Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/6QO3cTjjCR49mOoibLSrR6PgEFs.roa
File:                     6QO3cTjjCR49mOoibLSrR6PgEFs.roa (raw, json)
Hash identifier:          htto/CBuXDSNEZzS4hD+i4Ia1y5SxuT0EMlxTxYgXY0=
Subject key identifier:   E9:03:B7:71:38:E3:09:1E:3D:98:EA:22:6C:B4:AB:47:A3:E0:10:5B
Certificate issuer:       /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial:       0188C4C45EA884FF001E5AE973B33F12AF3B
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/6QO3cTjjCR49mOoibLSrR6PgEFs.roa
Signing time:             Fri 16 Jun 2023 15:13:03 +0000
ROA not before:           Fri 16 Jun 2023 15:13:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59676
IP address blocks:        2001:67c:2278::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c4:c4:5e:a8:84:ff:00:1e:5a:e9:73:b3:3f:12:af:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
        Validity
            Not Before: Jun 16 15:13:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e903b77138e3091e3d98ea226cb4ab47a3e0105b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:b6:66:e9:7d:6c:46:ef:46:f7:e7:ca:d3:
                    32:f6:87:b4:77:43:a3:fa:3a:81:31:8e:42:bb:15:
                    5f:cc:32:6f:37:69:a1:3c:e5:95:57:5a:7b:4a:7d:
                    2d:88:fe:62:50:05:e5:75:7d:c8:97:96:0f:99:de:
                    aa:b6:d8:da:61:e2:95:17:0c:ea:27:21:3a:f5:82:
                    8e:de:47:60:29:83:4f:b0:c0:3d:88:e8:ab:cb:65:
                    a0:18:49:81:b8:47:b2:ab:77:33:fe:43:30:aa:9b:
                    c9:a5:84:b8:b5:e2:ce:aa:e1:7f:04:87:89:79:28:
                    e8:dc:62:94:0a:99:89:73:f9:27:95:96:5d:9f:c2:
                    9f:8a:f7:7c:94:7d:cd:15:81:04:30:f5:de:ae:3d:
                    c8:47:95:89:35:b3:3e:30:25:5f:e6:85:69:23:5b:
                    0f:9c:ff:5e:e3:b0:0c:d9:a1:ff:b7:94:fe:c3:42:
                    21:98:21:4d:df:40:8e:1c:41:e2:17:ec:e4:7b:d3:
                    e6:a7:42:29:ec:dc:34:bc:5d:1c:b5:82:da:9e:aa:
                    49:0e:09:6d:3a:2d:2c:99:42:c1:ee:f8:da:0b:30:
                    22:3b:02:aa:43:c2:8e:c5:82:a7:d7:ca:84:b2:aa:
                    17:a7:a5:91:cf:79:1e:35:e4:66:13:a3:c7:6e:a3:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:B7:71:38:E3:09:1E:3D:98:EA:22:6C:B4:AB:47:A3:E0:10:5B
            X509v3 Authority Key Identifier:
                keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/6QO3cTjjCR49mOoibLSrR6PgEFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2278::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:50:2c:68:09:c3:0d:48:6f:81:12:07:05:4d:76:ce:0b:7e:
         9d:86:0a:27:33:be:17:37:06:79:37:9c:e4:ac:31:8e:da:97:
         1e:39:6a:3a:a5:74:c5:35:f1:31:8b:7b:22:d1:25:a0:83:40:
         a4:7c:dc:1d:ba:3d:b3:55:24:16:ba:3f:06:8d:bd:98:e6:98:
         b1:77:d6:fb:7e:80:9f:ea:ed:c7:c1:97:93:d5:d4:12:af:6d:
         94:db:b0:b8:15:c0:7c:e6:9b:e6:4a:2d:fb:48:a2:d7:1e:d4:
         3f:07:8b:aa:f9:ed:45:ec:df:7c:01:ff:f6:66:bc:2c:b8:94:
         12:f4:c5:7b:9a:34:91:68:ee:17:c5:f2:6a:51:b4:85:56:50:
         0a:4a:72:67:8a:58:b0:e1:8e:09:e3:2a:57:0b:81:87:d7:9c:
         d7:c2:d7:32:10:11:6c:29:46:22:6c:a0:27:fa:74:a8:69:ef:
         49:10:90:18:2d:59:64:14:10:cb:3a:81:c4:fa:d6:20:73:37:
         fd:55:c6:b9:76:24:04:7e:92:93:29:9b:53:1d:1b:07:cd:06:
         fe:78:db:0a:03:e8:68:bd:e7:65:56:8b:f3:60:80:e9:ef:24:
         4d:c7:de:3d:a4:88:ec:3e:25:64:ec:76:11:ed:31:28:c7:ce:
         82:0b:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----