Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/6_HmPuHhlWl0SShqgKHMfmaVniQ.roa
File:                     6_HmPuHhlWl0SShqgKHMfmaVniQ.roa (raw, json)
Hash identifier:          I2hh9qISuWM3h5hF8ih9+9esTX/Ov5OFa9CngVdmogs=
Subject key identifier:   EB:F1:E6:3E:E1:E1:95:69:74:49:28:6A:80:A1:CC:7E:66:95:9E:24
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       018671B8BAADD5FB8C2EDEB91F9ED84981AA
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/6_HmPuHhlWl0SShqgKHMfmaVniQ.roa
Signing time:             Tue 21 Feb 2023 02:06:17 +0000
ROA not before:           Tue 21 Feb 2023 02:06:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199830
IP address blocks:        2a0f:85c1:270::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:71:b8:ba:ad:d5:fb:8c:2e:de:b9:1f:9e:d8:49:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Feb 21 02:06:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebf1e63ee1e195697449286a80a1cc7e66959e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:3b:56:fa:f8:61:ff:a8:14:f8:13:b5:5e:
                    bb:2a:ea:9b:f8:dd:c6:4d:19:d0:da:cd:55:6c:d3:
                    47:df:36:b7:c0:6c:83:0d:aa:ca:04:d4:54:27:ac:
                    25:45:33:8e:9a:47:d2:e5:ec:d2:6d:bf:bd:12:cc:
                    91:fc:38:b0:7f:cd:60:2b:96:b1:24:d0:df:48:4b:
                    d4:87:9d:c1:83:be:e9:18:2b:2f:4e:f8:a9:df:ec:
                    a9:ba:7a:96:38:44:07:93:49:0a:6e:66:ab:9b:27:
                    cc:54:2f:68:0a:c5:51:ae:66:d1:35:44:67:18:47:
                    74:14:b4:45:59:3e:5b:2a:be:c3:cb:22:89:fa:28:
                    39:97:ff:c5:6a:97:d4:3a:88:a1:c4:a6:94:0b:a8:
                    1e:64:af:21:73:9b:43:81:bb:62:da:eb:f2:fc:c9:
                    96:08:5d:0f:91:1a:ee:3a:1f:47:e5:30:b0:17:3b:
                    23:e1:40:11:fc:a7:62:ab:a3:40:29:21:64:3d:e3:
                    03:50:5f:6e:04:9a:7a:68:61:f9:9a:cc:14:ca:ef:
                    fe:dd:42:05:1c:9d:2a:53:b2:75:dd:fa:b6:92:85:
                    74:b6:b1:5a:d1:a1:b5:a1:0b:13:f4:20:5c:de:4c:
                    e1:97:93:47:99:27:30:80:1a:7c:54:f5:33:bb:85:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F1:E6:3E:E1:E1:95:69:74:49:28:6A:80:A1:CC:7E:66:95:9E:24
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/6_HmPuHhlWl0SShqgKHMfmaVniQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:270::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:69:26:56:a3:62:78:a0:08:8a:32:36:b0:e6:4b:9e:79:
         52:5d:c2:b1:26:3c:e6:98:c9:53:01:4e:9e:c1:41:9b:9b:a4:
         5e:30:8c:22:44:3c:a3:bb:bf:08:a2:dd:3b:d8:59:ab:a6:48:
         4f:74:a2:cb:d0:9e:c4:43:84:fc:0e:93:f1:b5:f1:d1:f5:7d:
         c9:14:da:38:88:b5:c7:0c:38:4a:2f:d4:36:cf:22:dd:4b:9c:
         5a:a3:6e:d9:46:46:eb:7d:f7:2c:1f:7c:81:75:9e:48:10:65:
         a0:0e:0d:ba:f6:f5:e3:91:44:f2:77:94:ff:cf:c4:72:0f:d9:
         f0:93:0d:e2:a7:f2:c7:f2:2e:c5:dc:ad:f0:cb:bb:f4:3d:8b:
         37:55:66:71:3b:63:58:4c:4f:ce:1c:fd:f2:cf:b8:84:5c:a0:
         e7:15:aa:ae:d6:77:ea:aa:88:8a:f2:65:7d:92:1c:09:6b:11:
         e2:39:e4:02:5f:4d:9c:25:89:2a:31:b8:42:ae:22:a7:03:4a:
         5e:1a:99:a1:43:33:67:4a:51:83:d6:7a:5a:ca:2e:a5:df:ce:
         bf:59:0f:98:9b:31:6e:50:4e:e9:b3:0d:9c:27:38:03:7f:5c:
         23:eb:75:15:93:71:23:f3:96:ab:ed:c3:2b:01:0c:29:84:ff:
         ce:88:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----