Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/7DNMSiclRBcZeuHDtXhw8cvw654.roa
File:                     7DNMSiclRBcZeuHDtXhw8cvw654.roa (raw, json)
Hash identifier:          b+6y14Cid06pv2qKmr3JQ0sSDzGhdcP8BUGZxqpPkWU=
Subject key identifier:   EC:33:4C:4A:27:25:44:17:19:7A:E1:C3:B5:78:70:F1:CB:F0:EB:9E
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C4F7CFE518BD21E2C82025BE2EF9D992D
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/7DNMSiclRBcZeuHDtXhw8cvw654.roa
Signing time:             Sat 09 Dec 2023 16:50:40 +0000
ROA not before:           Sat 09 Dec 2023 16:50:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202685
IP address blocks:        2a13:ef41:b000::/39 maxlen: 39
                          2a13:ef43::/32 maxlen: 32
                          2a13:ef46:b00b::/48 maxlen: 48
                          2a13:ef42::/32 maxlen: 32
                          2a13:ef42:b00b::/48 maxlen: 48
                          2a13:ef43:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:4f:7c:fe:51:8b:d2:1e:2c:82:02:5b:e2:ef:9d:99:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec  9 16:50:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec334c4a27254417197ae1c3b57870f1cbf0eb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:d2:4d:1e:f0:f5:ea:eb:72:55:42:7a:ec:
                    8d:13:95:3e:b9:5b:49:07:ee:76:63:ad:e0:7d:95:
                    8d:3d:53:4d:b1:94:a4:a4:21:ef:1c:76:16:c4:da:
                    44:80:38:08:a8:a3:19:d6:5e:61:5f:b4:b3:ab:96:
                    1b:af:ee:31:02:b5:02:58:16:df:97:c3:d4:54:2f:
                    5a:2a:d6:54:3b:86:6f:62:ea:ee:95:12:c7:d2:77:
                    e5:17:b1:b5:d2:81:3e:f0:60:53:ee:b7:1f:cf:4b:
                    2d:1a:e3:57:b0:a2:18:32:f3:53:60:d2:1e:2d:52:
                    51:99:ac:4f:d5:76:66:1f:29:21:89:bb:9f:4e:c1:
                    16:e7:00:2f:82:71:3a:1f:eb:e2:97:a8:be:19:d3:
                    c6:4e:b7:78:55:2e:ee:29:64:a2:be:10:b3:ef:1a:
                    2b:2a:93:c4:a1:84:5d:84:d7:a4:ae:41:ef:64:e3:
                    1a:47:00:01:0c:e9:77:f9:ca:23:7b:ee:b5:e9:e9:
                    65:af:24:44:ee:2f:f1:c0:79:1e:7d:be:ca:f5:16:
                    b6:21:8d:b5:4b:73:a9:35:5b:67:47:08:86:01:14:
                    e1:c3:d6:b1:6b:06:36:1f:0a:e6:b3:f1:fd:2b:2e:
                    8b:97:68:8a:e7:ae:5b:53:fb:2f:ff:c1:c5:83:3a:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:4C:4A:27:25:44:17:19:7A:E1:C3:B5:78:70:F1:CB:F0:EB:9E
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/7DNMSiclRBcZeuHDtXhw8cvw654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/39
                  2a13:ef42::/31
                  2a13:ef46:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:56:69:9e:e1:01:ea:ea:ce:15:c4:49:47:2c:26:d2:d3:01:
         98:00:ff:70:a4:f0:e0:b4:cd:58:ff:0e:52:67:64:f3:f2:91:
         63:aa:af:aa:59:43:cd:50:ae:11:8b:07:62:39:40:6e:9f:ff:
         cb:80:09:86:ab:72:fc:64:e6:66:72:c1:0a:8c:cf:6a:03:7b:
         81:91:a1:38:bb:a5:87:2e:d9:49:66:61:1c:f1:f0:fc:ba:be:
         ef:52:4d:bd:fb:7e:4c:0f:4f:59:ab:73:b4:2d:4e:ce:37:2a:
         ea:27:b1:d9:b0:4b:ca:67:fd:5a:19:b3:57:8c:7c:5d:63:66:
         62:3d:b9:5e:60:9a:01:4f:98:bf:cb:a3:04:2d:b0:15:98:fd:
         01:c3:a4:61:7d:1e:29:4a:f9:a9:42:c6:cb:df:cf:23:05:41:
         9d:04:dc:f8:c7:b4:2e:9b:9c:58:0f:ff:e8:4b:04:68:f2:3c:
         f0:f5:e5:c6:70:09:6a:52:ed:05:93:ae:a3:5b:01:e9:15:f0:
         97:5d:a5:27:db:2a:18:bf:bc:08:9f:a0:e5:a1:87:37:6a:11:
         69:1d:42:45:c0:5a:95:33:a5:37:17:9f:e0:b0:c1:62:96:00:
         5b:76:ff:67:a1:69:7d:c6:a5:66:65:8b:e5:90:21:9c:ce:c8:
         08:b2:90:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----