Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RxiVRcsHeclsIn7rqDibVKMm4qY.roa
File:                     RxiVRcsHeclsIn7rqDibVKMm4qY.roa (raw, json)
Hash identifier:          RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=
Subject key identifier:   47:18:95:45:CB:07:79:C9:6C:22:7E:EB:A8:38:9B:54:A3:26:E2:A6
Certificate issuer:       /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial:       0194244544B3CF20E50C5D56AA2D251973D2
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RxiVRcsHeclsIn7rqDibVKMm4qY.roa
Signing time:             Wed 01 Jan 2025 23:48:26 +0000
ROA not before:           Wed 01 Jan 2025 23:48:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     14616
IP address blocks:        2a02:e38:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:44:b3:cf:20:e5:0c:5d:56:aa:2d:25:19:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
        Validity
            Not Before: Jan  1 23:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=47189545cb0779c96c227eeba8389b54a326e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:a9:8c:84:a9:4e:5f:57:db:06:7b:fe:e8:
                    82:8f:f8:ba:11:43:2c:26:a6:0e:e4:a4:ab:79:da:
                    e3:ed:98:92:c6:c5:83:55:21:2f:dd:6c:43:15:cc:
                    ad:42:14:db:e0:e5:4e:5e:b3:cc:67:23:fa:cf:50:
                    a1:70:a1:83:be:a4:6e:cf:16:70:86:75:5c:73:7e:
                    e3:78:a3:f4:63:8f:90:2e:89:00:e0:44:b5:3c:5e:
                    3c:7d:4a:b9:d0:48:f0:f9:b9:bb:5f:60:cc:a0:1a:
                    05:65:0b:b1:0d:c7:c6:d9:1b:32:7b:b7:d0:63:fd:
                    60:cb:12:f0:54:ab:1e:40:68:b8:14:73:91:a9:a7:
                    09:01:82:78:e0:b6:98:4f:a9:2d:54:34:cd:db:14:
                    68:46:f7:5f:94:c1:cb:97:0a:d2:24:60:16:15:01:
                    56:d4:20:3b:f5:bb:83:14:c7:cc:ec:ab:3b:e1:ff:
                    ab:21:f5:a6:66:6e:bc:de:ae:8c:c3:0b:87:d5:76:
                    6c:93:38:92:24:d0:ca:a6:5e:19:c1:64:d3:78:66:
                    4b:a9:b7:1a:f4:cc:48:77:f4:a3:62:a7:da:ee:09:
                    02:b2:51:a8:48:84:ab:10:3f:8a:97:b1:9f:e4:3f:
                    2b:47:4c:4b:f5:1b:03:5f:4f:50:ac:d8:61:9a:97:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:95:45:CB:07:79:C9:6C:22:7E:EB:A8:38:9B:54:A3:26:E2:A6
            X509v3 Authority Key Identifier:
                keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RxiVRcsHeclsIn7rqDibVKMm4qY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:e38:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:50:49:67:f9:87:bd:15:5a:93:ca:c1:b8:f2:a4:5c:31:3f:
         20:f9:51:9b:2c:e9:9c:b8:6e:31:60:77:42:9a:0b:1e:2b:e1:
         33:d3:0e:fe:58:b8:dc:3d:4a:1d:40:f3:b8:f2:9c:c1:60:62:
         04:03:d1:92:d5:4a:05:42:05:6e:4c:2a:98:64:0e:9a:9c:93:
         b7:bb:bf:19:38:a1:4e:de:7d:e7:88:30:d4:ec:98:27:da:70:
         d3:f2:a2:2a:62:30:0d:c5:05:63:e7:e5:f1:29:f0:98:b3:49:
         e6:7e:ad:53:69:b2:45:3c:cc:47:8f:ad:59:1c:a7:f1:68:40:
         0d:0f:5a:bb:82:2d:e1:f1:d9:60:39:d5:5f:6e:63:c6:22:07:
         6e:3e:c5:c9:4b:d9:f4:ec:44:5e:e2:4c:16:af:57:25:01:ba:
         2a:e4:a1:ba:ee:ed:21:85:da:a8:03:45:e1:bc:35:38:63:90:
         5f:56:63:ee:7e:98:91:b7:e9:3c:f6:d4:32:04:d6:8a:c6:bb:
         a9:ef:b0:52:9c:d0:da:a1:f7:fd:bd:7a:12:ab:6a:24:19:e8:
         ca:45:9a:6a:3b:4d:56:60:fd:4d:d6:6f:8b:61:33:a7:01:f1:
         dc:bf:0b:a9:76:6a:a2:9b:a8:2d:d9:33:57:7b:3d:7a:ae:e2:
         49:29:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----