Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa
File:                     UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (raw, json)
Hash identifier:          50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=
Subject key identifier:   50:78:41:B2:96:85:37:85:B3:E1:2B:14:30:FE:DF:6F:DB:5F:4F:8C
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       01956CED3531C9A441EC786D984BE7A700C9
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa
Signing time:             Thu 06 Mar 2025 19:27:19 +0000
ROA not before:           Thu 06 Mar 2025 19:27:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     400696
IP address blocks:        2a07:bdc2::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6c:ed:35:31:c9:a4:41:ec:78:6d:98:4b:e7:a7:00:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Mar  6 19:27:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=507841b296853785b3e12b1430fedf6fdb5f4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:16:c4:5a:1d:1c:8e:5e:1b:b9:b5:98:44:
                    1d:43:0c:69:ec:5e:b8:bd:52:fd:33:d4:a6:c6:0d:
                    45:2e:e0:64:cf:5c:f7:83:88:4e:3a:ac:e5:14:c4:
                    95:e0:6a:2b:69:21:27:0f:97:a9:1e:00:fe:b2:9e:
                    db:5d:91:ac:ff:d0:f1:90:6d:95:c7:ee:fe:93:7f:
                    2b:28:62:4c:3e:4b:b3:16:f9:c9:be:55:6d:de:5a:
                    11:08:b6:62:4c:40:fa:61:37:45:37:84:5e:ff:a8:
                    57:60:2b:1c:51:df:b7:97:e9:c0:17:2e:02:50:2c:
                    c1:17:8f:28:95:1e:9d:76:45:9c:28:d5:a2:3e:51:
                    d6:6e:1b:cb:4e:e5:3d:1e:78:21:b4:c8:e1:e2:95:
                    2c:cf:98:5d:e0:26:e3:a9:cf:6d:e7:5c:15:fd:6a:
                    71:72:63:40:e1:36:ae:2b:7a:73:03:8c:8d:0a:74:
                    40:90:f9:c5:a8:a7:58:a3:64:8e:2c:6e:d4:88:90:
                    12:d6:db:55:a9:67:75:00:2c:57:73:60:4e:1c:5b:
                    83:66:54:86:15:2f:d7:8f:41:29:21:90:ba:13:ab:
                    13:04:26:50:a0:3b:9b:b4:c9:f0:ab:58:29:94:79:
                    d3:80:69:8a:f1:30:5e:30:0d:b0:ef:28:72:ce:05:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:41:B2:96:85:37:85:B3:E1:2B:14:30:FE:DF:6F:DB:5F:4F:8C
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:bdc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:2c:e6:ed:6f:3f:a6:47:3f:d8:10:57:0f:02:03:22:3d:ad:
         71:5d:22:85:a7:3b:81:60:78:16:1e:78:50:e2:91:98:72:cb:
         99:39:14:c0:f7:ac:3f:01:3f:00:ff:83:5d:0b:3c:b2:ac:a0:
         e8:8c:2b:41:44:29:c4:a4:d6:d0:4c:b6:41:50:d0:a2:e2:54:
         9a:34:8a:fe:60:9d:c4:5b:b8:27:58:83:1e:e9:00:96:f3:8a:
         9f:29:70:e9:03:43:f0:ff:da:35:b5:7c:9a:68:14:8c:7f:58:
         4b:d1:df:a6:01:92:f9:70:52:2b:42:f1:1d:63:10:04:b6:ad:
         63:9d:ea:9e:64:99:1c:45:e3:e2:74:b4:81:08:f0:13:26:6c:
         3a:5e:16:90:b2:aa:7b:a0:0c:f9:65:86:b2:0f:09:35:c2:df:
         97:98:96:cd:9f:aa:19:21:b5:66:c0:83:72:2d:cc:1a:b1:b1:
         f2:f3:b8:55:28:1b:37:d1:6b:9b:de:7d:c9:2e:92:81:b9:79:
         cd:bc:d4:f4:79:bf:d5:1f:ad:ed:2a:bb:c3:b1:35:52:b1:18:
         4d:b3:47:51:c2:61:6c:b8:b9:1e:ea:30:7e:49:76:20:cd:12:
         0c:4f:e4:a4:80:eb:84:19:b9:a0:39:03:54:f1:de:b8:d8:20:
         4d:40:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----