Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TeLE851uQ8diDabdHfW3DVI2Pjs.roa
File:                     TeLE851uQ8diDabdHfW3DVI2Pjs.roa (raw, json)
Hash identifier:          XVK1nY/sKA/+/j9kPVzUDpiwIoVP67oXsjO8QRexd5U=
Subject key identifier:   4D:E2:C4:F3:9D:6E:43:C7:62:0D:A6:DD:1D:F5:B7:0D:52:36:3E:3B
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       01856F6FF802DE3AED6CA96287E38C91FFAA
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TeLE851uQ8diDabdHfW3DVI2Pjs.roa
Signing time:             Sun 01 Jan 2023 22:24:47 +0000
ROA not before:           Sun 01 Jan 2023 22:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44685
IP address blocks:        2a12:2600::/48 maxlen: 48
                          2a12:2600::/30 maxlen: 30
                          2a12:2600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:6f:f8:02:de:3a:ed:6c:a9:62:87:e3:8c:91:ff:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Jan  1 22:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4de2c4f39d6e43c7620da6dd1df5b70d52363e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:92:3e:a6:62:4e:a7:85:46:0b:df:1a:0d:78:
                    23:f5:3c:6b:a9:5a:b3:a8:ec:bb:18:7b:96:30:d0:
                    8a:4a:dc:27:70:f2:13:41:04:a9:bb:1e:35:80:3e:
                    36:88:50:fa:aa:2f:11:bb:93:ab:78:1c:fe:14:e8:
                    37:4b:57:21:0a:6e:b9:98:30:3c:be:66:8a:e1:55:
                    da:3c:e3:3c:a8:f8:b9:6d:9e:76:26:38:96:d9:06:
                    f3:60:36:b4:61:ee:a4:5a:9c:68:d5:68:22:af:a0:
                    03:de:a8:44:1a:5e:40:3b:72:6b:1a:5a:73:79:52:
                    db:68:3d:e8:98:2a:26:f2:b7:0c:8f:c0:0a:03:38:
                    a3:5a:9f:b4:04:00:88:f0:ab:1d:a2:fa:44:ad:c3:
                    1b:1c:b0:4a:4a:04:6f:9f:6d:66:b4:17:63:d1:15:
                    86:4e:3c:f2:cd:9f:4c:36:23:12:14:d0:b7:e3:a9:
                    a6:da:37:1f:5d:28:74:8d:37:20:ad:c5:fa:91:17:
                    c1:d0:d4:6f:ac:82:27:cf:56:dd:38:d4:74:52:51:
                    c1:b3:63:54:d8:04:9b:0d:14:88:19:87:b4:e7:68:
                    c7:96:5b:bf:34:cd:a8:af:8f:1f:4e:02:1a:d7:ab:
                    f3:19:f2:b9:15:47:f3:fa:67:b4:9d:68:d7:f4:60:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:C4:F3:9D:6E:43:C7:62:0D:A6:DD:1D:F5:B7:0D:52:36:3E:3B
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TeLE851uQ8diDabdHfW3DVI2Pjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:b9:15:34:68:96:17:10:bf:59:f1:1f:6b:7f:53:af:c5:
         29:c5:ba:4c:6d:f0:ed:bc:a6:5a:a3:fa:58:92:fd:75:cc:e2:
         16:f2:70:ea:37:7f:6e:8e:55:d6:e3:b3:0d:1c:22:60:6a:5d:
         fc:af:ef:1f:28:81:56:d9:84:f1:c9:d5:0b:30:20:1e:26:35:
         f3:21:4a:aa:13:c6:e5:50:4d:20:c8:4b:6b:02:94:00:f4:67:
         5e:7b:6d:ff:99:e5:a7:d0:a9:4c:04:42:c0:46:e4:37:eb:37:
         e4:f4:6d:9c:22:00:90:72:41:04:a7:5d:d1:cd:99:09:08:c0:
         4b:3f:51:45:78:06:ec:6b:1e:be:79:dd:46:0d:0d:fd:b9:9b:
         56:d6:41:86:95:95:8f:90:7a:57:32:87:44:a6:4a:52:d6:3b:
         45:ba:77:63:88:dc:80:ca:77:2c:68:77:ff:0a:a5:4b:55:a2:
         33:dd:4f:cb:c6:91:b7:9a:fe:b0:b6:ad:c0:fc:3f:dc:d9:8f:
         09:df:4d:dd:e2:8b:45:37:73:d0:bc:4a:e0:aa:ec:7e:ba:54:
         ac:58:8d:fe:12:26:86:49:81:2a:37:29:a4:2c:bb:d0:f0:76:
         4c:59:6e:20:ef:dd:cb:2d:82:91:fc:25:bd:66:7c:02:7d:bf:
         02:ff:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----