Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/Rz91kfRAfIZsFgh7v5gb1pa_vNs.roa
File:                     Rz91kfRAfIZsFgh7v5gb1pa_vNs.roa (raw, json)
Hash identifier:          6ANiNrJIU9HW77f6oDj/8d7ymmmubuybrwHWs79I77o=
Subject key identifier:   47:3F:75:91:F4:40:7C:86:6C:16:08:7B:BF:98:1B:D6:96:BF:BC:DB
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018BEDC6A96BDD04E3E0DB52568E2F76BF6C
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/Rz91kfRAfIZsFgh7v5gb1pa_vNs.roa
Signing time:             Mon 20 Nov 2023 17:28:21 +0000
ROA not before:           Mon 20 Nov 2023 17:28:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202685
IP address blocks:        2a13:ef41:b000::/39 maxlen: 39
                          2a13:ef43::/32 maxlen: 32
                          2a13:ef42::/32 maxlen: 32
                          2a13:ef42:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:c6:a9:6b:dd:04:e3:e0:db:52:56:8e:2f:76:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Nov 20 17:28:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=473f7591f4407c866c16087bbf981bd696bfbcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:83:1e:e4:c6:7d:06:2b:2e:ac:70:5c:54:
                    df:fe:50:93:d2:ea:12:08:93:1b:bc:a6:1f:d5:0a:
                    ea:5b:1b:7d:b1:a0:46:d2:98:79:ff:72:d3:5f:33:
                    59:bb:bf:66:7e:6b:f4:87:c6:d2:6a:a3:cb:f8:c7:
                    c6:bd:5f:94:f3:1e:db:9c:ea:68:be:dc:5a:5f:71:
                    d7:f8:08:fc:88:e8:6e:47:c1:bf:91:c3:1a:fc:5a:
                    9b:40:24:25:80:1c:2e:ec:8e:48:5f:3a:91:79:9b:
                    7b:98:08:d9:bd:77:4a:2c:4a:84:86:90:d5:03:d0:
                    cd:c2:48:26:19:d5:3d:77:99:be:98:35:c7:a5:48:
                    56:0a:58:64:75:1d:5c:f1:7d:2d:ec:42:f8:77:5e:
                    05:6c:42:2d:54:33:2e:9a:33:42:36:01:e1:cd:50:
                    5f:07:30:ef:1f:5d:69:6e:98:da:43:c2:59:c0:95:
                    0f:78:21:aa:d3:e2:95:b5:6a:b4:13:f7:d8:98:86:
                    73:f2:92:99:c4:67:11:2c:49:24:5e:75:0d:62:f5:
                    29:5a:e9:ab:2c:66:54:b5:a1:f6:78:1c:71:36:1f:
                    c2:b8:31:13:d0:97:87:c6:86:3e:00:63:f3:a0:03:
                    60:0b:c6:64:d1:8a:8e:e5:0d:f5:8b:2a:f2:bc:58:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:75:91:F4:40:7C:86:6C:16:08:7B:BF:98:1B:D6:96:BF:BC:DB
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/Rz91kfRAfIZsFgh7v5gb1pa_vNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/39
                  2a13:ef42::/31

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:17:3e:36:e3:91:47:65:03:cb:b0:86:8a:d4:8d:1b:27:
         d0:1a:49:4e:a2:89:23:1d:30:28:ae:b1:bf:d3:3f:36:f4:0a:
         9f:0b:a1:c6:b4:b3:a4:39:ae:4f:c4:87:55:00:bc:1a:04:23:
         a7:2d:7f:5c:9c:c6:40:50:ac:22:f3:e9:ab:79:b6:c4:22:c7:
         73:02:e1:b7:ab:2c:a8:79:52:b5:7b:bf:30:17:de:3f:eb:f0:
         ef:b3:96:1f:b7:6f:8b:f4:3a:a1:de:3d:2b:7a:ea:1e:96:54:
         98:32:62:a7:43:fd:f2:1c:5e:01:ec:b3:0b:d7:e8:33:f7:4f:
         a7:7e:88:86:09:f0:08:f2:4d:27:fa:10:7d:48:13:13:3d:74:
         16:9d:3d:02:16:fa:7f:ea:c4:63:53:18:f6:49:55:3a:65:49:
         16:94:2f:21:f7:8f:68:3a:0d:74:44:01:35:4c:55:32:c5:14:
         a4:a5:3e:80:10:f5:9b:eb:92:38:8a:a3:b0:87:f4:3b:89:19:
         37:dd:9a:f2:7e:df:e6:4c:01:6b:60:fa:b8:25:a7:67:af:ab:
         aa:12:02:f1:81:29:55:24:a2:2d:e6:27:f8:b4:81:96:54:d7:
         a7:72:6f:3c:7c:72:fe:08:c8:16:be:92:2d:fb:91:d1:52:20:
         a9:c6:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----