Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa
File:                     v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa (raw, json)
Hash identifier:          cUnxFs8/ItsIv+X+YpAJHR09CMVKn6T7EVV1k7xhbX0=
Subject key identifier:   BF:9A:DD:DD:79:D4:DD:9A:A6:9E:A2:FB:D5:08:97:5A:86:85:A4:74
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018BFE41DC916A3CDF1D67658596C777BCBA
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa
Signing time:             Thu 23 Nov 2023 22:16:51 +0000
ROA not before:           Thu 23 Nov 2023 22:16:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215978
IP address blocks:        2a13:ef44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fe:41:dc:91:6a:3c:df:1d:67:65:85:96:c7:77:bc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Nov 23 22:16:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf9adddd79d4dd9aa69ea2fbd508975a8685a474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:65:b8:30:a3:6f:ab:86:d7:b9:c1:3d:af:
                    1d:b9:1d:68:ce:27:a8:22:51:01:d2:37:cb:62:1a:
                    a5:22:61:6f:ff:e5:69:2a:2f:74:8c:7b:43:f8:e8:
                    e9:dc:d9:5b:0a:3f:43:45:45:0f:88:90:53:db:9a:
                    4a:b6:26:57:79:d8:8b:24:88:9a:6c:33:d1:4f:1d:
                    74:b9:2e:89:0f:e4:29:ff:6a:2e:39:c4:16:67:1a:
                    7f:80:ec:4a:f6:66:9f:c7:4d:a6:cb:ee:09:33:2a:
                    3a:48:5a:c2:0f:e3:cc:d5:f6:5c:3a:6c:52:0a:24:
                    ba:87:ce:d3:2b:96:e7:2a:23:8a:24:2f:1f:ce:68:
                    0a:5b:b9:13:d9:a3:0f:d5:ae:b3:6d:9d:2f:b3:93:
                    59:41:24:23:66:1b:cc:74:ba:8d:8e:9d:ba:25:28:
                    42:68:b6:8e:79:8c:89:e1:00:cb:5d:33:15:75:01:
                    a8:76:94:86:24:39:38:d1:ff:41:79:45:fd:9f:0b:
                    ad:f6:ac:ec:c4:ce:13:bb:bb:09:c1:b4:6e:e8:ce:
                    77:26:f8:64:5d:44:b5:71:81:c7:67:cc:c6:eb:98:
                    3f:c2:8c:84:f7:e7:df:f2:0d:b7:56:df:6a:c9:30:
                    41:72:3f:a5:cb:6f:c7:f3:53:13:00:00:fb:f5:9c:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:DD:DD:79:D4:DD:9A:A6:9E:A2:FB:D5:08:97:5A:86:85:A4:74
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:a6:86:b2:33:94:da:86:c1:06:02:bb:f0:4c:02:87:c6:
         b3:73:af:bd:e9:de:f5:89:f8:10:82:27:56:51:1f:58:01:46:
         d0:6f:7e:79:40:81:63:96:9f:20:b6:5e:a4:2f:93:a4:64:04:
         cd:e7:97:b3:36:0d:d1:8d:69:3a:76:dc:ec:50:bd:90:53:fa:
         40:d1:11:f2:b2:74:f1:25:78:ae:97:29:f2:50:53:17:5d:e7:
         b5:c2:39:d4:83:d1:8a:34:af:1b:d9:81:b0:0b:e8:4c:c8:08:
         7d:da:41:42:06:1a:9a:60:5c:97:40:36:c3:38:bd:48:42:38:
         8a:99:23:49:72:47:d3:40:30:ad:8d:49:59:67:a1:06:8f:48:
         a0:a6:50:71:5b:8e:b1:d1:dd:cd:dc:59:08:fe:92:8c:c7:2c:
         0b:8e:45:1b:38:37:89:d9:e1:f5:48:89:3e:91:ed:8d:98:ad:
         85:ba:3f:95:9c:5c:8e:c0:e5:50:a5:cd:8b:fd:74:65:2a:da:
         20:e9:31:67:67:73:b4:1c:4a:f6:ab:68:b8:fe:33:da:3e:73:
         8f:3e:6d:7b:96:86:e4:b2:c5:86:1d:fa:75:3b:5c:0f:02:f1:
         ed:a2:4c:c6:79:6d:2a:ae:63:88:12:6f:11:22:bb:54:4d:9c:
         c0:d4:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----