Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa
File:                     J84vfTEmt9In1sWBVB17KhLEvSU.roa (raw, json)
Hash identifier:          OHWH7AwVpVtA2aRk2+01eqDDSXs7qUA61OlZNdu0DaE=
Subject key identifier:   27:CE:2F:7D:31:26:B7:D2:27:D6:C5:81:54:1D:7B:2A:12:C4:BD:25
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C7805F7945F6E74B2D9FCE04C109D9DFC
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa
Signing time:             Sun 17 Dec 2023 13:45:06 +0000
ROA not before:           Sun 17 Dec 2023 13:45:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216289
IP address blocks:        2a13:ef44:f006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:05:f7:94:5f:6e:74:b2:d9:fc:e0:4c:10:9d:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec 17 13:45:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27ce2f7d3126b7d227d6c581541d7b2a12c4bd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:08:dc:d4:1a:34:81:81:1b:8b:2a:b0:8d:
                    e1:05:96:84:03:82:77:e0:58:1e:1a:b2:f7:45:13:
                    a1:44:57:d5:8a:55:5f:19:70:cf:68:ab:94:da:4c:
                    a5:e5:14:a4:9c:13:12:54:e4:cb:e2:a4:3f:5b:a1:
                    a4:9a:c3:04:59:0f:81:28:63:d0:d5:e2:f5:c2:2a:
                    71:9c:8c:04:3a:31:1a:99:b5:96:00:2c:aa:9e:61:
                    67:7f:7f:28:ca:3e:2f:23:fc:10:97:a3:15:01:48:
                    f5:83:94:03:f4:f3:ef:17:5a:a0:97:12:c5:2a:be:
                    d8:67:3c:ed:fe:03:08:d6:ee:18:31:b4:c5:38:6a:
                    14:9b:bd:68:af:e4:5d:e8:84:33:d1:61:9a:5f:5d:
                    33:0a:71:05:fd:ad:32:93:77:c5:c3:e2:0b:a6:60:
                    b2:da:72:47:45:de:2f:29:b4:b4:5f:8c:67:7d:9c:
                    32:4d:17:83:57:7a:b2:ca:06:a4:b5:cd:79:95:c3:
                    bb:1b:81:7f:8a:e6:5f:58:03:4a:22:8c:59:13:d9:
                    56:68:43:c2:00:d0:c2:29:84:6e:00:c8:2e:ec:08:
                    a3:36:0e:59:4b:4f:0d:f7:74:64:42:06:b9:87:16:
                    fc:95:51:ed:6c:da:55:a7:f7:61:2f:76:14:b3:c5:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:2F:7D:31:26:B7:D2:27:D6:C5:81:54:1D:7B:2A:12:C4:BD:25
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f006::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:32:f0:8e:ce:62:66:59:f8:e8:47:0a:fd:d7:b0:12:f7:0b:
         d6:4e:e4:6b:ee:f0:b8:c8:26:f2:46:e2:48:c8:7a:ef:ef:ce:
         df:b5:a5:cd:d7:99:5a:c5:2b:cd:1d:c8:ab:c6:13:0b:1b:6f:
         08:af:41:e4:54:f8:f9:87:7e:b0:e5:70:6b:3f:9c:1b:e6:b3:
         79:4b:a3:2e:49:24:fd:75:fd:5a:62:36:38:24:77:23:d5:4d:
         0a:fe:96:2c:45:49:22:e9:78:f7:45:70:fa:7f:ac:81:07:e5:
         25:59:a5:84:78:cf:6b:bf:71:07:09:2a:ee:fd:76:81:1f:0f:
         11:cc:6d:ba:34:ff:bb:bc:42:0b:2a:65:86:4c:09:c8:8d:dc:
         07:7e:05:75:40:b0:61:c6:36:24:24:d6:27:b6:e0:18:76:a7:
         b7:92:1e:fc:4e:9c:83:79:21:15:12:19:17:d0:3d:8d:40:9e:
         92:d5:e1:2a:d0:73:bd:bb:65:cf:ab:ab:67:c6:b7:7f:5a:53:
         9b:f3:3c:f1:39:79:12:f7:b0:5c:97:47:d5:b3:07:53:86:5f:
         be:25:c8:a1:c0:85:09:82:50:05:d5:dd:9b:29:c5:39:91:26:
         6c:9a:02:29:73:ff:8c:2f:9d:3e:b6:14:c4:16:0c:6a:fe:ca:
         ae:3f:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----