Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/tqjpd-E3c0eKR6aYLK6inggfseQ.roa
File:                     tqjpd-E3c0eKR6aYLK6inggfseQ.roa (raw, json)
Hash identifier:          g/tTIAt2JhXZi2pLzX11RyfWA4CfW/n26EauI55XWXo=
Subject key identifier:   B6:A8:E9:77:E1:37:73:47:8A:47:A6:98:2C:AE:A2:9E:08:1F:B1:E4
Certificate issuer:       /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial:       018BB4970361203C59BB901A95A1657D86B2
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/tqjpd-E3c0eKR6aYLK6inggfseQ.roa
Signing time:             Thu 09 Nov 2023 14:57:57 +0000
ROA not before:           Thu 09 Nov 2023 14:57:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0c:4186::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:97:03:61:20:3c:59:bb:90:1a:95:a1:65:7d:86:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
        Validity
            Not Before: Nov  9 14:57:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6a8e977e13773478a47a6982caea29e081fb1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:db:24:35:85:a0:24:2a:06:4a:ea:2e:20:
                    56:d4:cf:7a:10:02:ce:b0:9e:2f:33:ae:2d:43:ea:
                    42:b6:73:ee:d0:f7:16:8b:54:83:95:5c:88:b5:a3:
                    04:2c:3b:f7:83:cc:db:a7:66:88:21:0f:cf:86:ab:
                    be:2c:db:c5:cc:73:ea:f0:0e:71:1e:b0:be:b8:c8:
                    67:c9:70:ac:5b:a2:b2:b4:04:3c:00:6d:f8:f9:ff:
                    92:90:a4:1e:3f:00:e5:39:cd:fe:bc:41:c7:2c:fa:
                    ed:ce:bd:9e:ee:5f:b8:fc:d7:c5:64:89:ed:88:90:
                    ee:4d:5e:c4:8a:c0:a5:30:07:78:c8:b4:67:a9:13:
                    08:b5:81:a9:ce:c1:a2:2e:ac:ee:40:29:8a:7a:32:
                    37:60:cb:ec:ba:9c:3d:1b:e6:12:2d:f9:9c:c8:00:
                    ed:48:6b:ab:9a:f3:fd:7f:93:91:4f:12:cb:e5:78:
                    80:ba:e0:79:c4:8e:b8:1f:2c:09:65:11:0f:34:4b:
                    2f:23:fa:78:34:4d:b7:eb:c9:cb:3b:58:ae:a1:8b:
                    40:c8:ed:b9:63:af:a6:4c:1a:0a:1e:73:8f:12:af:
                    ae:11:83:ea:da:9f:0a:2d:35:27:0f:ab:10:4b:d4:
                    e9:a0:11:c7:d1:8e:ef:84:9d:40:9d:72:c8:1a:cf:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:E9:77:E1:37:73:47:8A:47:A6:98:2C:AE:A2:9E:08:1F:B1:E4
            X509v3 Authority Key Identifier:
                keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/tqjpd-E3c0eKR6aYLK6inggfseQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:4186::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:6c:7f:9c:cb:e8:46:97:45:bd:41:f7:1b:8b:40:19:a4:
         13:72:59:0b:06:2d:d8:6c:fb:0b:2e:ae:6f:45:2f:e8:2b:16:
         ea:42:6a:9b:4d:35:69:9d:c9:02:c4:61:f6:4a:55:9a:59:c2:
         20:cd:6b:86:e4:97:e8:25:52:56:52:4a:b5:c1:2a:54:b8:14:
         cb:04:26:24:fd:f2:48:a4:42:c4:e6:f7:f7:57:80:62:ec:0d:
         d8:cd:ff:8a:55:6b:aa:5f:28:5c:b0:15:90:9c:64:5e:19:f4:
         5a:da:d0:0e:ad:0b:3d:a8:f8:28:cd:34:77:d9:73:cf:47:9d:
         7e:c1:1d:24:be:71:f2:b2:e4:30:9c:6b:a4:b8:6f:4c:6b:32:
         ec:aa:93:56:36:be:93:25:5a:86:01:28:01:ee:4a:93:3c:93:
         7d:c0:4c:f8:5d:d1:55:bd:cd:a7:a6:6c:f0:e2:da:5a:e4:68:
         2e:6a:29:7f:89:75:ef:ba:60:a7:4f:89:61:2e:a9:9c:f9:5c:
         8c:aa:0d:3a:58:d2:cc:82:69:c5:c9:c2:91:0e:5f:be:e3:87:
         65:2e:62:6b:a6:40:07:cf:10:a7:c0:52:65:f2:24:6a:1d:f9:
         52:bb:cd:25:17:79:8e:f1:d7:e3:87:37:ea:41:1f:f2:01:e3:
         b8:01:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----