Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa
File:                     rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa (raw, json)
Hash identifier:          1ggXdl4LsKtgG9n7KW9aAkcIVW9W/jS+65czegsI90g=
Subject key identifier:   AD:36:16:A4:5E:7F:77:E9:77:29:CF:C0:8F:55:A4:5D:66:3F:94:2E
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C4F7CFFF0A3307B18AD461F77749CD993
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa
Signing time:             Sat 09 Dec 2023 16:50:41 +0000
ROA not before:           Sat 09 Dec 2023 16:50:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216396
IP address blocks:        2a13:ef46:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:4f:7c:ff:f0:a3:30:7b:18:ad:46:1f:77:74:9c:d9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec  9 16:50:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad3616a45e7f77e97729cfc08f55a45d663f942e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:64:3b:ae:9e:c9:11:38:d5:75:2d:71:eb:
                    0a:a7:bf:87:26:33:01:00:f2:16:17:82:9d:e9:ca:
                    8d:26:81:72:7a:2b:21:28:17:e1:a9:25:c8:e2:39:
                    12:a6:da:27:4b:91:31:79:bb:d5:3f:0c:6b:e6:b5:
                    f7:5a:5c:8b:e4:c0:6f:43:93:77:01:70:2f:96:9d:
                    dd:fd:42:3b:ed:c2:bd:04:92:2a:17:12:4e:1d:3b:
                    73:9a:1f:a1:36:ee:64:18:85:8c:93:ae:84:89:ac:
                    a0:01:f3:b6:bc:a7:b8:22:db:8d:cb:a0:3d:fd:c6:
                    01:b8:2d:ac:77:65:da:24:d5:cf:84:cd:e5:bd:a0:
                    a3:b1:29:09:82:54:2e:c0:82:74:f8:4f:5f:af:e5:
                    50:d9:47:ad:ef:9c:32:0e:bb:e0:5a:16:d9:d7:a4:
                    8d:16:0e:ea:fe:b8:ad:a6:92:dc:d2:81:78:dd:fd:
                    97:0c:97:1b:01:c1:23:40:ad:b3:1d:0b:f5:8c:6c:
                    35:e8:f6:7f:2a:34:65:99:48:42:1e:b4:11:92:a9:
                    9f:8a:c0:ea:1f:c7:c4:82:fc:69:a5:de:2b:b7:a9:
                    f0:76:f9:55:22:4f:49:46:89:65:a7:5b:55:20:e8:
                    b8:00:c6:92:a6:de:fa:35:d0:c1:a9:d0:02:6d:c0:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:16:A4:5E:7F:77:E9:77:29:CF:C0:8F:55:A4:5D:66:3F:94:2E
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef46:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:1b:d2:42:a8:26:97:26:cb:06:f4:01:af:2b:aa:ed:c0:
         f3:c5:cf:fa:2a:20:42:e6:7e:c2:20:22:e1:5f:ed:0d:10:e8:
         2f:9c:5f:f3:f4:57:28:75:29:31:61:d1:98:07:ad:d3:02:60:
         30:93:04:d9:b5:bd:96:36:cc:49:81:67:eb:c0:5f:89:42:d9:
         5d:0b:63:c1:16:08:d4:7c:92:54:e3:c5:b3:fa:34:60:01:19:
         05:b8:23:4b:82:b5:07:cb:23:5e:1b:e3:a8:f2:41:ab:21:df:
         f4:6e:8f:b1:9e:f6:28:1e:a4:29:97:9b:5e:65:a8:6c:1b:99:
         a0:60:f3:3d:f3:3d:af:2b:28:96:cf:a0:de:48:12:bb:3c:6c:
         51:7a:cb:c8:3c:72:26:2a:1d:78:52:c5:66:59:32:a8:f1:54:
         27:82:d1:35:2a:f9:b8:25:dc:42:a2:6a:6a:03:e4:b6:8c:00:
         0f:0d:ea:0a:3b:20:8d:e1:68:2d:07:c6:73:c9:36:8a:3e:a5:
         94:f8:27:b4:92:3f:97:fd:a2:47:56:a4:f4:a8:be:1a:84:ee:
         be:42:0f:fe:52:7b:4d:fb:52:80:d7:2a:37:83:4f:47:d5:9a:
         fe:e7:a9:ba:41:27:ce:b6:d4:40:16:e4:92:1b:70:24:68:91:
         4a:a2:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----