Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa
File:                     Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (raw, json)
Hash identifier:          jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=
Subject key identifier:   67:FD:5D:28:A8:39:8F:F6:55:20:8C:C2:A0:81:E3:59:8C:25:9B:6D
Certificate issuer:       /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial:       01941FFA5970DD9933E86233F8F801E297E0
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa
Signing time:             Wed 01 Jan 2025 03:48:08 +0000
ROA not before:           Wed 01 Jan 2025 03:48:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34083
IP address blocks:        178.219.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:59:70:dd:99:33:e8:62:33:f8:f8:01:e2:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
        Validity
            Not Before: Jan  1 03:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67fd5d28a8398ff655208cc2a081e3598c259b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:20:97:a5:55:8a:42:c9:dd:12:3a:07:b4:
                    fc:1e:3d:14:49:8d:ba:8d:7c:76:43:bc:19:b0:12:
                    b6:86:60:ad:5c:02:cb:8b:52:b4:51:50:70:8e:4e:
                    9b:f6:01:2c:fb:c1:07:93:65:a7:db:e2:60:54:69:
                    75:a9:68:35:50:f2:a5:c2:02:7b:c5:06:af:9a:77:
                    bb:67:5b:c9:1d:98:7c:cc:d2:01:54:37:ee:f4:8c:
                    7a:e4:e4:fb:e7:fa:e1:cb:bd:8b:e9:8d:f5:05:36:
                    ca:a8:61:52:38:07:07:85:af:d9:72:df:10:66:ea:
                    5e:eb:ff:c4:71:36:3f:87:ce:b5:83:7b:93:4b:50:
                    c0:c6:70:d6:06:19:c3:b6:a1:79:71:0b:a7:2f:f4:
                    66:18:dd:44:da:9c:21:61:8d:63:1f:12:c5:6a:cd:
                    0e:d2:d6:eb:25:4e:44:a4:c8:e0:d2:f9:bc:30:44:
                    bf:76:75:69:cb:4e:cf:6a:73:cc:81:b0:d8:e4:11:
                    4d:13:fd:fb:c3:0a:27:07:04:ba:95:ea:09:60:01:
                    b2:05:48:ff:04:3f:46:5a:1e:f0:16:5e:a2:4f:fc:
                    6f:25:17:62:c1:43:f4:9a:10:cc:6e:2a:f6:fd:ec:
                    34:51:b0:9b:c1:ee:c9:02:b6:49:bd:de:26:52:02:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:5D:28:A8:39:8F:F6:55:20:8C:C2:A0:81:E3:59:8C:25:9B:6D
            X509v3 Authority Key Identifier:
                keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.219.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:72:ff:02:f8:d4:d7:1a:53:74:00:53:93:5a:39:d6:ef:
         19:eb:60:fc:c3:d2:0f:a3:58:3b:10:e2:21:fe:16:6e:bb:ba:
         9b:b3:aa:3c:f6:ff:33:70:a0:af:2e:d1:f7:d2:bf:78:bf:98:
         63:5f:f8:ac:44:88:e0:c5:de:b7:f2:f7:6d:81:2e:d7:6e:01:
         69:ad:e5:4b:68:f0:96:13:2f:48:3c:d3:dc:21:3b:f4:3f:da:
         bb:fe:22:72:d3:7b:fa:e1:ee:6b:07:5f:07:2a:fe:ab:92:71:
         c7:d6:d8:66:d0:44:d6:6d:cb:6e:f3:21:6e:b6:8c:38:b8:11:
         0e:72:f4:7a:81:52:1b:01:68:63:da:fe:b1:5f:4e:91:4a:6a:
         8a:d9:84:5e:63:70:0d:6e:0f:56:37:2b:dd:04:ce:ee:96:ca:
         72:55:56:b7:43:10:d5:2f:a3:ae:d8:ac:31:17:73:ab:c4:ca:
         ff:27:42:52:95:4b:9c:ea:82:50:c6:75:11:52:75:db:b6:be:
         fd:34:6b:5d:56:ea:3d:3b:35:00:d2:2d:ee:7e:db:9c:61:e7:
         65:f1:35:f0:3c:eb:8e:b6:97:72:da:ab:0e:c6:71:56:90:30:
         89:42:dd:53:be:1d:f8:43:f9:54:fc:4c:06:0a:4b:e5:6f:a8:
         25:84:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----