Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/1-OdBuJJ1RryTE-gGpddJ1Vc5S4I.roa
File:                     1-OdBuJJ1RryTE-gGpddJ1Vc5S4I.roa (raw, json)
Hash identifier:          gF0E09EIBezFyxSX0pGRp/z/O6SFChBoa7e6tlPQf5Y=
Subject key identifier:   F8:E7:41:B8:92:75:46:BC:93:13:E8:06:A5:D7:49:D5:57:39:4B:82
Certificate issuer:       /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial:       018486C063BF9010B8D6B749BF26AE00693F
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/1-OdBuJJ1RryTE-gGpddJ1Vc5S4I.roa
Signing time:             Thu 17 Nov 2022 18:01:06 +0000
ROA not before:           Thu 17 Nov 2022 18:01:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:7c40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:c0:63:bf:90:10:b8:d6:b7:49:bf:26:ae:00:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
        Validity
            Not Before: Nov 17 18:01:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8e741b8927546bc9313e806a5d749d557394b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:6a:9a:02:b4:01:cc:7a:ad:85:b3:65:47:
                    64:df:d9:ee:94:5f:19:b5:94:9a:81:9e:75:f8:19:
                    b3:e5:d2:11:8a:18:e7:85:59:34:a1:8f:c2:2a:9d:
                    4d:a5:fa:71:95:c2:2a:67:34:4f:b2:42:b3:85:51:
                    25:e6:8b:e2:14:b4:5d:94:ab:24:fa:8c:77:eb:46:
                    04:14:54:e7:31:ee:c1:ae:be:55:ce:5b:bf:8e:43:
                    a1:5d:72:18:bd:53:96:5a:34:1d:3a:30:e2:95:ce:
                    42:5c:5b:92:1b:3e:3d:34:65:c2:23:e8:4c:53:c7:
                    70:c5:dc:3e:ed:d2:40:57:23:9c:99:a5:36:5a:3b:
                    00:38:c6:ba:4e:4e:f7:65:b0:87:cd:7e:33:35:12:
                    8d:15:45:e1:db:22:9b:0a:0b:4f:ee:7b:46:83:40:
                    74:46:73:b5:22:fc:ea:c0:2e:a6:da:0b:7c:05:9f:
                    ec:31:2d:d2:16:7f:2e:46:c0:62:55:b7:fe:64:ff:
                    02:5d:cb:ae:64:6b:a8:1f:1e:09:e9:ea:37:71:08:
                    90:d6:32:4a:38:53:a2:03:83:00:6a:1f:e6:46:eb:
                    cf:78:47:76:99:b9:0e:3e:d4:69:a9:10:4c:c7:87:
                    91:61:d6:1a:c0:fe:74:47:08:8e:0b:70:02:58:77:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:41:B8:92:75:46:BC:93:13:E8:06:A5:D7:49:D5:57:39:4B:82
            X509v3 Authority Key Identifier:
                keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/1-OdBuJJ1RryTE-gGpddJ1Vc5S4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:7c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:66:74:c5:0e:23:29:6c:b2:b3:ac:e8:48:ba:7a:e8:ef:
         5c:21:20:39:d7:e8:83:a1:b2:4f:68:18:58:ac:27:b1:ad:e4:
         16:bb:5f:85:6b:a2:87:90:69:d8:13:40:96:e8:5e:c5:3b:42:
         71:df:3d:80:ef:4b:88:02:12:b2:03:7b:78:f8:2c:86:79:28:
         8b:52:f8:d9:bc:29:62:ae:e6:33:84:ad:7c:d8:ca:d5:fd:4b:
         be:b0:bf:1e:28:a7:39:4e:f7:a6:80:d6:3b:e1:b2:11:5c:30:
         79:ab:0e:47:4e:f2:2e:3e:4f:96:a3:85:1a:2e:5e:a7:7d:aa:
         ca:fb:1a:27:bf:66:13:d6:a5:fa:33:49:8d:f9:15:93:d9:84:
         4d:c5:a0:90:60:da:bb:b4:68:9f:d3:8a:c6:03:2c:70:a6:85:
         03:6e:43:0f:15:14:0a:f9:3a:ac:76:df:68:d4:16:5d:ff:3a:
         73:0b:b9:84:79:61:b6:46:73:40:f4:55:8a:69:81:2f:2b:07:
         d4:8c:35:de:8e:36:fc:7e:bb:00:c5:e2:8a:3a:5f:db:23:b3:
         9d:04:3f:67:42:0f:bb:de:9e:f0:fe:ee:52:e2:d2:63:a8:71:
         e3:71:01:f0:de:92:93:b7:af:75:c7:85:29:b3:00:c7:89:c3:
         89:a5:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----