Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/1-XZSoNV8TFyTvPK2xYvWVqkCxek.roa
File:                     1-XZSoNV8TFyTvPK2xYvWVqkCxek.roa (raw, json)
Hash identifier:          jNpjGL3AyGLXc/LspdsEkrGl1BcRs17kZNy7YqElxfA=
Subject key identifier:   F9:76:52:A0:D5:7C:4C:5C:93:BC:F2:B6:C5:8B:D6:56:A9:02:C5:E9
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       01856D9D474D98C09CCFE7F1A8A39F509240
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/1-XZSoNV8TFyTvPK2xYvWVqkCxek.roa
Signing time:             Sun 01 Jan 2023 13:55:01 +0000
ROA not before:           Sun 01 Jan 2023 13:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207451
IP address blocks:        2a0f:85c1:213::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:47:4d:98:c0:9c:cf:e7:f1:a8:a3:9f:50:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Jan  1 13:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f97652a0d57c4c5c93bcf2b6c58bd656a902c5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:63:d5:02:5d:9f:8e:1d:aa:7a:55:5b:da:
                    03:63:2d:3a:28:f5:29:3a:f7:9d:d1:d5:6d:f3:b1:
                    bd:a0:b6:ee:bd:61:3a:25:e7:d6:67:15:50:8f:87:
                    fe:ce:5f:cc:d3:27:94:ad:f2:08:c1:6f:96:0f:d1:
                    8b:46:8a:41:a1:39:7b:46:c5:2c:c0:98:34:2d:93:
                    89:eb:24:71:fd:fe:a4:a2:4e:fc:ed:5b:47:be:97:
                    00:f8:f6:f6:82:35:63:70:36:c2:17:ea:a2:29:df:
                    b9:67:6d:b8:4d:5e:05:c9:df:b2:da:39:91:fe:3e:
                    b9:02:c3:0a:90:58:b5:32:f9:36:03:37:30:13:72:
                    43:a8:65:68:5b:c8:2a:55:6b:4a:0c:f3:b5:fb:7a:
                    a2:31:46:b2:0b:a1:60:d7:3e:a5:3a:47:c6:dc:d2:
                    82:38:f5:90:01:d4:75:8d:2a:64:e3:0b:96:be:e2:
                    08:b6:c0:ee:92:18:e4:d6:6c:76:ed:92:20:42:ca:
                    1a:1f:7c:46:16:6f:01:93:51:d4:4f:53:f1:f0:9c:
                    8f:73:da:c4:bd:fa:be:ec:ad:ee:2f:de:9e:6f:06:
                    ef:8b:ed:1a:b7:c3:ed:26:58:de:3c:eb:f6:60:fd:
                    f4:78:b7:c7:a8:4c:db:c4:c1:3d:c7:ae:57:1a:a1:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:52:A0:D5:7C:4C:5C:93:BC:F2:B6:C5:8B:D6:56:A9:02:C5:E9
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/1-XZSoNV8TFyTvPK2xYvWVqkCxek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:f8:45:ae:2c:15:fa:91:b2:34:b3:d1:66:f6:bb:37:3f:68:
         17:05:cc:09:71:79:2b:ee:06:b8:ad:4b:4e:ce:45:d0:a4:da:
         8b:b7:d5:4a:af:70:2e:a9:7a:2c:a5:0c:42:8c:de:c2:c8:4c:
         66:d9:34:f2:ae:51:75:ac:f3:db:c6:bc:47:b9:a5:06:d8:14:
         33:70:f9:d4:da:92:b6:9a:c8:aa:6b:81:5a:45:b4:26:55:91:
         f9:2e:e5:bc:58:d0:14:41:db:8a:31:31:44:66:1a:e4:71:0a:
         4f:48:33:0e:aa:3d:0b:8c:0e:f0:56:17:ec:03:a4:bf:08:af:
         46:16:8e:d7:d2:1d:d0:71:6a:95:b5:b7:92:8b:e5:72:15:67:
         4b:2a:e9:b6:7d:57:82:1b:6a:29:a5:9a:2b:91:00:9e:14:5b:
         ab:0e:9d:38:91:2f:d6:cf:45:54:2f:34:a3:78:06:e9:5f:ba:
         9b:3f:24:ba:dc:c4:b8:da:9f:9d:1d:e4:20:26:8d:a0:a7:07:
         e4:97:3d:3c:ee:26:a0:17:e7:39:f8:f4:2a:55:ea:1e:5d:61:
         38:9f:da:10:18:20:6b:a0:51:3f:0b:f2:a8:eb:d8:a3:03:9b:
         f0:fd:6e:dd:5e:95:08:87:2c:5b:bb:66:be:51:e2:98:91:8a:
         60:79:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----