Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/it3O4g-6t2GKwBhtRxAFjpp2SvY.roa
File:                     it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (raw, json)
Hash identifier:          6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=
Subject key identifier:   8A:DD:CE:E2:0F:BA:B7:61:8A:C0:18:6D:47:10:05:8E:9A:76:4A:F6
Certificate issuer:       /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial:       019629BD14E219B81F9684F439E714D016D0
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/it3O4g-6t2GKwBhtRxAFjpp2SvY.roa
Signing time:             Sat 12 Apr 2025 11:22:59 +0000
ROA not before:           Sat 12 Apr 2025 11:22:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49119
IP address blocks:        2a0a:7680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:bd:14:e2:19:b8:1f:96:84:f4:39:e7:14:d0:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
        Validity
            Not Before: Apr 12 11:22:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8addcee20fbab7618ac0186d4710058e9a764af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:05:1d:cb:c9:ca:88:b9:99:65:78:9b:36:d6:
                    bb:b4:98:d2:42:c0:60:4b:95:ed:c2:0c:d8:4a:e8:
                    d7:21:d0:34:cf:17:50:19:c8:1e:8f:34:2f:af:49:
                    64:4f:8b:f7:88:02:07:19:d8:43:f5:bf:c0:bf:86:
                    fd:18:ba:75:d1:90:53:05:f3:97:89:62:66:2c:54:
                    b9:05:d9:cc:77:b6:1b:6d:b5:7f:f6:08:21:e8:5b:
                    68:b3:ea:0c:1e:84:10:b1:8b:3c:8b:31:ff:5e:31:
                    ef:6e:a5:52:ea:7a:1e:eb:1d:9a:8c:c7:2a:e2:1d:
                    12:4c:8a:17:cd:1c:e9:5f:ef:68:4f:a2:60:02:2a:
                    b5:01:9f:95:a8:91:bf:5c:dc:21:23:55:c4:e8:7d:
                    97:1c:f5:1c:04:6b:86:76:8c:74:b0:9e:96:f2:88:
                    54:52:59:28:d0:e1:9d:0f:eb:2d:90:af:66:1a:95:
                    ca:56:67:78:6b:57:8b:30:25:84:a8:05:35:c0:16:
                    2a:3b:60:82:fb:46:a0:2c:bf:a7:67:3d:ec:a5:1e:
                    3e:bb:14:78:1d:80:ba:78:1f:73:cf:d2:93:82:6b:
                    ca:c5:46:eb:a5:e0:48:81:e3:d6:93:34:38:f9:c7:
                    ac:97:58:fa:39:09:d4:3d:03:3c:e7:1b:7f:d0:ae:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:CE:E2:0F:BA:B7:61:8A:C0:18:6D:47:10:05:8E:9A:76:4A:F6
            X509v3 Authority Key Identifier:
                keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/it3O4g-6t2GKwBhtRxAFjpp2SvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:7680::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:57:cc:da:8e:aa:89:ba:e5:71:30:c5:5c:65:11:53:33:
         4f:dc:97:ee:25:24:88:22:79:87:60:f1:9e:37:9d:e4:84:60:
         59:7f:a5:2a:79:a1:db:b6:c1:d2:32:33:f1:7f:cf:be:88:16:
         ea:a9:f9:0d:76:df:73:05:78:e4:a7:e1:d9:43:b6:7e:86:65:
         fd:d8:b4:2f:e7:e0:00:73:61:51:de:84:18:04:67:5f:1f:e9:
         7a:40:43:46:c5:50:42:28:67:78:f1:7c:07:2b:89:ab:d4:df:
         e7:c1:86:18:df:90:92:1d:1b:fd:95:b2:04:67:b5:4a:68:e6:
         22:38:61:ae:46:44:7e:d6:80:95:32:34:23:8b:a8:12:6c:3f:
         e5:79:c4:54:f1:42:85:ee:17:e5:47:50:4e:dc:dd:1f:27:b5:
         63:b1:f8:eb:3d:14:5c:92:b2:ff:ff:b0:66:99:6a:58:bc:55:
         44:7d:a9:94:d4:fa:2b:1c:29:e0:30:7f:5a:70:94:6d:7e:37:
         cf:3f:a2:10:28:83:38:ea:43:c8:4c:8a:8e:1a:cb:93:92:18:
         56:70:d6:83:2c:03:1d:2f:bb:cb:60:30:f0:6d:1a:7d:71:f2:
         06:11:2c:a9:76:da:11:1f:9c:48:e0:08:80:f5:03:83:42:f1:
         25:1e:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----