Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/9eR6IyPtdZFLW-hPCW9_LqQITAs.roa
File:                     9eR6IyPtdZFLW-hPCW9_LqQITAs.roa (raw, json)
Hash identifier:          60KZXWuuvexrOfo8w2jWzCN+nJWBvLUEIT5QCCsIWy4=
Subject key identifier:   F5:E4:7A:23:23:ED:75:91:4B:5B:E8:4F:09:6F:7F:2E:A4:08:4C:0B
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       01866DBC3A76408B71E12E74BCA90EE06AA5
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/9eR6IyPtdZFLW-hPCW9_LqQITAs.roa
Signing time:             Mon 20 Feb 2023 07:31:37 +0000
ROA not before:           Mon 20 Feb 2023 07:31:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47689
IP address blocks:        2001:67c:81c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6d:bc:3a:76:40:8b:71:e1:2e:74:bc:a9:0e:e0:6a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Feb 20 07:31:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5e47a2323ed75914b5be84f096f7f2ea4084c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:20:45:73:1f:e4:1a:7e:73:7b:95:fe:80:
                    82:e7:c7:bb:6c:0c:8f:f0:02:32:d6:8b:53:6b:df:
                    f5:53:2a:21:27:65:87:dc:6e:4d:b5:83:bb:3b:65:
                    b9:c4:95:55:41:c5:ae:07:fe:74:d3:2f:b8:95:0f:
                    b0:a7:eb:fa:2d:81:c2:be:fc:fe:51:e1:6b:3b:b7:
                    5e:7d:a8:76:b4:6f:77:8d:91:cc:4f:d1:a7:45:6d:
                    98:58:ae:8a:d7:3a:02:e4:43:89:37:2d:97:93:e2:
                    10:d9:79:02:de:1f:4a:e7:b9:02:cb:5c:4e:88:29:
                    d8:59:91:a3:eb:a8:04:59:ce:87:b9:f6:89:6a:e7:
                    5a:eb:7b:26:75:49:28:bd:cb:34:e8:9d:45:45:2b:
                    ce:13:91:09:40:79:82:fd:a0:20:57:f3:88:7f:76:
                    3e:69:19:af:11:b4:c8:bf:b2:8e:90:36:be:36:07:
                    24:c1:a3:74:ca:cf:6b:d1:03:68:22:4a:2f:fe:e1:
                    dd:3d:40:0f:6e:d2:45:a0:fa:b0:73:a0:7c:9a:84:
                    be:e8:73:61:62:98:c2:73:f1:8f:95:86:02:91:91:
                    9e:b2:e9:f2:e1:64:b9:7f:a4:13:dd:c9:3d:98:97:
                    1f:b5:59:c4:ec:2b:c8:53:e6:43:40:55:bf:3f:ef:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E4:7A:23:23:ED:75:91:4B:5B:E8:4F:09:6F:7F:2E:A4:08:4C:0B
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/9eR6IyPtdZFLW-hPCW9_LqQITAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:76:ef:ad:91:6b:df:36:8e:84:0f:6a:44:f6:05:d5:47:27:
         dd:00:00:5a:9e:da:2b:64:28:5a:85:f4:19:be:68:b7:06:68:
         ad:61:c6:9a:ea:f5:da:ec:a0:c7:8e:d5:92:70:76:4c:91:9d:
         cc:2f:7d:b1:e2:d0:da:b2:d7:c9:30:ca:87:86:7c:dc:17:9b:
         ab:7a:17:dc:13:d3:52:f9:59:8e:c0:22:44:d8:b2:be:3f:aa:
         fb:cc:ac:68:74:5f:90:70:93:de:7c:e3:05:c9:75:b4:8e:67:
         b7:0e:41:54:15:9b:18:97:f9:46:ba:6c:7e:f9:80:66:6d:ab:
         83:d1:53:38:24:e7:42:47:06:e0:db:63:99:d3:c6:e5:dc:57:
         15:3b:11:f3:a6:32:85:fe:26:93:db:d5:74:18:cb:68:ab:82:
         c6:9d:10:c3:1a:2f:13:81:6e:4f:85:f3:8e:c1:e0:5d:43:1c:
         06:9a:8a:43:f0:29:ee:01:78:6a:e1:d5:f1:3c:f1:8d:88:22:
         6a:e5:02:d4:20:a3:41:8c:b4:a9:1b:85:77:74:d8:26:0d:b9:
         55:d8:61:aa:bd:d7:5b:f7:f5:f6:9e:9b:0d:f4:5e:a7:ab:a7:
         5f:48:cf:d4:8b:5e:06:da:8b:a2:4b:0b:43:54:35:e1:47:7a:
         5c:b3:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----