Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/f82l9pzvTl-6uiPEKmi9GkRTq0I.roa
File:                     f82l9pzvTl-6uiPEKmi9GkRTq0I.roa (raw, json)
Hash identifier:          1v27Kgl5IHD2i6WaCzLYZX7YYS7kHPQuWxjQyNyn1XQ=
Subject key identifier:   7F:CD:A5:F6:9C:EF:4E:5F:BA:BA:23:C4:2A:68:BD:1A:44:53:AB:42
Certificate issuer:       /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial:       01856ECB8AE61992F76760200CFD74734DF5
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/f82l9pzvTl-6uiPEKmi9GkRTq0I.roa
Signing time:             Sun 01 Jan 2023 19:25:11 +0000
ROA not before:           Sun 01 Jan 2023 19:25:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:8380::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:8a:e6:19:92:f7:67:60:20:0c:fd:74:73:4d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Validity
            Not Before: Jan  1 19:25:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7fcda5f69cef4e5fbaba23c42a68bd1a4453ab42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:e8:95:05:88:51:d5:b9:a5:59:c0:74:d4:
                    7f:eb:8b:18:64:3c:72:21:1a:3a:9c:d2:ef:87:d1:
                    e6:ce:d8:c5:18:25:08:61:02:dd:28:69:73:5a:47:
                    b0:48:a5:9e:96:61:32:7e:9c:fb:d0:70:ed:64:88:
                    7f:04:8f:d8:63:73:6b:d3:3d:24:3c:50:bc:b0:65:
                    85:e7:e4:57:ee:35:27:a4:b5:1b:76:18:dc:16:da:
                    31:b8:f5:dd:d2:bf:46:fb:e0:78:4f:0e:48:df:ad:
                    84:ff:58:8a:d4:1b:2b:93:85:89:94:58:7f:29:9b:
                    9f:bc:3f:8c:48:f4:de:ed:dc:32:06:ce:e1:9d:27:
                    14:45:37:8b:c2:01:01:bd:9e:fc:58:04:5c:1a:bd:
                    e3:98:60:2a:1a:2d:1e:00:74:90:d2:bf:40:c7:a2:
                    44:74:db:49:56:ec:7f:ae:f2:3a:db:c9:b3:65:c4:
                    5d:c1:b0:e4:bc:df:4b:8e:63:6e:2a:76:0c:f1:70:
                    c7:82:3f:49:6c:3c:52:e9:5b:3b:60:19:06:d1:05:
                    eb:97:50:65:f1:6a:76:5f:91:44:55:89:71:43:55:
                    0a:60:86:76:b0:76:25:25:db:ad:c2:d7:95:1b:77:
                    6b:f3:34:44:db:c4:02:17:7f:22:08:79:ee:93:fc:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:A5:F6:9C:EF:4E:5F:BA:BA:23:C4:2A:68:BD:1A:44:53:AB:42
            X509v3 Authority Key Identifier:
                keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/f82l9pzvTl-6uiPEKmi9GkRTq0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8380::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:27:7e:03:9d:01:07:2d:f5:61:64:58:ae:22:cb:aa:ff:
         32:e3:f1:59:78:ef:eb:5e:13:3a:6a:d2:0e:ce:31:37:ca:f5:
         ea:06:a6:54:5e:e5:48:28:12:57:12:93:66:fd:cb:4a:7d:69:
         78:7f:85:57:99:89:78:f1:7d:54:b2:b5:9e:5a:90:5a:b0:43:
         76:78:b9:e5:31:5f:06:f3:1e:41:68:27:db:dc:59:b2:cc:7a:
         a2:04:30:95:7c:c0:42:58:25:51:55:48:d1:b4:d4:8c:ee:30:
         9b:a9:04:c8:42:b0:6f:d6:ab:bc:2a:a2:ff:d9:8c:79:88:bb:
         ba:09:c3:dd:91:52:5c:ff:86:08:64:97:69:c2:8c:67:44:5e:
         65:14:4f:e6:b4:f1:88:5c:f0:1d:87:0b:9b:a8:a8:a6:c5:7c:
         0f:9f:3c:46:2e:fe:4c:ef:dd:8f:d5:e6:50:83:db:f0:47:22:
         a9:cb:a1:31:06:26:7a:70:25:b5:cf:15:92:a1:bb:75:ad:84:
         6a:1d:95:01:7d:7e:eb:2b:9f:9c:3e:cc:a2:9f:d8:db:ed:15:
         44:b1:7b:62:2d:79:24:c0:c9:ce:c0:ec:18:93:82:f8:8a:06:
         cc:a4:7b:13:d0:f0:ec:d5:a0:6f:d0:5c:1a:2a:83:51:ea:6c:
         41:83:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----