Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa
File:                     S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (raw, json)
Hash identifier:          jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=
Subject key identifier:   4B:C7:6F:BC:07:CD:14:C1:6F:2D:92:50:B6:61:20:4F:8C:73:F9:63
Certificate issuer:       /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial:       01941F8C9B414C566D11F83688CE057F00F7
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa
Signing time:             Wed 01 Jan 2025 01:48:15 +0000
ROA not before:           Wed 01 Jan 2025 01:48:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57472
IP address blocks:        2a00:126f::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:9b:41:4c:56:6d:11:f8:36:88:ce:05:7f:00:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
        Validity
            Not Before: Jan  1 01:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4bc76fbc07cd14c16f2d9250b661204f8c73f963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:04:07:60:db:94:a6:1f:16:86:34:a4:01:27:
                    60:b0:3a:ff:70:51:c0:e1:89:3b:ef:56:a6:92:6f:
                    9c:6d:e6:f8:e8:dd:f4:8c:9b:b5:ea:76:63:f6:cb:
                    91:6b:67:e5:c2:41:c1:f6:68:5f:80:68:51:ea:f3:
                    b0:3b:a0:cb:c2:8f:d9:78:11:94:f1:6a:89:7b:e8:
                    52:71:ee:5b:92:6b:fc:e5:11:6f:c8:ea:58:26:45:
                    38:5e:87:62:03:9e:1d:1e:e3:e1:f7:c5:b4:14:09:
                    b5:cb:13:af:c2:6b:9b:50:d2:da:91:91:4d:d0:e8:
                    ae:74:c1:5e:71:c8:25:6e:e8:c1:c7:4e:82:08:33:
                    4b:ce:85:1b:5a:fe:57:40:09:e8:0d:56:a0:c8:a3:
                    da:12:35:f6:9c:31:b0:68:cc:b8:bd:dc:e3:df:fa:
                    d9:d5:cd:84:de:77:98:78:37:b6:aa:fe:4d:56:0f:
                    c2:e8:df:f1:c3:68:da:bb:44:c8:f9:be:47:40:fd:
                    b9:a0:7c:74:44:94:fd:f1:42:0f:c5:4f:08:57:a7:
                    2c:59:46:7c:f4:3b:87:fe:57:7e:e2:a8:d8:d1:12:
                    ee:37:9a:3e:8f:ae:f1:b2:4a:2b:3d:8d:6d:22:66:
                    01:f0:8c:ce:a4:a3:93:1f:f5:f0:ed:6f:e5:f4:ef:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:6F:BC:07:CD:14:C1:6F:2D:92:50:B6:61:20:4F:8C:73:F9:63
            X509v3 Authority Key Identifier:
                keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:126f::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:9e:6f:68:f9:e3:01:95:19:3d:a8:9f:f4:5f:48:11:34:
         cb:f1:98:d0:69:72:79:4c:71:28:06:fa:24:36:d7:ec:ee:7c:
         3e:e1:cb:99:8d:19:fb:81:6d:9a:18:0c:35:93:55:cd:83:ba:
         7d:c1:88:6d:0e:37:e6:5f:c0:e8:74:57:3f:1f:dc:1a:ca:9f:
         5f:6a:de:0a:d8:db:e8:de:20:02:d2:92:16:ba:6d:ba:c8:b5:
         2b:c2:3c:33:3c:96:14:be:43:7d:03:06:c0:57:46:f6:89:e7:
         94:a2:13:60:42:57:00:36:e1:8f:14:3e:77:34:90:48:be:1d:
         aa:a0:22:f9:5e:8e:c9:54:74:33:bd:31:8c:1c:a6:18:22:39:
         58:26:8c:be:74:70:49:7e:6e:ef:7c:39:b8:97:66:9b:48:47:
         2d:4e:51:c6:38:a8:bb:d9:29:3d:57:9a:e1:b1:b5:52:5b:c3:
         78:cb:50:ad:98:56:0f:40:ad:9e:fe:94:75:27:b2:f9:18:8e:
         ce:b4:89:4d:bc:0b:09:9e:6d:d4:3c:59:22:fc:98:f4:c7:50:
         7a:16:29:a2:35:d7:c8:4e:04:62:89:cb:a3:94:da:56:57:8a:
         50:26:78:ba:54:28:70:48:e4:08:8e:f3:1e:94:f6:da:12:58:
         60:58:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----