Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rzdom6pfQY7uUwAr0cOoU4zwdY4.roa
File:                     rzdom6pfQY7uUwAr0cOoU4zwdY4.roa (raw, json)
Hash identifier:          n7ob5UhAonqoOU4vX+05UsnNKdBQl4I9TIceVq8/cd4=
Subject key identifier:   AF:37:68:9B:AA:5F:41:8E:EE:53:00:2B:D1:C3:A8:53:8C:F0:75:8E
Certificate issuer:       /CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
Certificate serial:       01856E6FCFF5C84D7D9030C01FA6C508B6C4
Authority key identifier: F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rzdom6pfQY7uUwAr0cOoU4zwdY4.roa
Signing time:             Sun 01 Jan 2023 17:44:59 +0000
ROA not before:           Sun 01 Jan 2023 17:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59811
IP address blocks:        2a0b:8640::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:6f:cf:f5:c8:4d:7d:90:30:c0:1f:a6:c5:08:b6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
        Validity
            Not Before: Jan  1 17:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af37689baa5f418eee53002bd1c3a8538cf0758e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:06:68:03:38:35:9b:2c:73:e1:cf:89:6f:
                    34:78:04:3b:15:48:72:66:1f:1d:16:0f:ea:1b:e8:
                    5e:85:7c:02:20:35:2b:bf:32:c5:b4:43:cf:9f:e2:
                    e4:2e:19:40:8f:68:ed:0e:d1:67:5e:a5:f2:37:e4:
                    60:2a:4d:63:4e:4a:43:db:69:86:fb:8c:6c:56:97:
                    50:ad:40:e4:06:47:0c:58:a3:11:4e:2d:ba:63:46:
                    0c:a5:5e:0e:be:2d:9d:93:3e:83:e0:e1:02:ab:9b:
                    b8:a0:85:6b:fe:ee:84:e4:c9:d8:bd:d2:19:cf:3c:
                    ed:ea:fb:58:ec:30:6d:ef:93:a1:81:50:a1:c1:11:
                    9e:d5:3b:90:e5:77:8d:f9:82:7a:e3:41:f3:9d:2a:
                    d9:22:00:44:5f:25:76:a9:97:e2:30:7a:0d:ac:86:
                    c0:15:ce:db:d6:21:ac:52:44:05:22:6c:0f:be:8a:
                    0a:ee:9c:b7:ac:c7:96:9c:0a:38:d0:13:18:72:44:
                    32:af:ba:ca:ef:be:64:25:8e:2b:3e:23:76:9c:a9:
                    58:fd:71:0d:05:83:e8:88:8e:20:e2:3e:13:5a:94:
                    f8:36:0d:0f:f9:4a:06:01:af:c5:b2:03:00:f7:e6:
                    e5:d9:45:c7:b8:37:7e:92:e8:c1:36:de:ce:12:b4:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:68:9B:AA:5F:41:8E:EE:53:00:2B:D1:C3:A8:53:8C:F0:75:8E
            X509v3 Authority Key Identifier:
                keyid:F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rzdom6pfQY7uUwAr0cOoU4zwdY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8640::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:55:1c:fb:11:83:97:21:18:85:ac:65:07:7a:be:5c:1a:d5:
         a3:46:03:66:69:ab:dd:9d:8d:b2:d2:22:d5:23:94:e0:a6:b3:
         4a:ef:3f:a3:d3:3f:6a:68:18:28:99:5b:be:f1:72:20:e8:13:
         22:0f:50:55:1f:69:38:8c:ba:73:ff:7f:f8:d5:15:e6:5f:6e:
         4c:bf:60:27:59:d7:40:19:62:3f:8d:96:d8:ea:f2:3a:de:ad:
         14:d7:a9:68:b8:90:f3:2c:13:7e:60:fc:4a:21:10:18:9b:90:
         81:c6:e1:b6:e4:46:17:ce:72:ad:e1:a1:d4:7b:c1:5f:0d:b3:
         67:d2:23:f3:29:f3:ee:9b:70:c0:de:4a:cf:03:5e:fe:43:d1:
         8f:05:ea:9c:90:6b:7a:6f:85:fe:90:2b:0b:32:47:67:0a:73:
         0e:61:91:75:db:ae:fd:ac:ef:a6:20:ef:2d:8e:27:8c:2e:a5:
         0e:ba:4b:04:74:62:4f:0c:a2:71:d1:ff:59:c4:80:ec:27:e3:
         ee:31:2d:10:3f:47:81:f8:2b:6e:54:fb:ce:97:b3:4c:ba:ac:
         7c:85:f0:ab:70:10:26:c0:ef:78:e9:6c:46:54:83:12:5f:9a:
         a6:11:68:da:99:41:d6:4c:2f:3c:03:e4:7a:08:c4:f5:9a:95:
         1e:eb:0a:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVub8/1yE19kDDAH6bFCLbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2JmOTc3MTNmZjMwZDJkYzc2N2Q1MjFjZDMwYzJiOTI4
YWU3ODMwHhcNMjMwMTAxMTc0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjM3Njg5YmFhNWY0MThlZWU1MzAwMmJkMWMzYTg1MzhjZjA3NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRgGaAM4NZssc+HPiW80eAQ7FUhy
Zh8dFg/qG+hehXwCIDUrvzLFtEPPn+LkLhlAj2jtDtFnXqXyN+RgKk1jTkpD22mG
+4xsVpdQrUDkBkcMWKMRTi26Y0YMpV4Ovi2dkz6D4OECq5u4oIVr/u6E5MnYvdIZ
zzzt6vtY7DBt75OhgVChwRGe1TuQ5XeN+YJ640HznSrZIgBEXyV2qZfiMHoNrIbA
Fc7b1iGsUkQFImwPvooK7py3rMeWnAo40BMYckQyr7rK775kJY4rPiN2nKlY/XEN
BYPoiI4g4j4TWpT4Ng0P+UoGAa/FsgMA9+bl2UXHuDd+kujBNt7OErTFwQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK83aJuqX0GO7lMAK9HDqFOM8HWOMB8GA1UdIwQY
MBaAFPXL+XcT/zDS3HZ9UhzTDCuSiueDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWIt
YjVlNGVmMzIyOTQ2LzEvcnpkb202cGZRWTd1VXdBcjBjT29VNHp3ZFk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWItYjVlNGVmMzIyOTQ2
LzEvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKguGQDAN
BgkqhkiG9w0BAQsFAAOCAQEASVUc+xGDlyEYhaxlB3q+XBrVo0YDZmmr3Z2NstIi
1SOU4KazSu8/o9M/amgYKJlbvvFyIOgTIg9QVR9pOIy6c/9/+NUV5l9uTL9gJ1nX
QBliP42W2OryOt6tFNepaLiQ8ywTfmD8SiEQGJuQgcbhtuRGF85yreGh1HvBXw2z
Z9Ij8ynz7ptwwN5KzwNe/kPRjwXqnJBrem+F/pArCzJHZwpzDmGRdduu/azvpiDv
LY4njC6lDrpLBHRiTwyicdH/WcSA7Cfj7jEtED9HgfgrblT7zpezTLqsfIXwq3AQ
JsDveOlsRlSDEl+aphFo2plB1kwvPAPkegjE9ZqVHusK0Q==
-----END CERTIFICATE-----