Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/biKRt7g_kd5_WHcG9Sv_6yodZiI.roa
File:                     biKRt7g_kd5_WHcG9Sv_6yodZiI.roa (raw, json)
Hash identifier:          0I8yQ1bapWrZjbk/4t8NRHQcRBF23t27HxpmWq4nGcM=
Subject key identifier:   6E:22:91:B7:B8:3F:91:DE:7F:58:77:06:F5:2B:FF:EB:2A:1D:66:22
Certificate issuer:       /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial:       0192F20DC5543110EBE77DF88654CD779517
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/biKRt7g_kd5_WHcG9Sv_6yodZiI.roa
Signing time:             Sun 03 Nov 2024 12:44:01 +0000
ROA not before:           Sun 03 Nov 2024 12:44:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214237
IP address blocks:        2a01:e880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f2:0d:c5:54:31:10:eb:e7:7d:f8:86:54:cd:77:95:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
        Validity
            Not Before: Nov  3 12:44:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6e2291b7b83f91de7f587706f52bffeb2a1d6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:a0:62:73:93:82:03:5f:14:75:31:b9:0e:
                    2d:f9:ea:f5:46:85:e4:ad:05:4e:bd:6a:40:18:3c:
                    01:70:8d:75:97:f0:13:31:33:fe:dc:e1:57:ef:8c:
                    95:80:4f:fc:cb:44:38:06:77:a0:48:78:8d:2c:2f:
                    d3:b6:3b:74:1f:d7:9f:74:80:ca:af:60:d3:eb:db:
                    b7:cf:d4:af:1a:3a:41:4b:45:c5:58:4b:22:f0:40:
                    85:c0:79:85:01:1f:1a:c6:9f:8a:d7:18:a2:e4:06:
                    90:d1:5b:e9:ec:13:f8:c2:b6:f4:44:f0:00:7c:ec:
                    0f:45:40:ed:75:c5:4a:e9:7e:4d:3d:94:b4:85:37:
                    e9:aa:e5:b8:7e:4c:85:7d:65:5d:d4:9d:f0:21:96:
                    a5:d6:e7:ad:15:bb:7f:2c:17:d3:cb:fb:0e:62:e6:
                    71:fd:f7:3f:9f:41:af:e5:61:9e:66:7a:c2:33:ee:
                    46:10:ba:80:12:6a:3d:9c:16:aa:0f:dc:14:51:12:
                    37:88:b8:4d:71:f6:cf:4d:7a:a8:f8:f0:ab:d7:3b:
                    4c:6c:08:f5:5b:97:ca:e4:f8:97:c9:20:d8:23:4e:
                    7d:34:99:92:8a:9e:9e:36:a1:bb:b3:53:5b:42:7c:
                    25:2d:10:6e:23:84:1c:ba:02:f3:21:da:d6:51:71:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:91:B7:B8:3F:91:DE:7F:58:77:06:F5:2B:FF:EB:2A:1D:66:22
            X509v3 Authority Key Identifier:
                keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/biKRt7g_kd5_WHcG9Sv_6yodZiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:7f:cd:2f:0a:98:3b:20:5b:42:d3:75:e4:00:85:20:cb:
         be:1a:f6:2d:f8:4f:58:01:59:b4:ac:d6:99:02:90:3a:a5:7b:
         2b:23:7a:76:ef:23:99:f2:18:c1:ec:7e:ce:db:06:5b:cb:15:
         f2:a0:a0:2e:98:24:50:0c:f1:e8:17:33:f6:c9:55:d0:24:59:
         ed:54:74:f3:d4:6b:d5:18:b2:b2:b1:f0:ce:d9:2a:69:d6:46:
         ab:f0:72:9c:2d:56:b3:18:6f:76:64:bb:d2:03:fe:85:b8:50:
         a6:5c:76:2f:a7:58:38:0e:01:77:50:7a:fd:f9:0c:fb:dd:8e:
         cd:b1:e6:1c:d9:fb:51:84:19:9d:65:7b:04:62:6f:33:83:61:
         5d:86:7b:8d:f1:2c:bd:e8:c6:48:62:c3:97:1d:37:6b:20:52:
         d6:be:be:2b:d8:b9:c6:fe:d8:fb:a3:43:f0:5a:f8:cb:3f:9e:
         db:b3:34:7e:dc:0a:24:8f:48:e8:30:f4:b3:82:14:dd:ee:5c:
         4f:9e:d5:6d:16:1d:7e:d6:df:b7:74:30:a8:ed:0e:a5:48:c5:
         ef:60:39:a8:41:9e:46:13:34:08:c4:bc:8f:9c:ea:e0:8a:c8:
         ff:d1:f0:54:ea:f5:d4:fb:57:50:23:d9:65:ba:27:a7:7a:98:
         75:78:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----