Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/4EiHvYe-FeLkKk4mowtW28PiJ_0.roa
File:                     4EiHvYe-FeLkKk4mowtW28PiJ_0.roa (raw, json)
Hash identifier:          6UjVhhVDmcBu+ZU/a0Ld8KbLhtAFDYsv3TUkfXWn9cE=
Subject key identifier:   E0:48:87:BD:87:BE:15:E2:E4:2A:4E:26:A3:0B:56:DB:C3:E2:27:FD
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       01856D9D4CDF7AD7230B11AFB3F6538E2658
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/4EiHvYe-FeLkKk4mowtW28PiJ_0.roa
Signing time:             Sun 01 Jan 2023 13:55:03 +0000
ROA not before:           Sun 01 Jan 2023 13:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209735
IP address blocks:        2a0f:85c1:80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:4c:df:7a:d7:23:0b:11:af:b3:f6:53:8e:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Jan  1 13:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e04887bd87be15e2e42a4e26a30b56dbc3e227fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:1b:d6:0c:2a:8a:e2:87:e5:e7:78:2d:1f:
                    67:75:b8:5e:e9:43:80:01:6a:06:bb:fd:f3:8d:cf:
                    ed:15:e2:7c:4f:ca:2b:b8:92:4e:a4:b2:b0:e0:ee:
                    9b:6f:e2:62:d2:52:c5:a6:08:8a:4a:7b:1c:7a:2e:
                    85:8f:c5:3d:88:c0:62:a1:23:5b:6e:9c:4b:2f:96:
                    dd:07:c6:8c:65:b9:72:22:95:55:b9:aa:83:ae:0c:
                    85:78:fd:1b:2e:1b:a3:72:82:7d:68:57:fb:42:7d:
                    79:4e:67:21:35:0e:34:b6:6d:5f:fd:65:67:3d:ce:
                    a1:08:ba:f9:4b:27:fd:26:a6:03:88:38:a9:63:48:
                    10:22:a2:30:23:7c:f2:31:99:f7:65:66:80:04:16:
                    9f:79:e7:53:55:37:9b:73:4f:31:a6:50:f7:e7:22:
                    64:35:f8:66:b5:39:63:04:dd:bf:f3:4d:45:67:f9:
                    35:c5:cb:b6:ed:46:48:b2:eb:7c:de:e2:9e:78:f6:
                    87:e8:5f:15:ef:e3:e0:9a:69:b7:ae:e7:27:43:0e:
                    26:3c:cd:d4:ff:7a:53:d5:51:43:8b:ce:cb:be:d2:
                    40:16:f4:e7:26:a9:d7:bf:e6:04:85:17:7f:72:7c:
                    90:19:c4:0a:e3:d3:c8:35:71:19:74:bd:18:0e:14:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:87:BD:87:BE:15:E2:E4:2A:4E:26:A3:0B:56:DB:C3:E2:27:FD
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/4EiHvYe-FeLkKk4mowtW28PiJ_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:43:d0:bf:1f:3c:27:de:b4:9f:8f:60:95:a5:e9:50:ef:cb:
         fe:49:9a:3a:cc:e8:5d:8c:36:16:14:07:d5:f6:d1:32:1c:f9:
         a4:18:e5:e9:36:c2:e5:53:62:cf:d5:33:b5:fe:e5:a5:a4:e2:
         16:32:c7:7f:8e:e5:ec:af:a8:59:83:2f:84:b8:c5:14:1d:27:
         ab:9d:3a:35:67:c1:c1:fc:e5:ac:75:90:6f:a8:55:e4:7e:08:
         7a:bd:4f:d0:71:2d:7c:32:04:ac:9e:83:2c:63:e9:c5:14:7d:
         46:5e:85:ed:58:e7:96:a8:72:6d:bc:6c:b7:81:0c:00:42:92:
         5b:c0:23:9b:f6:0e:37:31:5e:f2:63:b6:65:7f:ea:0f:3f:25:
         08:79:26:47:0e:f7:81:4e:e6:05:b6:24:00:fe:16:5a:5f:67:
         97:dc:7f:9e:de:c8:13:3d:86:34:b9:64:b1:b2:6f:27:53:93:
         95:27:51:b9:81:95:f5:be:c6:fa:76:a4:9a:78:b8:8a:cb:b9:
         a6:66:07:98:45:db:bf:98:5f:c6:66:dd:40:84:4d:b2:f9:f2:
         ef:4f:2c:20:3f:31:97:94:55:b9:93:fc:70:d6:d5:1f:fd:04:
         8a:dd:32:1a:6c:a7:6e:cc:ef:d7:b2:f9:58:fe:76:68:26:0a:
         c4:47:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----