Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa
File:                     n-lrFRPeAVzngpSgMVLvuKlUkkA.roa (raw, json)
Hash identifier:          EF4B2kPeJtuo+nZoMfiyCtgNoMWZ00ctT65WVHmGknM=
Subject key identifier:   9F:E9:6B:15:13:DE:01:5C:E7:82:94:A0:31:52:EF:B8:A9:54:92:40
Certificate issuer:       /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial:       018572C38BE8D1E4827FB925CB7AC538BA0B
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa
Signing time:             Mon 02 Jan 2023 13:54:55 +0000
ROA not before:           Mon 02 Jan 2023 13:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207267
IP address blocks:        2a0f:9247::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:8b:e8:d1:e4:82:7f:b9:25:cb:7a:c5:38:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
        Validity
            Not Before: Jan  2 13:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fe96b1513de015ce78294a03152efb8a9549240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:60:f6:7b:e9:72:01:ba:90:a6:7e:32:a8:
                    03:4e:e2:8f:2f:37:a9:5a:18:53:3b:d7:a4:0a:7a:
                    ec:ad:bb:8d:12:b7:a9:18:77:a0:c2:68:c2:a6:ca:
                    01:33:10:0c:17:d8:96:9d:91:99:ea:0f:e5:2b:58:
                    dc:11:fa:52:c7:69:b0:b7:88:bc:26:c1:4d:90:50:
                    92:15:a9:70:ec:75:f0:e5:23:b3:25:0b:e0:00:dd:
                    cb:dd:80:9f:77:5c:b3:c2:dd:35:71:06:2e:79:8c:
                    0a:51:b5:a7:90:81:bd:8a:a0:58:e2:05:02:e6:60:
                    e2:ed:a6:db:0c:50:c1:d4:25:c7:ba:77:8e:1c:a6:
                    8e:bd:7e:a7:f9:7c:fd:b7:16:30:82:ce:ff:fa:d2:
                    a5:a4:5f:96:c1:f2:03:f8:ec:13:77:31:a3:f1:83:
                    54:aa:a7:8d:35:f5:36:c9:26:c9:ac:9f:70:18:77:
                    cc:5e:d3:61:e0:8b:30:96:04:e8:fa:97:a7:ce:4e:
                    16:42:00:4f:4b:2f:b7:fd:bb:0d:9c:3f:2d:e1:6a:
                    a9:8c:56:e2:5b:d8:57:8f:09:c1:04:7d:c6:8a:3d:
                    10:74:9e:4e:49:d4:46:d1:53:bd:97:ee:3e:bf:e7:
                    3c:b5:76:64:f0:eb:75:2c:f9:c8:d0:6d:25:3c:f6:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:6B:15:13:DE:01:5C:E7:82:94:A0:31:52:EF:B8:A9:54:92:40
            X509v3 Authority Key Identifier:
                keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9247::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:38:96:a0:21:37:eb:a5:0c:b7:93:40:27:cd:0e:97:1e:
         51:86:03:d0:b7:e4:d4:9e:6e:6e:44:59:ff:fb:a2:c7:1d:d2:
         8d:d9:5a:46:61:43:f0:88:06:dc:b7:b9:5c:82:95:73:1b:20:
         56:61:79:28:bb:ce:8e:f1:a9:56:a3:d4:e0:e9:00:d1:da:98:
         e2:32:61:cc:74:1f:26:93:da:2f:8f:fe:f5:97:30:0e:3c:06:
         2a:fb:f1:63:ef:cf:f4:f6:5e:86:24:c9:7a:e4:91:6c:e0:18:
         d0:a4:ba:b9:bf:fe:ae:55:c6:8b:a6:ec:b7:2b:26:be:69:79:
         e4:51:3a:da:da:a1:ab:c2:10:eb:a8:0c:ac:f4:6c:74:24:77:
         09:2f:14:e7:1f:46:e5:08:ea:47:87:eb:74:fa:54:3b:21:64:
         42:fd:b2:a7:c0:01:8d:12:3d:90:5d:69:88:5d:cc:18:ab:ae:
         9b:d5:af:45:9d:f9:18:66:31:c6:cd:9c:96:53:78:ee:ca:03:
         11:7b:27:6f:07:94:b9:3d:bf:9b:f5:16:22:9f:8a:c1:cf:a7:
         ff:c2:d8:06:b3:99:dd:dc:83:a9:6b:52:39:64:eb:bc:5d:db:
         54:59:9a:28:70:1a:64:82:a5:b8:f8:6a:71:1c:08:62:b4:aa:
         af:ae:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----