Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/tl7GaLblOWr2GanIAlszHrHcQa8.roa
File:                     tl7GaLblOWr2GanIAlszHrHcQa8.roa (raw, json)
Hash identifier:          6I0v9Zu0sa21SgWy2hnLUqumUqvlsRKc2tRmYosfTp0=
Subject key identifier:   B6:5E:C6:68:B6:E5:39:6A:F6:19:A9:C8:02:5B:33:1E:B1:DC:41:AF
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       0195F6E3F874FE24AF97F54320404E536F1E
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/tl7GaLblOWr2GanIAlszHrHcQa8.roa
Signing time:             Wed 02 Apr 2025 14:24:50 +0000
ROA not before:           Wed 02 Apr 2025 14:24:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206873
IP address blocks:        2a0c:ac7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f6:e3:f8:74:fe:24:af:97:f5:43:20:40:4e:53:6f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Apr  2 14:24:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b65ec668b6e5396af619a9c8025b331eb1dc41af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:dc:8f:b7:83:12:ec:50:94:0e:91:c7:85:
                    e3:7b:e6:4e:81:be:0f:ce:80:2e:d0:75:ea:3e:67:
                    ee:49:1e:d5:4b:26:8c:2f:f7:9d:85:34:b5:f0:8a:
                    1e:37:33:be:e5:3c:1d:5c:02:49:fe:b3:87:38:03:
                    4e:88:64:8c:22:d6:b8:b2:ae:4c:9d:1a:8e:ec:db:
                    38:76:85:f7:4c:d5:bd:e3:ef:b6:ed:be:88:c2:43:
                    83:3a:87:bf:3d:c5:e6:ba:3b:f8:57:65:e2:f1:02:
                    48:e9:f2:c0:8e:d1:b9:19:ed:f9:e7:e8:aa:36:2c:
                    63:26:2f:1e:72:b4:15:a6:1d:06:89:e0:ae:37:82:
                    52:cd:a7:d0:86:cf:3a:fe:e0:63:68:78:88:56:74:
                    fa:f3:ce:c6:f6:1d:e8:d3:04:5f:98:44:43:61:df:
                    ec:7a:8c:1b:bd:1e:e5:92:8c:d4:86:52:97:d5:46:
                    c1:11:e9:be:f7:be:ed:8f:79:87:4f:81:68:a8:b1:
                    c8:6e:c9:d5:7b:26:58:54:c3:46:ca:71:24:2a:1b:
                    d6:94:7a:87:5b:09:7c:2f:2f:48:f5:3a:70:12:25:
                    c2:b2:b6:e1:a5:6a:9a:9b:c5:bd:da:4c:ad:cb:96:
                    2c:db:03:39:22:45:4a:2b:df:ab:56:31:18:fd:8b:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5E:C6:68:B6:E5:39:6A:F6:19:A9:C8:02:5B:33:1E:B1:DC:41:AF
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/tl7GaLblOWr2GanIAlszHrHcQa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:ac7::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:32:7f:0e:9b:ec:5c:95:8a:50:19:35:f7:2a:ca:39:bc:32:
         f6:03:d7:5f:71:22:6f:57:3b:a0:81:2a:90:98:5b:d6:10:6b:
         dd:fd:18:9a:bc:49:b0:73:24:fe:39:21:65:f5:db:ef:f4:47:
         d8:47:8a:5c:03:47:4a:ec:d0:c2:37:90:96:af:a6:f3:a9:eb:
         9d:91:b5:31:81:a0:09:a8:cf:48:f7:e4:f3:b8:ca:c5:c6:93:
         7b:ef:36:74:84:df:ff:30:28:d1:f3:b2:63:51:4e:0c:db:84:
         97:e0:a8:5f:a7:af:87:e9:37:a5:a0:de:e2:e3:c5:4b:e1:e3:
         0b:21:00:54:ff:cf:6d:7f:76:a8:e0:74:ea:76:5d:a6:25:d9:
         47:38:b7:d3:03:d6:79:e0:fa:e7:34:b3:95:4e:17:43:8c:73:
         95:6a:6b:4c:c1:6a:70:49:76:bb:d4:55:9a:ba:b6:c5:72:97:
         64:a0:e5:ba:d6:bc:62:ac:4a:94:0e:86:e3:f4:34:12:f9:c4:
         59:c5:e5:44:fe:dc:25:42:f3:ab:3d:6a:55:a6:a3:14:78:cb:
         7b:19:b2:90:3c:8d:78:05:51:03:4a:91:1d:bf:d3:72:42:2b:
         41:25:3d:ca:d7:80:58:f3:9d:dc:45:ac:5c:fd:35:e5:24:05:
         c0:3f:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----