Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203333.roa
File:                     AS203333.roa (raw, json)
Hash identifier:          fQ/DV6F3NFn0kjOkJDkRnU3cEsXD8rA6pc1yTvaGn6E=
Subject key identifier:   37:1F:75:B9:F3:0A:F0:D6:15:F6:08:87:5F:EC:CB:B0:9E:97:A8:3E
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       48ED84086D5652CBACD2316D8C9CBF00F6C2A458
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203333.roa
Signing time:             Sun 30 Mar 2025 16:42:25 +0000
ROA not before:           Sun 30 Mar 2025 16:37:25 +0000
ROA not after:            Sun 29 Mar 2026 16:42:25 +0000
asID:                     203333
IP address blocks:        2a0f:9400:7383::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ed:84:08:6d:56:52:cb:ac:d2:31:6d:8c:9c:bf:00:f6:c2:a4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Mar 30 16:37:25 2025 GMT
            Not After : Mar 29 16:42:25 2026 GMT
        Subject: CN=371F75B9F30AF0D615F608875FECCBB09E97A83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:e5:8f:16:a4:43:db:92:84:cb:4d:f3:f9:
                    38:17:9b:ae:04:c3:41:e1:a4:77:e5:45:ec:a7:69:
                    81:04:b5:ef:8b:07:a4:1f:14:a7:d3:23:38:3d:f3:
                    10:ba:d3:d2:dd:70:13:4f:3c:92:6b:e9:4a:4e:41:
                    06:b8:fa:ed:74:cf:2b:a8:7a:69:7a:6a:b5:36:fa:
                    5d:96:f7:7d:6f:7c:13:5d:6e:f2:5e:72:3e:76:84:
                    c3:91:7f:fb:e7:cc:c4:98:7b:a8:75:64:fb:ff:4a:
                    7c:4d:61:67:33:fa:59:da:1a:40:36:ee:da:24:25:
                    6b:04:25:f4:51:80:27:5f:d9:ec:86:a5:cc:c8:b5:
                    28:ce:bb:8e:f7:0d:61:27:ab:47:b3:09:85:80:0b:
                    cb:c6:e7:e3:f4:08:af:df:b2:e5:54:68:c4:87:75:
                    d6:d8:3d:88:c2:46:2b:30:b0:89:94:47:d9:f3:69:
                    b6:11:07:68:24:b9:4d:9c:57:20:fc:cf:3b:94:cf:
                    b8:0f:69:28:c2:4a:55:62:64:c6:7b:92:7c:54:75:
                    ab:75:97:c5:1a:b4:df:5a:9b:e6:e0:38:1f:24:18:
                    9b:7a:82:cc:67:3f:64:e2:fc:58:69:8f:5e:98:f8:
                    2c:cc:8d:1d:d2:2a:c3:84:f7:0f:b1:e6:3e:59:fc:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:75:B9:F3:0A:F0:D6:15:F6:08:87:5F:EC:CB:B0:9E:97:A8:3E
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:7383::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:fc:eb:bd:36:ff:f8:07:2b:4c:5b:0e:79:6c:5f:30:37:
         02:71:ff:e9:68:fb:07:8d:47:39:fc:66:9a:02:64:59:6c:98:
         57:7b:cc:07:09:8a:35:ab:57:0e:7b:0d:9d:68:fc:87:a1:40:
         a6:b7:fe:8a:04:bd:9a:f9:2c:f2:be:82:35:3f:60:b0:ae:ec:
         db:90:a3:d1:71:13:8e:2d:18:51:23:6d:dc:73:26:fb:0c:ed:
         e4:1a:33:80:5d:e1:bc:d8:31:bc:dd:40:2e:0b:0d:22:25:f9:
         97:3b:4c:e6:a1:2c:8a:e0:39:e5:a9:fb:d3:f9:ff:6c:b6:57:
         e4:26:0d:dc:f5:73:2f:3c:6f:9b:c3:e6:2b:d6:c0:4b:e6:a1:
         54:bd:8b:e2:3c:df:d3:67:3a:97:b7:69:26:8b:97:64:6c:af:
         76:24:51:ed:3e:f3:91:1a:91:06:86:31:7d:fe:42:07:40:bb:
         79:10:7b:fb:01:d5:d8:93:df:81:90:a6:26:f3:97:4b:e0:28:
         cd:74:37:00:0a:4a:c0:ed:43:3c:e8:9c:27:e2:9e:30:b3:77:
         a2:ef:9e:fc:b2:c3:b2:53:86:76:70:97:c1:8c:ee:08:bb:60:
         68:2c:41:a3:11:b9:7b:13:a0:d9:70:dc:88:f1:5a:e5:25:fa:
         fb:c7:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----