Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/_uJTq_Iz1sblNTOcf4uuuVTko2k.roa
File:                     _uJTq_Iz1sblNTOcf4uuuVTko2k.roa (raw, json)
Hash identifier:          cNCtl8qTCWq85m4QW/uhucXrQVkfTdBXzZP8FdX1mug=
Subject key identifier:   FE:E2:53:AB:F2:33:D6:C6:E5:35:33:9C:7F:8B:AE:B9:54:E4:A3:69
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C73628777219D153CD02B3036BCEEAFE8
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/_uJTq_Iz1sblNTOcf4uuuVTko2k.roa
Signing time:             Sat 16 Dec 2023 16:08:06 +0000
ROA not before:           Sat 16 Dec 2023 16:08:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60858
IP address blocks:        2a13:ef44:f002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:73:62:87:77:21:9d:15:3c:d0:2b:30:36:bc:ee:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec 16 16:08:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fee253abf233d6c6e535339c7f8baeb954e4a369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:e6:5b:18:ab:7a:5c:54:fd:cb:e9:29:03:
                    3c:ea:fb:c6:84:bc:d2:1f:54:b5:62:85:15:57:0b:
                    56:a8:b7:6c:7e:45:2a:cb:bf:23:33:41:a5:48:c9:
                    1f:a2:8c:36:4d:ef:2f:77:4f:50:30:4b:fd:78:61:
                    ba:e3:51:36:bf:dc:6a:5e:44:d0:61:be:92:2f:ff:
                    ab:63:16:5f:08:16:84:68:3e:a3:ce:c7:77:69:71:
                    cb:a2:35:b8:bc:99:d0:12:41:89:58:41:86:6f:73:
                    ac:1a:2a:c2:02:fc:4b:13:89:df:a2:a3:58:c7:77:
                    51:9a:a8:6f:6c:b7:57:29:b0:82:b6:2a:54:16:5a:
                    d7:11:bd:9b:7f:56:11:d1:54:1f:51:ce:51:90:40:
                    ed:de:4a:30:70:91:54:12:3c:d6:b8:e8:17:8f:97:
                    cd:12:bd:cf:74:d8:82:70:91:6a:6e:b3:cd:f8:25:
                    92:cb:2b:4f:ba:a8:fa:9c:1f:32:a7:2c:4f:e0:7c:
                    39:2e:78:cb:86:12:1c:24:75:95:cc:ad:40:ab:06:
                    2d:f5:08:a2:9d:57:c8:f9:ca:d1:59:f7:f9:6c:52:
                    2e:b3:b0:74:a1:8b:14:1d:c8:5f:48:93:c6:ab:d4:
                    69:fb:e5:43:fa:09:ee:87:0b:ab:05:1f:51:2d:c3:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:53:AB:F2:33:D6:C6:E5:35:33:9C:7F:8B:AE:B9:54:E4:A3:69
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/_uJTq_Iz1sblNTOcf4uuuVTko2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:ca:bc:c4:be:8f:f8:7e:88:bf:e3:43:ad:38:bd:9e:2f:
         17:0e:f4:4b:bc:e5:6d:2f:91:1c:04:75:73:f1:c8:d8:47:44:
         d6:25:1b:8c:aa:e7:e9:42:a5:81:de:0f:dc:9f:1b:99:88:51:
         a2:54:d2:28:ef:f8:14:70:63:9e:ea:a4:e2:fa:4c:3d:fa:cd:
         9e:6d:ef:4b:ef:5c:d9:80:b9:80:5d:77:bf:99:58:01:b2:07:
         df:6b:58:21:fa:f2:f4:5d:41:37:d0:f7:3b:ce:a5:f5:28:f6:
         80:66:e9:53:1b:6e:27:05:f7:59:ba:27:43:1a:5c:f9:9d:94:
         59:01:19:28:72:c4:3b:9c:a4:56:2d:21:63:27:91:83:cb:9d:
         34:01:70:cc:91:df:78:69:d8:03:07:51:e5:23:b2:5d:92:ad:
         4e:44:bf:9b:87:6c:3c:ed:71:7b:15:5b:ea:42:47:1b:96:c5:
         1e:b4:59:a9:c7:7f:54:aa:f6:f7:d3:4e:91:49:88:3f:48:27:
         61:f3:7f:e5:28:63:0f:5d:75:32:6f:3b:dd:36:09:aa:d3:d8:
         28:48:7f:f3:37:05:4f:df:46:ad:50:fb:d0:a4:f5:b5:84:24:
         78:27:74:d7:d2:f3:8d:e4:bc:9d:6f:dc:e4:32:89:41:2c:31:
         48:a2:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----