Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/Lr1Je63vs8PyvkKI1_N9un3D4qE.roa
File:                     Lr1Je63vs8PyvkKI1_N9un3D4qE.roa (raw, json)
Hash identifier:          hbRmpQBdQ4b6GdZPWppZ6a4wJHdosMiH1PY+13rdPiE=
Subject key identifier:   2E:BD:49:7B:AD:EF:B3:C3:F2:BE:42:88:D7:F3:7D:BA:7D:C3:E2:A1
Certificate issuer:       /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial:       019427B3D743EE694D827341F7EB7730C9B6
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/Lr1Je63vs8PyvkKI1_N9un3D4qE.roa
Signing time:             Thu 02 Jan 2025 15:48:04 +0000
ROA not before:           Thu 02 Jan 2025 15:48:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208584
IP address blocks:        2001:678:ab4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b3:d7:43:ee:69:4d:82:73:41:f7:eb:77:30:c9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
        Validity
            Not Before: Jan  2 15:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ebd497badefb3c3f2be4288d7f37dba7dc3e2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:c7:e1:0d:ad:a9:7c:bf:13:03:2a:71:ca:
                    df:53:79:49:79:29:f6:79:f2:77:20:f5:7c:a0:df:
                    e1:cb:d2:88:15:cf:91:00:e7:46:01:ca:60:85:a1:
                    49:06:ff:76:56:9b:bb:a8:d2:4e:65:82:7b:d5:bb:
                    82:16:6c:21:73:71:4c:ae:43:8e:03:a3:7a:d9:ba:
                    08:6f:0c:ad:63:92:c8:32:09:0d:7f:6f:cf:7d:bf:
                    d4:c8:2b:8b:50:40:4f:37:78:9b:ee:79:74:5b:c4:
                    d3:60:82:dd:c0:47:da:16:98:3e:fe:e2:01:00:c0:
                    b4:f7:98:08:18:2e:97:33:98:99:86:bd:74:f7:9b:
                    c6:2b:38:ac:bb:28:f7:22:f9:ce:43:09:c4:29:3f:
                    06:b6:1a:bf:33:f8:1e:ea:d4:e3:2e:0a:fd:cc:c3:
                    0d:ef:1d:f3:1f:79:90:e4:84:77:92:a1:66:fa:a6:
                    8f:0b:15:db:06:20:cd:4e:17:75:1a:d5:04:fe:70:
                    5a:89:ef:bb:01:6b:16:f3:12:4b:e6:b9:db:4d:f1:
                    f2:5f:3e:cb:62:bb:45:62:f0:92:5a:98:ad:f3:37:
                    0e:b9:64:6f:b5:4d:84:38:75:e5:33:5d:01:e7:59:
                    ba:6d:61:28:0f:27:1a:34:2d:62:84:9d:11:93:b6:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BD:49:7B:AD:EF:B3:C3:F2:BE:42:88:D7:F3:7D:BA:7D:C3:E2:A1
            X509v3 Authority Key Identifier:
                keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/Lr1Je63vs8PyvkKI1_N9un3D4qE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ab4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:8b:a4:38:7e:0c:c1:dd:92:69:65:dd:7c:aa:77:71:ed:
         e1:9b:c4:97:cc:b7:7e:d2:22:e6:51:81:84:b4:5c:95:58:e0:
         0c:1f:9c:bf:fb:6c:29:85:7d:b5:b1:09:7f:fa:aa:ac:db:de:
         b5:26:10:73:d2:76:db:f8:e2:1c:70:96:dc:1b:b2:e9:99:45:
         24:e6:45:ea:03:72:20:08:f7:eb:76:ac:ea:f8:61:d7:10:91:
         cf:43:6f:2f:55:d7:07:3b:44:5e:e5:b9:86:d4:28:7f:ff:6b:
         54:7f:82:52:9d:0f:db:3f:61:8e:f3:c3:21:e7:a6:33:6d:70:
         ce:bf:7f:99:17:db:e4:d1:8b:90:11:30:54:a6:d9:c3:35:fc:
         b6:f4:09:ac:a9:b2:6d:24:32:6e:cb:e2:92:c5:e9:4d:ca:1c:
         bc:cb:ae:ed:69:5a:9c:25:46:f5:c1:64:6b:6f:88:87:dc:b1:
         79:6a:34:6b:1f:42:95:d1:b4:cc:a6:c4:73:05:e1:cb:3c:df:
         f4:4a:69:55:fa:2f:5e:e2:1c:5d:e1:76:f0:71:ae:3d:89:9c:
         43:aa:d4:8d:d5:4a:fe:93:7f:ca:fe:f7:8a:d8:3d:b1:72:ce:
         f1:d7:05:fb:2c:18:3c:08:c0:38:87:73:67:b1:34:17:e5:69:
         ec:a3:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----