Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa
File:                     Zd_BbmRztdATTgA1m9K3yLfmY3E.roa (raw, json)
Hash identifier:          d+FcDffGShtW1D3p4F/YLcTa6Rg4AFasZWJ72G0r2+M=
Subject key identifier:   65:DF:C1:6E:64:73:B5:D0:13:4E:00:35:9B:D2:B7:C8:B7:E6:63:71
Certificate issuer:       /CN=922fbdff15c9bec0fee7309be592e5d86dd9408a
Certificate serial:       01856FD4FA695DFC866F4FAC86E1C9D52BCF
Authority key identifier: 92:2F:BD:FF:15:C9:BE:C0:FE:E7:30:9B:E5:92:E5:D8:6D:D9:40:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa
Signing time:             Mon 02 Jan 2023 00:15:06 +0000
ROA not before:           Mon 02 Jan 2023 00:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49271
IP address blocks:        2001:678:dd0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d4:fa:69:5d:fc:86:6f:4f:ac:86:e1:c9:d5:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922fbdff15c9bec0fee7309be592e5d86dd9408a
        Validity
            Not Before: Jan  2 00:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65dfc16e6473b5d0134e00359bd2b7c8b7e66371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:3d:2f:ed:1f:67:21:96:3f:59:aa:91:5f:
                    d5:4a:8f:d7:e3:f3:e5:94:78:8a:1c:45:b3:e3:90:
                    58:bf:54:79:ef:70:72:5c:1a:54:5c:1f:4c:d1:a0:
                    76:23:39:33:30:ab:e0:dd:48:37:9c:7a:99:ca:57:
                    12:4b:97:cf:45:8c:5f:ad:c7:bd:50:86:fb:23:22:
                    03:a7:16:a7:f6:2c:94:b4:48:ea:cc:8a:98:c3:7b:
                    5a:00:43:53:ee:e9:3c:ba:30:67:2a:34:44:be:58:
                    b2:21:e9:cc:c3:86:9f:f8:f7:be:63:c4:7f:bb:a7:
                    41:7a:b4:b0:d4:0f:f1:d9:45:5f:92:ae:7d:07:7e:
                    48:c6:6f:12:9c:c2:60:0a:96:4b:ba:3f:cc:0f:28:
                    df:54:dc:bf:d1:97:a4:7c:37:be:60:50:6c:27:77:
                    5b:4c:1a:97:14:fb:7d:67:b2:c9:38:aa:23:9b:6f:
                    d0:9e:51:0b:04:10:40:a6:cb:6c:44:18:63:81:72:
                    87:55:fc:6f:e2:e9:85:69:a0:03:b4:4f:4f:50:fb:
                    6b:c1:b9:01:60:bf:d3:7c:86:3b:9c:53:e3:01:9c:
                    10:bd:61:c4:97:6f:48:41:a5:c4:3e:2e:a4:ed:90:
                    06:a2:8b:1a:fa:8f:d8:cd:7c:ce:bc:3a:1d:27:fd:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:C1:6E:64:73:B5:D0:13:4E:00:35:9B:D2:B7:C8:B7:E6:63:71
            X509v3 Authority Key Identifier:
                keyid:92:2F:BD:FF:15:C9:BE:C0:FE:E7:30:9B:E5:92:E5:D8:6D:D9:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:dd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:2a:70:f2:44:a0:82:f8:c6:aa:b1:4d:49:22:8c:2b:02:
         73:ae:82:a1:e0:75:77:c5:90:27:c5:51:4a:8e:ec:e4:29:7b:
         8a:3a:a7:02:33:68:08:e7:8a:4c:98:43:d9:c6:43:ae:c5:8c:
         3d:a5:57:b5:7b:61:0c:1d:6e:f0:a2:53:00:65:3b:8b:e5:47:
         38:1a:60:15:2d:ed:c4:94:4d:3a:e1:13:45:89:d5:f0:f7:97:
         0c:d5:23:68:46:1e:17:d7:9f:e0:60:40:24:fe:7d:c7:d1:24:
         ac:98:bd:e9:3e:a6:d6:10:03:a4:41:22:f5:ba:78:38:c3:83:
         54:81:52:3c:83:c3:30:33:92:cc:aa:0c:88:87:41:7a:35:74:
         b3:6b:49:9c:51:4f:3c:14:a4:dc:1e:08:6e:aa:ad:cd:87:11:
         8a:1c:be:4b:bb:9d:18:14:4e:14:2f:bc:f2:61:a8:a9:e6:de:
         b4:cc:10:5e:68:bd:fe:60:e4:e1:d6:08:f9:f2:67:16:21:3a:
         34:de:fc:82:66:17:43:fe:d1:96:fe:2b:64:0f:96:0a:99:a0:
         d7:08:92:e4:e0:c9:38:15:cc:2a:dc:e9:e6:7f:ab:07:7d:31:
         a9:fb:65:5d:6e:7d:12:ca:0b:4f:6e:d9:b8:4f:36:41:63:cb:
         33:4a:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----