Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/wuxTiBj2KYeRs7zwkQgPghnAbeA.roa
File:                     wuxTiBj2KYeRs7zwkQgPghnAbeA.roa (raw, json)
Hash identifier:          mwinn8ZKQI1eUa5vBGSQFKsgpBSTmLXtVNEkTAZ2JXE=
Subject key identifier:   C2:EC:53:88:18:F6:29:87:91:B3:BC:F0:91:08:0F:82:19:C0:6D:E0
Certificate issuer:       /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial:       018571FA3E3CB50FC15F9ED0AFB1CE6CE85C
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/wuxTiBj2KYeRs7zwkQgPghnAbeA.roa
Signing time:             Mon 02 Jan 2023 10:15:03 +0000
ROA not before:           Mon 02 Jan 2023 10:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:3880::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:fa:3e:3c:b5:0f:c1:5f:9e:d0:af:b1:ce:6c:e8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
        Validity
            Not Before: Jan  2 10:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2ec538818f6298791b3bcf091080f8219c06de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:d8:d7:c1:00:67:79:41:a3:da:72:c2:86:
                    e3:01:35:fd:35:e0:fa:d1:de:a2:aa:1c:54:8b:61:
                    b3:d0:26:31:8c:bc:d1:ec:1d:ce:03:41:60:2e:c6:
                    0e:96:60:69:a3:75:3a:6e:6e:68:cf:00:cf:2b:01:
                    f4:36:e8:3c:db:73:76:7d:e7:41:0b:d2:fc:bd:09:
                    22:1e:1e:eb:85:11:85:b5:4a:38:84:bb:b9:c7:93:
                    d2:4c:50:a6:6d:92:c8:09:b5:a5:79:2a:02:3e:2b:
                    a1:4e:30:44:47:28:93:01:f6:97:11:4e:68:11:13:
                    0c:b2:93:86:f9:f5:73:94:95:25:04:dc:44:c4:5c:
                    17:c4:ea:2d:c0:ff:95:60:eb:4a:8d:99:a7:58:81:
                    dd:ea:dd:bd:48:e6:f7:c4:53:d5:e4:d1:78:c5:9f:
                    b9:75:f9:15:ae:e9:1f:82:9d:8b:d6:21:67:73:cc:
                    55:e8:ea:af:91:33:e8:97:08:e9:8c:4a:23:a8:92:
                    da:d4:29:bb:30:66:e0:b6:ae:7f:10:d9:aa:e9:35:
                    6a:f2:f5:12:3c:fd:47:ed:7b:2a:d4:a0:8b:2d:ad:
                    1c:75:28:10:a7:d9:f6:a1:47:0a:53:2f:f8:66:61:
                    8f:5a:3c:02:bf:a9:3a:f9:0b:e1:43:30:18:78:25:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:53:88:18:F6:29:87:91:B3:BC:F0:91:08:0F:82:19:C0:6D:E0
            X509v3 Authority Key Identifier:
                keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/wuxTiBj2KYeRs7zwkQgPghnAbeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3880::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:85:56:99:26:29:99:85:49:97:39:0f:b9:4a:5c:a8:27:
         2b:51:de:ab:c9:06:34:49:3d:d6:3b:a8:43:c1:0e:32:79:a1:
         f0:05:4c:5a:56:e6:8b:7a:b0:1d:2c:1a:57:c8:8e:3b:80:35:
         d7:b0:bc:9a:8e:e2:92:01:04:1c:55:66:98:5e:3c:35:3b:ce:
         10:ea:26:5d:22:ef:5b:3e:9a:2c:e5:5f:30:98:c1:cb:f7:cd:
         f3:26:c8:e2:48:36:9e:3a:3e:41:03:27:41:91:d5:bc:e7:74:
         c5:d3:38:a0:b6:31:cb:4d:99:3e:20:5c:b1:e9:c1:b8:47:52:
         b4:54:74:36:94:cc:88:06:d1:e0:14:ef:2b:af:e1:db:ff:4d:
         da:60:99:7e:7c:11:df:c5:82:46:54:c7:31:e2:ee:ae:6e:a2:
         5b:36:45:5e:b6:95:d9:7c:e2:86:8a:b8:07:1e:e1:5f:4a:1f:
         44:dd:3d:9e:87:f8:89:cd:d0:61:cf:48:ad:85:00:c8:4d:22:
         9b:27:4d:33:eb:2d:81:99:26:64:e6:29:53:0c:f3:ea:de:63:
         3a:62:07:08:8b:32:f4:0e:89:02:62:ec:c3:21:59:1f:4c:6e:
         e0:dc:8c:dc:b7:93:29:84:a4:e3:34:e8:be:cd:a8:b7:e9:66:
         58:6f:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----