Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/JXXVQlwTnZg-FWGn0xJAwiTPJxI.roa
File:                     JXXVQlwTnZg-FWGn0xJAwiTPJxI.roa (raw, json)
Hash identifier:          izWTQ8RRhraEN9rEvc9r9ItDewRTPCQxnK1TAtMBn9E=
Subject key identifier:   25:75:D5:42:5C:13:9D:98:3E:15:61:A7:D3:12:40:C2:24:CF:27:12
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       018921CA425B9A3ED1D0EE136DB60DE6CA72
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/JXXVQlwTnZg-FWGn0xJAwiTPJxI.roa
Signing time:             Tue 04 Jul 2023 16:44:10 +0000
ROA not before:           Tue 04 Jul 2023 16:44:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202239
IP address blocks:        2a0f:85c1:211::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:21:ca:42:5b:9a:3e:d1:d0:ee:13:6d:b6:0d:e6:ca:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Jul  4 16:44:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2575d5425c139d983e1561a7d31240c224cf2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:5b:3d:f7:cd:42:fb:2f:36:8d:14:90:db:
                    4e:86:23:01:98:9d:e9:57:07:c9:5f:7a:00:55:29:
                    bd:31:01:02:5b:d7:41:ec:56:c6:e3:c8:4f:ca:89:
                    6c:eb:11:e0:dd:77:95:a3:d7:fb:6f:a9:b7:51:31:
                    8e:01:63:61:45:1f:03:50:f0:8f:6e:5e:a0:9a:1d:
                    6d:cc:31:1e:ae:a8:6d:21:fc:2b:e4:81:ce:90:ab:
                    10:b1:a5:58:1c:83:66:87:e8:44:2c:54:c7:a7:9e:
                    a9:f3:38:13:ed:7a:0e:5e:6d:e9:f5:86:f4:0a:c8:
                    11:1a:fb:ca:ad:1a:93:dd:ff:4c:81:1b:c8:bf:ce:
                    2d:50:22:cb:7d:a2:49:2d:f6:f9:0b:2e:bd:b0:1b:
                    3e:fc:88:2f:9f:dc:88:81:48:09:33:96:65:8a:af:
                    77:59:61:47:a0:a5:2e:33:94:0c:37:3c:74:26:53:
                    f0:63:b3:ce:30:de:e3:4f:15:90:f1:ba:11:29:29:
                    c2:7e:b9:f6:13:91:7b:90:e2:c5:b5:da:31:47:60:
                    6a:8d:2c:5a:7e:91:0d:62:b3:50:3c:14:83:1b:0f:
                    82:96:14:f8:aa:92:69:5a:da:a7:68:67:d9:c3:58:
                    41:67:f7:46:09:97:27:07:57:71:38:73:4f:7e:c9:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:75:D5:42:5C:13:9D:98:3E:15:61:A7:D3:12:40:C2:24:CF:27:12
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/JXXVQlwTnZg-FWGn0xJAwiTPJxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:88:83:b0:08:e3:b6:f9:eb:4b:81:30:21:e4:ab:9b:85:
         ec:65:a2:fb:0f:1e:9f:22:9b:4d:52:de:f4:58:b7:52:c5:db:
         f5:7f:86:14:3f:8e:38:d0:b0:27:12:b3:df:c8:25:86:aa:ae:
         02:83:b2:82:47:ea:d5:48:0a:5e:e7:b9:0f:1c:2d:11:aa:f1:
         df:cd:bc:06:40:4d:34:6f:b0:e7:77:ce:a8:ad:1b:97:16:3b:
         4c:2a:28:1b:f2:9b:55:07:e3:68:15:42:ad:50:ec:26:34:22:
         5e:65:a0:57:4f:b1:bf:b2:56:f9:cd:36:9f:b4:b1:1c:47:1d:
         77:be:c4:c9:90:d8:ad:5e:1c:d5:90:cd:30:98:44:df:50:47:
         2d:97:73:74:dc:18:35:3b:5e:cf:6f:8f:b8:56:bc:53:b6:11:
         84:af:de:fc:36:00:05:3d:0d:11:66:10:fa:bb:29:07:bb:fa:
         c1:37:e4:f8:29:bd:04:5e:68:cd:b5:3e:5f:77:1b:ce:e5:de:
         fb:cb:a3:30:77:03:7d:58:0e:d7:41:67:9c:94:b2:4a:4b:98:
         27:17:c9:38:8b:23:c4:2b:3c:b9:a7:7b:e5:7e:a9:b9:39:37:
         73:99:48:fb:b6:bd:bc:1e:83:fb:5b:db:08:96:0a:00:d6:c0:
         c3:62:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----