Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/mKijT1wdApoYyGGVd_bnPEXf9js.roa
File:                     mKijT1wdApoYyGGVd_bnPEXf9js.roa (raw, json)
Hash identifier:          BZ98jDiO0z0XulXB+jVXyTWWyBHKuojWu+Sc2JNkVBI=
Subject key identifier:   98:A8:A3:4F:5C:1D:02:9A:18:C8:61:95:77:F6:E7:3C:45:DF:F6:3B
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       01840001DA193F29DA2ABE0E9D275EAE452E
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/mKijT1wdApoYyGGVd_bnPEXf9js.roa
Signing time:             Sat 22 Oct 2022 14:03:52 +0000
ROA not before:           Sat 22 Oct 2022 14:03:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207451
IP address blocks:        2a0f:85c1:213::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:00:01:da:19:3f:29:da:2a:be:0e:9d:27:5e:ae:45:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Oct 22 14:03:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98a8a34f5c1d029a18c8619577f6e73c45dff63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:9c:55:c9:91:5f:9a:94:ef:b1:5a:38:d4:
                    3c:0a:f2:e2:2e:85:38:2a:e3:7d:35:07:5b:b7:ef:
                    78:d7:7d:ca:01:6c:44:7b:96:2b:6d:c7:17:97:d2:
                    9d:fb:da:2f:26:ff:e5:2d:bc:1b:44:39:92:1c:86:
                    09:98:22:3b:08:4b:be:64:de:73:bb:15:f4:b2:11:
                    13:e0:73:0a:e3:b3:be:53:8e:a3:7a:67:5b:09:19:
                    ba:4a:64:72:d7:00:7e:fa:17:a2:b8:c8:3f:83:53:
                    f7:5a:09:2d:d6:05:35:cc:f1:62:87:21:4c:d2:c5:
                    27:9a:42:45:26:2c:5c:f9:fb:84:ad:e8:c1:72:a6:
                    60:e9:a8:a1:10:5f:86:67:a8:5b:08:c8:77:f2:89:
                    a2:d9:5a:b3:b0:e8:f0:69:bb:91:b5:d3:97:5a:9b:
                    61:0b:86:2e:4f:f2:69:42:d4:11:3b:a9:8d:25:64:
                    47:c6:12:0a:47:20:0f:6b:27:88:4b:38:e1:d0:a6:
                    e6:87:2e:2b:23:d9:6b:f1:d8:47:32:62:8b:d7:3d:
                    31:9e:26:01:48:89:57:b3:d5:d9:8b:a3:b4:a9:0d:
                    dd:6a:4b:3b:e2:85:6f:8a:df:a9:54:84:6b:e3:64:
                    7a:e9:85:8f:b2:0e:d2:ed:f4:db:d4:7c:0c:34:a9:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:A3:4F:5C:1D:02:9A:18:C8:61:95:77:F6:E7:3C:45:DF:F6:3B
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/mKijT1wdApoYyGGVd_bnPEXf9js.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:17:85:0a:f5:a6:df:dd:1d:42:f0:ad:8a:d4:1b:0c:dc:cc:
         9f:ed:b6:83:dc:66:34:7f:bf:bc:4b:ae:75:35:24:08:13:81:
         60:43:19:75:2b:94:fa:b7:c1:24:3f:b9:c1:8a:4f:e3:20:79:
         c3:7a:b5:ed:fd:5d:5b:a3:ef:1d:1a:5a:cc:6e:04:1b:65:9e:
         68:61:37:de:ad:e3:ef:1e:6e:c1:1f:90:e3:ec:cb:bc:51:fd:
         8c:e9:b4:ca:d6:98:36:c0:0e:6b:3c:89:33:a4:0a:4b:07:e5:
         90:54:4a:f2:78:ff:9c:4c:05:60:58:c9:a4:9d:80:8f:76:5c:
         68:f4:58:e4:ec:53:b0:f3:ac:ef:d1:b8:77:57:8c:e6:f2:54:
         f9:89:3b:02:04:55:ae:f8:e1:ae:d9:38:8f:0e:61:6e:c2:5b:
         9a:45:f3:b5:c9:a9:be:ed:7d:87:da:83:0e:cd:d7:11:f1:c7:
         2f:7c:23:1e:07:29:0f:7d:95:a8:a7:2d:be:ca:00:bb:33:5a:
         22:93:95:31:e5:92:ff:92:e1:2f:c6:fc:58:51:f6:8c:41:3d:
         a5:22:2b:78:5e:95:63:cc:81:5c:38:85:34:a1:f6:7b:86:54:
         2e:9e:71:da:20:23:8f:2f:17:f0:92:8b:01:77:91:77:48:fa:
         36:af:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----