Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/bubohaI5Rppyq-LUa5IZc5b-F_c.roa
File:                     bubohaI5Rppyq-LUa5IZc5b-F_c.roa (raw, json)
Hash identifier:          QpgNaumBq06xWhP4uoC+Zx3S6dOV7tWO+/CzPTRVIS0=
Subject key identifier:   6E:E6:E8:85:A2:39:46:9A:72:AB:E2:D4:6B:92:19:73:96:FE:17:F7
Certificate issuer:       /CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Certificate serial:       018627C691117BB45270F13968F3075CB6AE
Authority key identifier: 1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/bubohaI5Rppyq-LUa5IZc5b-F_c.roa
Signing time:             Mon 06 Feb 2023 17:29:30 +0000
ROA not before:           Mon 06 Feb 2023 17:29:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a13:fe00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:c6:91:11:7b:b4:52:70:f1:39:68:f3:07:5c:b6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
        Validity
            Not Before: Feb  6 17:29:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ee6e885a239469a72abe2d46b92197396fe17f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:f6:bd:06:4b:d0:86:dd:82:ee:df:4e:85:
                    74:3a:9c:84:5f:dc:84:bb:18:b0:e2:ab:9c:f5:f7:
                    21:6f:fe:8b:b1:0a:d3:7c:22:7f:6c:f8:e2:a9:60:
                    00:da:60:6c:45:64:9c:09:5a:01:fd:7f:ca:03:e4:
                    d6:04:c7:69:e7:bd:5a:f0:fb:0b:8b:0d:ad:ca:bf:
                    e9:0a:fd:78:9f:5e:0c:1e:43:ae:de:c2:2a:b5:71:
                    7b:74:6b:0d:d0:2c:e7:05:4b:0b:25:e3:92:39:43:
                    ff:95:3b:5d:a3:0e:9d:70:09:05:28:49:cd:d0:91:
                    00:49:65:22:0d:d9:f6:ac:ee:7d:62:e6:d4:a9:4b:
                    01:9d:63:8f:98:a5:a0:dc:0b:31:b7:4c:78:5e:ab:
                    26:07:81:b3:95:af:51:42:c9:86:90:fd:84:da:c5:
                    6d:60:cd:1f:28:6f:40:a7:7c:59:96:6a:59:a5:03:
                    84:e5:5f:4f:c9:20:85:f2:c3:98:e8:4a:71:8c:ac:
                    09:a5:7a:80:4a:71:a2:14:2c:f6:70:36:d7:37:bd:
                    81:f6:27:bf:32:6d:70:9c:09:fe:42:43:58:c6:bd:
                    e7:c3:9c:3c:d8:42:1b:df:7e:b0:85:73:39:e2:66:
                    34:4f:5f:42:1f:3a:7b:bf:0d:42:86:97:fb:9f:33:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:E8:85:A2:39:46:9A:72:AB:E2:D4:6B:92:19:73:96:FE:17:F7
            X509v3 Authority Key Identifier:
                keyid:1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/bubohaI5Rppyq-LUa5IZc5b-F_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:fe00::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:f1:4f:23:3b:43:ee:36:d9:0a:c0:83:04:5c:1a:f3:f1:
         28:a5:f8:39:9e:b0:93:01:8e:96:70:7a:91:80:54:7d:a2:91:
         d1:20:db:85:99:4e:ef:d8:e1:0d:1d:39:14:3f:b2:ea:d1:63:
         80:88:00:24:ec:34:5d:c7:af:ce:37:52:f7:44:75:50:72:a6:
         7b:95:c1:9c:fe:bb:ca:41:a8:b0:be:43:9a:55:53:78:4a:b2:
         a6:a6:d2:96:d9:a2:e8:25:c9:90:17:a2:e1:c2:4d:d9:26:76:
         38:65:3f:78:24:f4:0c:d5:54:4d:e8:bd:cd:8c:9e:6e:61:f8:
         c9:7d:1e:73:95:c1:17:a6:5d:3a:b5:9b:bb:b1:5c:8c:b8:14:
         32:d1:89:12:58:d3:35:9f:3e:99:6d:0b:3d:b9:58:fc:fb:d1:
         fd:4b:95:7c:b9:21:f9:c5:e5:7f:93:ca:60:c5:fb:59:68:e9:
         63:42:cf:06:a9:b4:85:b2:3f:0a:b9:f1:43:5d:de:1d:60:01:
         9c:0d:e6:e9:a7:1d:f3:03:71:29:e6:16:42:3d:f3:b1:36:11:
         bd:96:55:da:12:59:84:81:04:22:43:54:c2:80:a5:08:7b:67:
         13:a7:ea:62:a9:5e:a7:f8:95:d5:07:c7:23:05:08:e6:58:a8:
         40:da:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----