Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa
File:                     LD-JecaPcqqq0EAbchhA3r15W40.roa (raw, json)
Hash identifier:          KUWMI790ycc2cbHMuXRjOMf6pDBnohsTZHFooQwB+P0=
Subject key identifier:   2C:3F:89:79:C6:8F:72:AA:AA:D0:40:1B:72:18:40:DE:BD:79:5B:8D
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C7805F8893811568CBAF9517A21A67B79
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa
Signing time:             Sun 17 Dec 2023 13:45:06 +0000
ROA not before:           Sun 17 Dec 2023 13:45:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216398
IP address blocks:        2a13:ef41:e000::/35 maxlen: 48
                          2a13:ef44:f007::/48 maxlen: 48
                          2a13:ef45::/32 maxlen: 48
                          2a13:ef44:f003::/48 maxlen: 48
                          2a13:ef44:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:05:f8:89:38:11:56:8c:ba:f9:51:7a:21:a6:7b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec 17 13:45:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c3f8979c68f72aaaad0401b721840debd795b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:82:74:ae:7b:47:d8:4e:d6:81:eb:af:2e:
                    e8:9a:f4:21:47:79:0d:61:35:11:35:e3:71:94:be:
                    4f:d7:b1:b6:ee:7a:76:d1:50:84:0a:f5:57:b0:2f:
                    68:cb:07:63:64:82:04:88:12:ad:08:da:6e:57:d0:
                    3e:0f:8d:d3:b9:b8:6f:97:ec:5f:25:17:be:0c:06:
                    fc:58:77:f7:32:56:18:f1:99:ab:02:44:b5:50:92:
                    ee:33:de:6c:fd:04:88:a1:70:c0:69:6f:de:c7:51:
                    d1:c4:c0:73:e3:6f:0d:f0:d9:ad:c8:48:4a:e9:de:
                    6a:98:81:df:b9:82:7f:25:4f:50:53:94:c3:f9:76:
                    39:6e:2f:4d:ed:8f:45:32:a2:7f:37:b6:3c:89:e8:
                    79:5a:ff:09:81:88:60:56:05:89:86:a9:96:51:11:
                    4b:c6:95:d5:bc:16:19:c4:56:6e:89:c2:d4:3a:c8:
                    e5:29:43:bd:a5:5f:56:4d:6a:ad:36:c0:61:fe:2c:
                    86:a2:66:ce:f5:d6:eb:2f:98:63:ac:8b:cf:af:79:
                    af:1a:eb:52:4f:c0:16:51:55:bf:b1:9d:ef:f6:58:
                    29:0a:6e:e3:ae:f6:29:b0:f9:8c:0b:cb:36:e8:82:
                    b1:85:f6:c2:a4:09:be:2b:16:9f:36:b6:23:d0:db:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:89:79:C6:8F:72:AA:AA:D0:40:1B:72:18:40:DE:BD:79:5B:8D
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:e000::/35
                  2a13:ef44:b00b::/48
                  2a13:ef44:f003::/48
                  2a13:ef44:f007::/48
                  2a13:ef45::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:3b:e9:8e:d2:06:e8:c9:97:db:c7:48:14:62:2a:51:f3:
         3a:b9:e8:71:01:74:8b:fc:27:e1:a2:25:35:81:75:d1:cf:5c:
         96:5c:9c:e5:0e:ee:b9:37:21:fd:5a:b0:28:b3:fc:99:eb:4b:
         b4:71:d0:94:aa:ce:9a:c7:68:72:a8:9e:b6:4b:f0:d5:ec:d1:
         56:5f:68:71:e8:bc:a4:7c:b2:9d:fc:dd:e6:df:64:82:19:36:
         99:cb:c0:1b:a0:22:ef:96:99:78:db:c4:fe:00:38:e9:14:ba:
         3e:5a:f9:46:49:b1:78:05:29:cb:a2:8b:ce:64:89:fb:17:34:
         d0:da:a7:a9:50:de:ec:8d:c3:ea:8d:40:b0:3d:dd:a0:e4:e2:
         90:c3:fc:04:bb:01:d5:9b:25:cb:d8:32:06:fa:d7:fc:73:c0:
         5d:41:2f:6e:87:eb:b9:4d:b4:0d:f5:97:bc:09:3f:2e:00:77:
         de:c4:d4:61:5c:89:6b:c2:69:1a:bb:fc:6c:0c:1d:b9:de:4f:
         cc:95:0e:89:09:8a:c0:03:65:31:8e:cb:4d:a7:10:3e:32:53:
         e9:de:8c:64:37:8c:75:4a:22:68:94:c9:ee:12:2b:d9:ff:ec:
         72:c7:2a:d4:fd:1d:84:f1:1e:76:71:6c:8e:14:e2:7c:bc:35:
         05:bf:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----