Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/oB7ZuzgNcRji5os4xBQsxtw2XHg.roa
File:                     oB7ZuzgNcRji5os4xBQsxtw2XHg.roa (raw, json)
Hash identifier:          tXoyuulzo/OUdUI52NHLBsPsfNGXdsGWneDoYMJeDCs=
Subject key identifier:   A0:1E:D9:BB:38:0D:71:18:E2:E6:8B:38:C4:14:2C:C6:DC:36:5C:78
Certificate issuer:       /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial:       0186B6797DD2C49EACA83FFFC16DE043A0A8
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/oB7ZuzgNcRji5os4xBQsxtw2XHg.roa
Signing time:             Mon 06 Mar 2023 10:31:00 +0000
ROA not before:           Mon 06 Mar 2023 10:31:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206446
IP address blocks:        2a11:7e05::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:79:7d:d2:c4:9e:ac:a8:3f:ff:c1:6d:e0:43:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
        Validity
            Not Before: Mar  6 10:31:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a01ed9bb380d7118e2e68b38c4142cc6dc365c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:91:8e:2d:fe:af:b8:e2:59:56:de:aa:6f:
                    d9:ac:41:5f:71:70:91:19:04:d7:33:d4:12:a9:99:
                    a5:8e:ce:24:08:3d:ff:c6:0e:cf:f3:72:d9:c0:c0:
                    3f:35:7c:82:9b:45:c9:b9:ef:8a:6f:b2:e4:12:9b:
                    4b:48:82:35:6a:aa:89:52:aa:91:ce:b5:8b:10:a7:
                    a2:49:a9:fd:29:05:51:55:ce:c5:31:6c:c0:2b:48:
                    34:1e:fa:4f:c6:06:7a:72:34:70:bf:68:20:63:f9:
                    07:d6:b0:fd:16:e7:3f:53:3e:19:26:3a:7f:51:39:
                    eb:ed:84:a8:1f:f1:ad:60:b1:e9:4f:1a:59:2b:0b:
                    d1:7a:46:e9:09:01:b5:d6:0a:d3:6f:2d:26:f3:20:
                    28:87:78:69:9b:89:5b:08:f2:7b:a5:df:73:86:ae:
                    53:aa:35:59:b0:a9:92:87:cf:3f:70:ce:7e:fa:ea:
                    d6:a1:e5:a0:99:e1:75:66:d2:dd:a7:d1:0f:ab:1b:
                    59:27:52:e6:4c:87:fa:f2:95:30:e2:da:09:75:86:
                    3d:4b:87:86:51:f9:4f:3c:0b:41:68:eb:9b:22:3d:
                    12:7e:7e:73:11:23:76:00:b9:69:3a:5a:1a:f5:47:
                    ae:63:ba:7d:91:db:e3:b2:32:c6:08:f6:4a:48:d6:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:D9:BB:38:0D:71:18:E2:E6:8B:38:C4:14:2C:C6:DC:36:5C:78
            X509v3 Authority Key Identifier:
                keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/oB7ZuzgNcRji5os4xBQsxtw2XHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:7e05::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:bf:95:a3:e1:92:0e:48:8e:f5:b5:1f:3a:e4:92:a1:47:
         72:67:cc:f5:92:59:31:d4:29:30:27:ce:22:47:1b:30:4d:13:
         74:c4:a7:8c:6b:fa:75:cb:44:33:9c:cb:96:0c:13:3b:fd:5e:
         f5:b4:d2:7c:03:40:f3:fe:56:74:3b:1f:12:04:5e:74:9a:45:
         6b:98:85:9a:ee:4c:6a:11:f6:f0:84:d7:1b:49:29:be:01:a7:
         3c:dc:45:2b:b3:f6:93:69:16:73:53:3e:91:a0:fb:83:a5:7a:
         dc:cc:7e:64:3a:56:99:f2:6e:00:c4:71:30:60:a4:52:43:d5:
         d1:3a:ee:62:d8:d2:ab:76:a5:68:97:c3:7f:3c:cd:eb:8b:8b:
         a7:ff:a4:54:81:04:e4:1d:5d:88:8e:0d:e9:fb:fa:47:61:44:
         7d:3a:6b:33:a7:da:25:1a:2f:5d:e5:18:09:da:c2:9f:1f:98:
         27:8c:59:82:8f:fd:dd:6e:99:9a:d3:50:e4:f7:4f:ba:26:d5:
         30:53:6b:29:7e:a3:3c:77:8f:d1:03:77:c5:23:ed:c2:ca:51:
         ad:9b:92:7c:e4:07:0e:ac:44:0e:a7:38:ef:48:a4:27:d7:f9:
         69:85:5a:47:17:cd:12:6f:09:ef:ea:23:c9:09:79:40:29:6e:
         49:45:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----