Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/3/326131313a366530313a3a2f33322d3438203d3e20393137.roa
File:                     326131313a366530313a3a2f33322d3438203d3e20393137.roa (raw, json)
Hash identifier:          GZTk3KIHClK67ig+m41IhrKRZrpam5GghXcdsJ51t1E=
Subject key identifier:   6C:26:C4:54:01:6C:EB:CB:73:4C:6F:1C:24:20:4A:6D:3A:EF:04:3B
Certificate issuer:       /CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
Certificate serial:       5DF4D6EFE483C5FD2B3E43C81E640B690441F8B2
Authority key identifier: A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/3/326131313a366530313a3a2f33322d3438203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:29 +0000
ROA not before:           Sun 03 Dec 2023 21:33:29 +0000
ROA not after:            Sun 01 Dec 2024 21:38:29 +0000
asID:                     917
IP address blocks:        2a11:6e01::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f4:d6:ef:e4:83:c5:fd:2b:3e:43:c8:1e:64:0b:69:04:41:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
        Validity
            Not Before: Dec  3 21:33:29 2023 GMT
            Not After : Dec  1 21:38:29 2024 GMT
        Subject: CN=6C26C454016CEBCB734C6F1C24204A6D3AEF043B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:97:02:d5:03:95:41:fd:50:2d:4c:51:9d:
                    ad:e0:79:68:42:52:01:73:d2:18:1f:80:ea:06:93:
                    45:16:e7:01:fa:c1:9e:90:04:1e:2b:bb:e4:f8:70:
                    4c:44:2f:a9:44:82:8e:ec:1e:a9:5e:51:55:83:67:
                    75:7c:ca:39:af:89:fe:e2:6a:bf:a4:20:ff:02:ce:
                    c7:9f:b5:28:26:12:bb:63:74:ab:20:b3:6b:a5:d0:
                    b7:44:22:80:4c:d7:6e:79:70:50:4b:24:6a:6f:d4:
                    8c:3b:48:e3:6c:95:fb:b9:29:bb:f6:aa:b4:be:40:
                    a8:2b:69:38:cc:c2:7c:5c:e3:13:68:de:89:19:22:
                    5e:3c:1d:c7:5a:c3:72:e0:e4:41:12:76:f9:c0:f9:
                    b1:2f:0e:87:eb:dd:e2:81:4e:fe:26:6e:74:e6:d1:
                    77:d1:f9:4b:2c:59:02:a6:ac:fc:14:28:82:29:7a:
                    32:2f:bf:a6:9e:47:53:c5:eb:3c:49:b4:1e:b7:37:
                    ef:a4:cc:a9:d6:e5:0b:22:9c:da:83:cf:91:7a:5f:
                    16:7c:89:04:e3:d1:09:f4:b5:f2:43:e5:4d:90:50:
                    4d:6c:fd:4d:91:e2:a5:7f:2c:45:47:dd:6b:ee:bf:
                    98:6b:54:35:7b:5c:c0:28:4f:f6:9e:e0:50:96:bd:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:C4:54:01:6C:EB:CB:73:4C:6F:1C:24:20:4A:6D:3A:EF:04:3B
            X509v3 Authority Key Identifier:
                keyid:A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/3/A66BB45AE5394C7B0194EE291E013D40962A4B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/3/326131313a366530313a3a2f33322d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:6e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:dc:c0:1b:76:ff:85:bf:e0:96:34:1a:03:fa:3f:e8:28:
         2e:ed:01:93:8f:d5:76:a1:24:ca:15:59:33:b4:06:1c:b7:37:
         4e:03:9e:cd:2b:ea:b4:18:c9:3d:2e:f6:e7:5e:b1:80:a6:22:
         ca:b9:ee:4f:0d:ab:6c:74:18:36:21:62:b8:2e:eb:6c:2d:f3:
         bf:32:2b:0b:f4:17:86:20:ba:ec:b8:35:9b:ba:32:9a:1b:51:
         97:97:3c:2b:7e:ae:37:14:d6:68:f4:bd:fe:43:1c:d9:c0:fe:
         52:c2:9c:80:cb:4d:d4:1f:d8:06:bd:2f:f5:fe:24:d6:4c:d0:
         a3:66:0e:b5:82:50:13:b5:65:e8:b0:99:91:c8:8a:7c:8c:91:
         76:3e:91:9e:fd:77:13:b6:66:8a:23:73:8a:2d:5d:66:b8:b7:
         aa:91:e3:e4:71:2a:85:d8:4d:ac:35:fb:a2:ef:ea:b0:66:ba:
         40:28:33:5a:6c:c6:7e:89:93:68:ae:54:45:35:12:1f:a4:8f:
         28:9b:bd:1a:fa:74:15:83:30:30:26:48:64:31:eb:91:9a:e3:
         28:17:06:df:45:d8:13:d2:9f:a0:d4:ff:b9:e7:17:8c:12:00:
         0d:b2:96:04:22:46:7d:ee:dd:f8:4b:3a:33:e8:af:37:6d:0f:
         ea:0e:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----