Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/Fx2klUP1BUQWSve4HaBQkpAiNyk.roa
File:                     Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (raw, json)
Hash identifier:          zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=
Subject key identifier:   17:1D:A4:95:43:F5:05:44:16:4A:F7:B8:1D:A0:50:92:90:22:37:29
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       019423691D04BA72AF773024A682ADA239D9
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/Fx2klUP1BUQWSve4HaBQkpAiNyk.roa
Signing time:             Wed 01 Jan 2025 19:47:58 +0000
ROA not before:           Wed 01 Jan 2025 19:47:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216105
IP address blocks:        2001:67c:d4c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:1d:04:ba:72:af:77:30:24:a6:82:ad:a2:39:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Jan  1 19:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=171da49543f50544164af7b81da0509290223729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:b8:4f:29:82:d0:0d:a3:cb:d2:66:29:11:
                    34:7d:7c:ee:a6:8c:d8:8c:28:2a:10:7b:3d:2a:e6:
                    20:c0:2c:b9:9a:30:43:2c:b8:73:a7:33:07:46:64:
                    c1:1d:48:b7:8d:5c:e8:5e:ec:b8:0f:8d:a0:9e:4c:
                    4f:25:0e:48:9d:50:ac:9a:ee:79:98:bf:c9:07:0a:
                    98:4b:9f:98:c2:0f:61:b7:01:fd:80:79:0d:6b:32:
                    67:6d:74:e5:1e:b1:17:86:1e:c1:32:db:36:a8:3b:
                    b0:04:68:c7:3f:78:7d:4e:d6:f6:70:03:08:6b:c6:
                    d1:f4:0b:40:fc:6f:77:79:23:01:53:bf:d5:8b:c5:
                    a6:38:1c:4d:24:07:fb:47:b7:84:b9:c5:26:52:8f:
                    2a:b9:f1:c2:79:49:10:0b:8d:92:04:1d:19:cf:8f:
                    b8:55:72:5f:0b:b8:54:d9:cd:51:05:16:15:0e:9d:
                    c2:a9:81:a8:af:18:43:a5:42:25:93:51:11:c8:ac:
                    68:e1:e4:2b:af:cc:c8:1b:f9:ec:ea:d8:80:a8:8f:
                    db:93:d5:77:f4:e1:7d:42:0e:fa:8b:1f:7c:2a:d8:
                    09:df:c0:bb:fb:2c:fc:51:56:4a:56:e7:09:3c:2b:
                    12:ab:4f:17:b0:a3:89:bb:64:7e:87:fb:f6:70:f4:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1D:A4:95:43:F5:05:44:16:4A:F7:B8:1D:A0:50:92:90:22:37:29
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/Fx2klUP1BUQWSve4HaBQkpAiNyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:22:97:d5:6a:e3:c5:cd:c6:d7:b1:6c:2a:02:2c:4e:ea:28:
         83:c2:68:28:1b:53:a9:21:16:a4:43:f9:3e:4c:fc:0d:34:f7:
         d6:21:75:26:84:fc:71:95:d4:cd:ed:51:dc:bb:a2:66:6f:54:
         8a:34:ad:22:4e:2a:7f:ab:18:0f:f6:c6:88:8c:ad:42:bd:a9:
         a3:b5:e5:1e:49:6f:6c:fc:3b:9a:0b:8a:cd:bb:7f:5e:ee:df:
         cf:96:bb:a4:09:ef:a1:4b:98:37:c3:08:22:37:1e:64:d8:6a:
         c5:e6:85:8d:dc:9d:c0:3a:98:04:aa:fc:41:eb:e9:f5:a4:27:
         f9:9a:80:38:e9:14:b7:89:43:d4:58:fb:94:00:b9:99:4e:c9:
         93:db:72:5d:b0:cb:df:f9:49:a7:01:27:ba:4c:97:c3:95:11:
         24:07:9c:bb:8b:8c:3a:da:69:f9:38:cd:95:b4:ed:f1:87:dd:
         73:01:fe:52:4b:a8:ef:ac:d4:fc:c4:09:7c:4f:5d:7d:83:2a:
         90:b8:a0:49:85:cd:e6:cc:87:12:ba:e9:19:27:4a:27:9a:56:
         f7:c8:4a:3f:ad:83:64:c6:84:ab:77:32:75:39:32:4f:1f:55:
         e5:7c:21:f4:ed:76:bd:f9:23:a5:84:c4:8d:d1:3b:80:48:81:
         42:78:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----