Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/h_mlijMydOtgy-Ebfv4_tnQ2gDE.roa
File:                     h_mlijMydOtgy-Ebfv4_tnQ2gDE.roa (raw, json)
Hash identifier:          dqy41FkUplBF7iCvk/Kom7zKqS1ux3GG3IFlteAQAVs=
Subject key identifier:   87:F9:A5:8A:33:32:74:EB:60:CB:E1:1B:7E:FE:3F:B6:74:36:80:31
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       01856D9D4DF172AB7A7F25076152792AFBBF
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/h_mlijMydOtgy-Ebfv4_tnQ2gDE.roa
Signing time:             Sun 01 Jan 2023 13:55:03 +0000
ROA not before:           Sun 01 Jan 2023 13:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210202
IP address blocks:        2a0f:85c1:50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:4d:f1:72:ab:7a:7f:25:07:61:52:79:2a:fb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Jan  1 13:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87f9a58a333274eb60cbe11b7efe3fb674368031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:0f:4d:86:b6:a3:9b:d7:f6:d4:8b:ba:b3:
                    e6:0d:e8:dd:23:aa:01:51:2a:69:fa:30:27:8a:9b:
                    0e:11:97:75:e5:32:31:9d:31:82:17:6a:60:26:8e:
                    44:b3:f3:49:0c:89:2a:3c:d4:99:3b:4a:91:fe:45:
                    0e:95:d7:d3:8b:fd:ce:51:dd:76:6f:44:c9:c3:cf:
                    c3:d7:e2:51:78:9d:33:2d:ec:54:41:bc:fb:a7:6f:
                    e7:00:14:82:da:13:89:2b:3d:2f:17:25:41:c7:97:
                    f7:28:40:17:96:de:44:f8:80:6d:70:42:e6:6b:d6:
                    5a:50:a8:b1:51:c3:98:76:5b:41:2d:67:95:84:8e:
                    f3:75:95:24:20:7f:84:85:22:3f:3f:3d:be:ea:18:
                    a9:11:1e:71:8a:0b:0c:d4:c7:46:b5:38:f5:51:d3:
                    ee:24:62:ac:a9:fd:f8:d6:7e:eb:48:ac:92:3e:03:
                    80:4d:f1:09:34:84:15:ca:d2:d1:32:f3:0c:24:d4:
                    c7:34:4c:3c:86:db:74:13:10:d3:4b:fb:16:0c:ac:
                    71:14:c7:61:c4:0a:51:c9:fa:6c:78:dd:b7:dc:0b:
                    32:c8:12:04:83:d1:ce:7c:4a:2f:c6:1a:e5:c7:de:
                    76:00:65:81:6e:3d:99:91:6d:5b:42:dd:6c:74:58:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:A5:8A:33:32:74:EB:60:CB:E1:1B:7E:FE:3F:B6:74:36:80:31
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/h_mlijMydOtgy-Ebfv4_tnQ2gDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:8b:50:6d:bd:51:3f:b9:f3:a4:af:88:82:07:a9:fb:b7:21:
         18:ac:65:7e:05:0d:26:35:b1:1d:8e:d8:06:6c:93:ec:04:3b:
         e6:1f:87:0e:ee:e4:d6:51:f9:1b:4e:67:5a:34:ad:5c:c2:8e:
         1c:3f:0e:26:d4:36:f1:0f:79:de:47:d3:64:f0:86:27:1d:1c:
         59:c7:90:ce:18:16:2e:bc:a9:08:b1:aa:ca:1e:26:38:cd:b4:
         80:0b:14:98:fa:64:a9:13:86:e4:f8:d5:85:a1:e3:c5:2f:8c:
         aa:29:0e:2b:ff:ae:c2:f6:1b:54:44:e6:39:44:42:f3:21:2b:
         ac:48:2f:06:f8:d7:88:88:94:3b:d6:ca:d0:a8:07:b5:fe:0c:
         ea:43:f6:82:3a:05:f6:07:47:9e:05:89:f0:99:db:7f:a9:f5:
         56:57:a7:b3:8a:5f:a8:af:96:50:2a:99:ae:d4:43:3a:fd:f8:
         98:3d:c6:12:d8:85:38:98:4a:5e:b4:b2:23:45:c6:e6:2f:d9:
         9b:f5:86:d9:d5:9a:8b:5e:45:5d:9e:f2:25:07:99:c9:38:8d:
         f3:28:fa:e3:c7:b3:9c:cc:cf:8f:2f:cd:ee:d5:f0:98:01:c8:
         6e:31:d5:1a:67:1b:dc:ee:83:4a:f9:da:75:34:cb:bd:16:49:
         73:35:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----