Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/8QbaXAUhG26M-hMVHDqEu5ZMXD0.roa
File:                     8QbaXAUhG26M-hMVHDqEu5ZMXD0.roa (raw, json)
Hash identifier:          oED7X39tLevHckUrsoKbGzgtUPZ6t+EV/jbe/ibJq1c=
Subject key identifier:   F1:06:DA:5C:05:21:1B:6E:8C:FA:13:15:1C:3A:84:BB:96:4C:5C:3D
Certificate issuer:       /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial:       018637E917D588DFDE2FB9F790B04060C21C
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/8QbaXAUhG26M-hMVHDqEu5ZMXD0.roa
Signing time:             Thu 09 Feb 2023 20:41:08 +0000
ROA not before:           Thu 09 Feb 2023 20:41:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a13:b100::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:37:e9:17:d5:88:df:de:2f:b9:f7:90:b0:40:60:c2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
        Validity
            Not Before: Feb  9 20:41:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f106da5c05211b6e8cfa13151c3a84bb964c5c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:46:b9:9f:50:9a:b8:77:c5:07:0f:f4:c9:
                    cb:28:91:7b:ae:25:5d:d2:d8:09:2b:81:db:65:2e:
                    31:f2:bc:cc:62:72:21:47:66:71:e4:ae:33:ff:e0:
                    8a:0d:b3:45:4d:1e:69:7a:ba:b3:ef:b2:ed:de:7f:
                    59:50:a7:dc:52:85:f3:6b:50:01:11:f5:54:3f:3d:
                    e0:e6:6b:12:71:90:42:b2:39:59:f2:92:ff:38:48:
                    c4:cf:31:a2:c7:63:92:c5:06:8c:e1:84:3b:d6:8e:
                    88:9a:db:2b:e8:9b:a4:35:0f:e6:62:17:09:bb:17:
                    b6:b2:18:06:d7:f6:8b:3c:cb:6e:13:da:3a:dc:cb:
                    bd:73:e9:a1:00:d2:d8:8f:9d:c0:06:c9:09:69:f8:
                    45:62:a6:73:5e:26:27:9d:7d:7a:33:95:74:09:5d:
                    1b:8c:65:92:70:c7:ff:aa:94:35:8a:a9:73:1c:22:
                    4b:51:c1:88:fc:08:88:76:11:94:2b:d6:de:06:83:
                    c7:97:6f:bf:3d:f0:01:41:3e:d8:c4:fb:cd:d0:ea:
                    a5:20:9e:d3:4b:1b:13:12:ac:ea:98:a8:d8:33:1f:
                    eb:e1:d4:34:92:12:a1:2d:d5:b2:19:c4:50:a6:bc:
                    38:ce:88:f6:3d:5f:6a:8b:0e:45:0e:56:67:35:42:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:DA:5C:05:21:1B:6E:8C:FA:13:15:1C:3A:84:BB:96:4C:5C:3D
            X509v3 Authority Key Identifier:
                keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/8QbaXAUhG26M-hMVHDqEu5ZMXD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b100::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:7f:88:f3:6b:70:8e:56:8f:bd:20:00:89:6b:3c:22:9e:
         33:70:53:8e:3e:ef:21:9a:88:e8:5a:c3:b5:c4:c5:d8:f7:ff:
         76:22:01:77:f0:b1:98:1a:4a:db:19:d0:22:5d:a0:8c:f8:e8:
         9d:2b:76:6a:30:f8:6e:9a:ba:90:b3:c5:ff:cc:8c:70:14:1d:
         ca:2d:4c:43:7e:4d:e8:5a:80:ad:74:bc:b4:a6:d8:e9:a6:93:
         9c:64:00:5e:6e:f6:ea:a9:04:c1:c5:a9:be:3d:fb:97:2a:e8:
         ea:d7:fc:c7:04:56:dd:b0:e2:e7:10:4a:aa:0b:31:ac:16:ba:
         30:be:e6:81:b4:19:f6:9d:54:1a:c3:64:d1:c0:47:5f:12:1e:
         ac:24:7c:2b:fa:58:19:4f:c2:a5:1d:f0:f1:58:d4:4f:bf:c3:
         dd:58:80:6a:7f:9b:2a:99:d9:bc:b4:c1:6c:f0:68:fc:ff:3b:
         8a:2d:91:46:30:7f:65:62:37:3d:a0:b2:ed:32:11:1e:26:d7:
         9c:b9:73:99:02:c6:30:02:5c:5e:9c:0e:76:00:c2:52:de:54:
         9f:3d:17:05:78:fd:cc:d8:e6:83:0b:99:18:30:f4:05:78:da:
         e0:9a:ea:5f:9c:68:8b:e1:3d:68:34:1d:a5:e1:63:f2:39:78:
         b0:ad:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----