Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/764YEmOdAdIZyLCRGAtNHDbuiso.roa
File:                     764YEmOdAdIZyLCRGAtNHDbuiso.roa (raw, json)
Hash identifier:          5nFCA3ELM6lb7fQ73iF8f2jVhgeg+sYkuNbQ5aLDsy4=
Subject key identifier:   EF:AE:18:12:63:9D:01:D2:19:C8:B0:91:18:0B:4D:1C:36:EE:8A:CA
Certificate issuer:       /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial:       01856CCACF73C8A9DB6A0801DA81347E8AB8
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/764YEmOdAdIZyLCRGAtNHDbuiso.roa
Signing time:             Sun 01 Jan 2023 10:05:08 +0000
ROA not before:           Sun 01 Jan 2023 10:05:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21343
IP address blocks:        2a02:2278:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:cf:73:c8:a9:db:6a:08:01:da:81:34:7e:8a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
        Validity
            Not Before: Jan  1 10:05:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efae1812639d01d219c8b091180b4d1c36ee8aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:13:49:85:2c:f2:08:1c:09:24:21:92:8d:
                    26:4c:dd:5f:dd:d5:da:36:b1:ab:a4:4f:27:20:3f:
                    02:c6:9c:5d:b7:61:73:9b:81:5e:e9:b1:99:67:cf:
                    5c:cc:bd:f6:6e:dc:2e:10:3c:82:31:11:b4:51:e7:
                    61:71:ae:bf:72:37:eb:d1:c1:8d:5b:4a:5c:f4:45:
                    87:15:95:e0:eb:a2:fc:3f:a5:17:26:a1:fa:3d:bd:
                    2b:ee:60:e9:e8:69:1f:44:8a:2f:a4:ba:71:1c:ea:
                    64:b6:d6:97:a9:27:ef:6e:3c:5a:b5:66:b3:e7:6c:
                    af:63:8d:1c:0e:01:be:f9:2a:f0:d2:a1:4f:0a:61:
                    85:ce:05:9f:a5:c5:9d:9f:89:66:c6:9d:6e:7c:9b:
                    44:ec:a3:73:ca:20:19:c3:19:1f:ae:d5:a2:6c:0f:
                    68:e7:63:40:5e:6c:84:1f:5a:bd:a1:3c:36:3a:50:
                    a2:a1:28:5e:25:01:c1:8e:6b:d9:e9:f9:5a:68:bd:
                    56:4f:75:76:b3:17:09:9f:65:3a:42:1e:e9:87:64:
                    4d:11:92:3f:f7:3b:55:a7:26:fd:31:01:98:86:30:
                    03:11:f3:0e:08:44:9a:b0:eb:b1:3a:84:48:4a:2a:
                    a9:62:93:9d:a4:4e:ec:22:10:b4:e2:15:be:d8:00:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:18:12:63:9D:01:D2:19:C8:B0:91:18:0B:4D:1C:36:EE:8A:CA
            X509v3 Authority Key Identifier:
                keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/764YEmOdAdIZyLCRGAtNHDbuiso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:2278:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:48:e7:66:5e:9f:05:ee:7c:eb:25:ee:ae:ba:0c:c2:8d:8b:
         2e:9e:44:a6:d3:c3:06:a7:62:ea:e0:d7:48:69:b7:d9:79:26:
         a8:df:dc:dd:e8:ab:16:33:d0:52:e4:52:f9:62:77:ec:75:7e:
         cd:39:09:2a:74:3a:a4:53:c4:a9:38:37:b3:ee:67:a3:61:09:
         89:4d:81:24:60:91:de:93:00:0e:3f:96:e7:e9:7a:8c:a5:7f:
         ce:32:f5:0c:6b:83:50:f2:c1:11:74:0c:1b:98:57:ee:c8:f0:
         e5:39:78:6a:bb:bc:58:64:d2:68:3d:ba:e5:ab:ab:80:40:50:
         26:ca:6a:b3:a4:4b:a8:84:f3:e4:4d:53:e1:73:98:1b:2a:c2:
         d6:51:ee:21:37:d5:a8:49:3e:7b:87:59:a9:40:06:24:64:3a:
         05:9d:08:a5:ab:1a:cb:5e:a0:76:1a:b2:ab:b7:f6:c1:a1:cf:
         56:22:b5:87:f6:be:ab:35:79:d8:0e:bd:45:4e:c9:db:b5:3a:
         12:b8:3b:2f:b3:a3:11:8e:4b:c6:30:d3:3c:4f:99:10:e6:38:
         39:36:22:dd:13:00:f7:af:44:52:10:ab:bf:cf:3a:ca:fd:7b:
         f7:34:75:9d:15:7b:bd:39:26:d2:59:4c:c8:c6:35:6a:1d:62:
         fe:e1:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----