:0d:96:41:9a:29:e4:52:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
        Validity
            Not Before: Feb  7 14:34:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bafbb3991c7cfba7069719dea2e169dabddc40bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:0e:63:2f:1a:63:52:02:59:80:43:16:ec:
                    b2:6e:f6:02:1c:09:77:e1:5d:56:83:a2:51:ab:50:
                    3c:1b:a6:10:55:e8:60:28:8a:7d:a2:75:71:86:a6:
                    a0:bc:b4:05:df:66:df:a7:74:19:a3:51:16:e0:39:
                    80:33:08:63:d9:e6:ec:f8:f8:b2:2d:65:c0:a7:9a:
                    a5:77:df:60:7b:86:d3:46:50:69:8d:ff:ea:6d:f6:
                    55:3e:95:41:19:8d:82:18:c9:d4:89:c3:a1:39:d8:
                    9f:1d:08:76:71:1c:e5:6f:ee:0b:36:84:90:29:b5:
                    ec:e0:e4:1d:1a:7f:1c:47:68:24:a9:d6:c7:cc:83:
                    07:14:60:3c:7a:06:84:74:45:81:77:77:ed:8c:2b:
                    5e:e7:75:2c:a8:19:7a:eb:2b:83:f4:bb:2e:57:87:
                    f1:8c:7b:69:97:f5:df:b0:5b:ce:9f:a6:b0:ea:75:
                    2d:f4:ae:40:85:db:d2:e0:dd:0f:28:6f:aa:a9:0e:
                    ae:aa:f5:a6:79:8d:06:3a:5b:16:0b:3e:6e:da:bc:
                    d8:4c:9c:82:10:ad:1e:09:f7:cf:6b:f7:5a:30:1c:
                    65:f5:cc:24:7e:ac:7a:9c:ba:22:e9:fe:a4:f9:c2:
                    26:30:74:2e:34:de:25:46:e9:0f:e6:50:8b:08:6e:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:B3:99:1C:7C:FB:A7:06:97:19:DE:A2:E1:69:DA:BD:DC:40:BB
            X509v3 Authority Key Identifier:
                keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9300::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:33:ee:6e:48:8b:5a:26:2d:7d:89:ab:e2:01:58:54:93:cb:
         1c:c5:09:25:60:1b:d8:38:20:ef:72:f5:a0:25:a5:b1:34:68:
         0c:0c:f9:25:70:04:97:e9:e1:9c:73:fc:06:92:7c:d9:0f:8c:
         ff:7c:a8:b4:d9:98:1c:4b:33:10:11:e1:f3:37:e1:2e:81:35:
         c9:bb:40:0b:9b:80:3c:ea:8d:37:70:1a:6d:ba:bf:26:67:aa:
         ee:12:5a:5c:15:33:75:4e:4b:bd:5b:7c:b6:f7:b2:f0:9d:e6:
         ae:67:3b:fd:ee:cc:05:c2:3e:02:04:f4:8d:10:ad:92:fc:51:
         5e:92:e6:36:f7:57:c6:28:83:3a:4a:00:75:24:fd:34:bd:f2:
         ec:46:95:3b:b1:94:4a:3c:28:fa:3d:98:8a:64:84:d1:0b:1e:
         51:41:39:41:80:31:61:f0:76:86:dd:86:14:7a:9e:28:cf:a8:
         f5:b3:f3:fd:31:37:27:a3:21:8b:03:08:9f:90:9a:7c:34:52:
         c4:0c:1b:2e:0d:3c:f5:fe:10:76:e8:fc:e0:d6:2e:2e:c8:06:
         bf:47:4c:0d:24:2c:6c:42:03:21:62:8b:75:65:85:18:f6:00:
         45:45:4f:6a:b0:0a:33:4a:d0:8a:96:4b:71:5c:3d:f3:9f:a2:
         a8:b4:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----