Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa
File:                     AS215899.roa (raw, json)
Hash identifier:          SRhFWakQ2MEqGgqDT4am5/QrIkb8KLT9VhYPPakDazs=
Subject key identifier:   71:77:45:D9:1C:D6:3E:94:6B:D5:CB:1C:B5:5D:26:CA:44:15:85:0A
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       2B8EE91CEFF4B8E80D5482043A8063D6C87D7437
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa
Signing time:             Sun 06 Apr 2025 13:10:58 +0000
ROA not before:           Sun 06 Apr 2025 13:05:58 +0000
ROA not after:            Sun 05 Apr 2026 13:10:58 +0000
asID:                     215899
IP address blocks:        2a0f:9400:6938::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:e9:1c:ef:f4:b8:e8:0d:54:82:04:3a:80:63:d6:c8:7d:74:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Apr  6 13:05:58 2025 GMT
            Not After : Apr  5 13:10:58 2026 GMT
        Subject: CN=717745D91CD63E946BD5CB1CB55D26CA4415850A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:e5:88:93:83:f9:ee:c2:6e:e9:f2:9a:e4:
                    9e:69:7f:5d:60:28:62:5a:db:d7:eb:5c:f1:ce:d0:
                    70:53:5f:62:35:51:b3:73:a6:9a:7f:99:02:2f:b3:
                    39:62:bb:a6:12:b9:84:0c:c2:e9:48:a0:c3:3f:68:
                    e3:f1:99:94:ca:2e:07:62:d2:d1:99:14:91:7b:8a:
                    fb:4e:f3:4d:06:a6:83:7a:9f:1d:13:bd:28:ec:06:
                    cf:a8:60:ba:64:cc:a2:b0:5b:7f:41:cd:bd:f2:5b:
                    61:0f:f9:5d:8f:97:05:7c:53:60:bb:c9:e8:5b:fe:
                    69:70:c7:87:56:49:06:32:db:6c:ab:aa:c8:98:b2:
                    7d:fa:63:1a:ad:3d:a4:dc:e1:14:38:bf:3e:f4:fd:
                    0c:17:ae:9a:b8:1d:32:11:f4:de:eb:b9:ba:b1:b6:
                    3d:03:2a:18:2e:91:10:1c:c2:61:c4:a1:7f:8d:b8:
                    9e:21:22:66:82:cd:81:c4:1a:6f:db:b4:c9:53:df:
                    7c:5d:f6:98:3d:fd:34:f1:58:db:28:cc:fc:f3:26:
                    55:38:ad:26:90:1c:0b:ce:49:8f:ed:d0:1d:f6:cd:
                    8f:5d:e4:6c:c5:b4:dd:c1:72:a9:be:ca:e1:00:82:
                    37:68:43:7d:fa:54:e1:d2:e5:5a:54:56:6a:d2:60:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:45:D9:1C:D6:3E:94:6B:D5:CB:1C:B5:5D:26:CA:44:15:85:0A
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6938::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:11:14:29:cb:c0:d5:a5:42:ae:97:56:63:a9:56:5b:31:
         6d:bd:42:41:fd:78:06:6b:4d:07:50:b6:37:58:08:06:e2:78:
         0f:b9:74:bc:ae:b3:08:9b:1f:30:3a:c8:a4:fa:2d:8c:55:5b:
         8a:c3:c5:b5:51:6e:31:d1:17:db:ee:80:67:a4:76:78:8a:7c:
         32:8b:58:05:e4:3b:d7:b1:6f:12:41:b5:cb:79:43:63:c7:06:
         0d:65:7b:e9:2f:e8:66:81:6d:3a:48:11:6b:0a:93:d5:41:a7:
         e7:d9:f1:e6:76:15:00:2c:5c:ec:cf:3e:ce:ab:ec:99:14:4d:
         ec:6f:8f:2c:40:44:c0:15:28:2c:30:6c:df:d7:3c:80:05:ea:
         d9:21:93:b6:16:3d:74:36:fc:fe:57:de:22:ed:ef:30:01:e1:
         7b:9c:55:80:2f:2f:30:30:08:b0:9b:6c:f9:05:03:dc:f0:80:
         b2:35:ec:5a:99:08:2e:d5:c6:6a:2d:8f:da:10:4e:22:e4:54:
         2a:2a:85:36:c9:cc:b4:d1:2a:a9:2a:1b:67:04:d0:c5:25:8d:
         0e:e1:f2:4f:70:5f:7d:05:f7:92:06:06:af:f9:34:0c:87:44:
         a0:92:71:58:47:2d:07:9c:5d:ea:d4:8d:31:1a:c2:36:f5:d8:
         77:99:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----