Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa
File:                     DYb7doxSFvzrxw8ry4eHbeIL2eY.roa (raw, json)
Hash identifier:          TIwgJnI6AtSdS/eXtUK8/knp0L2eGzGZQSBICrh5nhc=
Subject key identifier:   0D:86:FB:76:8C:52:16:FC:EB:C7:0F:2B:CB:87:87:6D:E2:0B:D9:E6
Certificate issuer:       /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial:       0186E438856A683EE790BC239C9DA204C89D
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa
Signing time:             Wed 15 Mar 2023 07:42:34 +0000
ROA not before:           Wed 15 Mar 2023 07:42:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44812
IP address blocks:        2a09:3706::/32 maxlen: 32
                          2a09:3703::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:38:85:6a:68:3e:e7:90:bc:23:9c:9d:a2:04:c8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
        Validity
            Not Before: Mar 15 07:42:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d86fb768c5216fcebc70f2bcb87876de20bd9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:c0:b7:14:f7:c0:74:44:0d:a8:66:59:55:
                    61:d6:67:96:0c:d2:e8:45:16:da:0e:4b:a3:0a:de:
                    13:49:d6:6c:86:66:2a:2b:cd:ca:a5:71:c5:ae:c9:
                    7e:3f:67:05:41:ca:45:e9:a4:79:1a:30:af:29:d8:
                    74:cc:87:32:ce:2a:8c:1c:5e:30:fa:40:1a:52:ee:
                    b4:80:02:9c:51:44:e2:f8:02:3b:dc:66:b3:9d:9e:
                    c1:16:ba:b1:14:1b:d5:b5:75:c6:9a:f9:e2:69:89:
                    3c:c2:93:94:1f:ab:30:01:71:5d:e1:6e:92:a8:44:
                    e0:71:91:5f:b5:65:10:25:cb:a7:79:81:10:af:8b:
                    77:51:17:df:72:42:59:cc:48:7d:ad:d9:db:3a:70:
                    05:c1:00:98:f8:61:19:b2:09:66:da:ce:44:4e:6e:
                    68:ab:c0:28:28:00:29:12:aa:d3:da:79:cd:86:da:
                    09:1e:14:4b:cc:93:bb:91:c5:fe:3a:ec:1f:2e:09:
                    f5:0e:11:ce:97:88:02:09:ae:44:b1:61:09:62:b3:
                    d4:5a:7f:b4:02:80:6d:d5:a8:07:0a:f7:d6:9c:06:
                    e0:ff:a3:9d:4b:01:d3:1e:c4:80:f0:10:96:86:5c:
                    09:04:55:35:1f:88:28:b5:4b:df:1f:34:e2:82:d0:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:FB:76:8C:52:16:FC:EB:C7:0F:2B:CB:87:87:6D:E2:0B:D9:E6
            X509v3 Authority Key Identifier:
                keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:3703::/32
                  2a09:3706::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:d6:da:54:36:fb:8e:50:9d:83:8f:97:16:5a:11:8e:e0:
         2f:93:5f:2b:57:23:c3:72:40:f4:23:f3:c8:83:2c:03:48:ff:
         53:80:46:5f:b7:a4:58:fa:f0:e3:1a:5a:95:ea:44:94:24:94:
         6e:4a:07:dc:f9:14:85:41:1d:1c:c4:6f:0d:98:45:c1:0b:aa:
         b4:72:a6:f2:fc:84:4d:47:81:c3:d7:48:98:be:a2:20:ab:b1:
         c6:d9:fd:1e:ae:76:7a:85:f5:e3:33:aa:23:f2:87:f2:33:c9:
         7f:9e:9f:f3:c3:0c:4e:b2:1e:02:45:22:11:04:bf:8d:fd:cc:
         28:17:fc:bd:42:82:fd:c1:b4:9f:dd:2e:06:af:f7:e0:17:8d:
         89:b0:a6:f7:4f:10:68:16:e5:39:18:90:13:e1:eb:51:57:f8:
         12:80:99:26:9c:20:00:fc:f6:02:af:5e:1a:aa:3c:63:72:85:
         c3:7e:14:d1:1c:75:43:1d:ce:2b:27:cf:85:00:2a:4e:09:cc:
         8c:98:48:10:8a:87:b5:94:0e:91:05:d4:e5:9a:33:bb:d8:1e:
         27:5e:3e:1f:e4:32:6c:82:33:3f:93:16:76:94:51:57:7d:33:
         03:26:a7:0e:a0:9a:15:c3:21:73:f8:41:15:3b:c2:2c:d3:3c:
         8a:1e:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----