Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/S065hcSVdnX7Z-ok1Jp5dMK2swQ.roa
File:                     S065hcSVdnX7Z-ok1Jp5dMK2swQ.roa (raw, json)
Hash identifier:          2p83rCF2W3yZxbOKkGOYuLurhC7yB2hXfqgOYy6t764=
Subject key identifier:   4B:4E:B9:85:C4:95:76:75:FB:67:EA:24:D4:9A:79:74:C2:B6:B3:04
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018BFE433E7518C646BB6253BDBF5A472CA9
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/S065hcSVdnX7Z-ok1Jp5dMK2swQ.roa
Signing time:             Thu 23 Nov 2023 22:18:21 +0000
ROA not before:           Thu 23 Nov 2023 22:18:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216398
IP address blocks:        2a13:ef41:e000::/35 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fe:43:3e:75:18:c6:46:bb:62:53:bd:bf:5a:47:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Nov 23 22:18:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b4eb985c4957675fb67ea24d49a7974c2b6b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:72:18:f1:34:54:a8:e0:2b:35:92:af:a9:
                    7e:02:f3:ae:49:65:e4:7a:b7:e0:28:16:e1:b4:26:
                    22:d4:bf:b8:35:82:6f:68:3d:2a:87:77:e9:83:f1:
                    d8:15:d4:d6:ea:68:9d:3f:ea:b0:32:bb:cf:8f:90:
                    03:f4:f5:54:b7:b5:43:37:06:17:b3:c7:be:a7:2f:
                    63:7e:10:65:e9:21:cd:81:80:63:9f:23:02:f1:02:
                    7b:c9:a2:d5:aa:35:f0:53:b1:b7:16:da:f5:69:09:
                    91:bf:b3:66:52:99:ab:26:fd:19:29:cd:5f:44:b3:
                    3b:ed:d2:c5:0d:0a:3a:3c:9a:b6:eb:33:3b:28:41:
                    63:8b:64:a5:a8:c2:50:05:a9:42:2e:3f:29:f3:08:
                    ce:4c:46:fa:97:73:c1:e6:3f:ff:4d:34:43:c6:66:
                    5e:63:79:3f:88:d8:39:02:3d:01:85:1e:42:30:48:
                    35:f6:9e:e3:8c:4e:6a:bc:aa:25:b4:87:7c:c2:46:
                    36:d3:77:2e:e0:48:64:59:35:d0:63:a0:4c:fc:3f:
                    bb:b1:bd:cd:9f:3d:8c:db:2b:77:7b:0f:5e:36:07:
                    57:14:6a:b3:a1:86:62:50:ff:af:e6:92:e9:38:68:
                    f4:81:38:f6:a1:89:0c:0b:68:87:67:f1:d1:a5:c2:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:B9:85:C4:95:76:75:FB:67:EA:24:D4:9A:79:74:C2:B6:B3:04
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/S065hcSVdnX7Z-ok1Jp5dMK2swQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         88:35:a7:f6:ca:3e:79:cd:a5:77:a6:69:db:24:76:54:dc:8f:
         f0:c2:20:e5:af:c3:8a:95:b7:c6:d5:63:b7:df:74:f0:ab:6b:
         d4:e1:53:1d:2a:87:e1:7c:93:48:5d:b1:6f:cf:1c:27:52:f7:
         95:f2:88:d7:7f:0d:26:50:09:f3:d1:8e:8d:e5:5a:b0:bd:f9:
         e6:ac:e3:bc:66:40:05:ca:b4:58:de:48:0f:24:aa:fc:51:fb:
         bb:b5:c8:83:48:2a:2a:d5:36:a4:1f:4b:42:de:ed:5c:3e:0c:
         ed:70:fa:d9:e1:6e:5d:96:47:6a:f5:9d:6f:f0:c9:a3:15:80:
         98:df:df:cb:dd:b1:78:cc:a5:cb:3b:d1:c0:c7:15:99:b8:0e:
         76:58:15:aa:3d:10:cb:01:4f:0a:5f:5e:7f:46:ba:d9:1c:3c:
         f2:2f:23:cc:a7:39:0a:e6:dd:fa:22:54:fc:3e:bb:d6:94:9c:
         e1:07:28:6a:ca:a0:68:98:ba:43:92:c7:12:cb:cf:fe:7d:ea:
         11:cf:0d:ed:03:b6:2b:2f:5d:61:e1:9e:fd:27:c6:56:e5:59:
         24:81:06:d2:d6:69:b1:49:3c:c4:00:7b:5f:10:48:1d:27:f9:
         9c:29:89:49:a9:0b:50:cf:3b:04:26:d4:fa:91:88:9c:75:3c:
         34:c0:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----