Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa
File:                     ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (raw, json)
Hash identifier:          M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=
Subject key identifier:   B2:CC:BF:D9:17:66:F8:D0:7A:AA:56:41:E9:2E:57:76:39:0D:A2:F9
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       019424B2895559BD4FBC39D345AA977FF183
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa
Signing time:             Thu 02 Jan 2025 01:47:47 +0000
ROA not before:           Thu 02 Jan 2025 01:47:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     33988
IP address blocks:        2001:67c:14c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:89:55:59:bd:4f:bc:39:d3:45:aa:97:7f:f1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Jan  2 01:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2ccbfd91766f8d07aaa5641e92e5776390da2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:52:c7:a0:32:a7:6f:db:47:bf:db:51:70:
                    35:c4:09:80:25:78:1d:fe:ab:67:df:9e:10:f1:5f:
                    2e:92:3c:f7:1f:70:2b:7e:d0:00:55:c5:9f:05:8c:
                    4e:bb:20:21:87:02:3f:c1:64:3b:9e:7b:d8:c7:49:
                    d9:47:de:3d:5c:26:cd:fc:c2:d4:d2:38:fa:ef:f8:
                    73:3f:da:82:35:48:06:fa:46:8c:62:d9:5d:27:11:
                    6a:e9:5a:26:16:6a:f9:5e:b1:21:3b:b7:ca:89:c1:
                    46:f9:1e:12:c9:59:5f:9d:a2:88:36:79:be:25:eb:
                    ea:6a:8b:49:8a:2e:82:ba:e4:d0:7a:db:f5:31:e4:
                    93:62:9c:dd:0f:33:35:0f:aa:06:4e:1d:ef:d7:dd:
                    50:59:1d:f6:52:81:e4:8d:77:7f:e6:16:f6:62:84:
                    9e:73:bc:07:01:1c:d3:01:20:3c:35:53:0b:d9:b7:
                    06:ae:9a:a1:34:c9:b0:86:9b:66:08:63:29:88:8a:
                    33:93:5d:03:f9:ca:98:db:f0:05:d2:61:a7:08:78:
                    1f:0a:db:34:0d:47:8b:52:d5:5e:9d:86:b2:b4:a4:
                    e9:83:f8:65:db:fb:a7:5b:92:6b:d9:24:85:fe:1d:
                    8f:23:a8:a5:9c:3c:34:03:1f:29:df:1f:f4:92:be:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:BF:D9:17:66:F8:D0:7A:AA:56:41:E9:2E:57:76:39:0D:A2:F9
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:14c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:26:b2:cd:fc:95:bf:a3:cc:e3:42:5b:ce:ae:b9:0c:0f:71:
         ce:94:a6:21:9a:96:3d:bc:cf:ed:f3:bb:60:5d:77:4c:04:15:
         ae:d1:88:9a:52:d2:8b:21:f6:a1:44:d9:70:69:ca:19:fe:fb:
         4a:c3:65:86:8a:9c:64:16:0a:46:57:b7:5c:0f:04:c2:ae:aa:
         10:1f:a2:fd:4e:95:6d:0f:99:c3:06:42:47:45:6b:8c:15:70:
         41:3a:0a:90:fa:88:20:02:5d:66:a8:8b:50:2d:24:02:4c:73:
         0a:c9:80:86:52:52:2d:5a:6f:28:db:5c:06:63:04:b0:77:7f:
         7c:92:ab:f9:4e:11:82:76:b6:13:86:1b:e2:fc:87:a1:e7:86:
         c4:c2:fb:ed:31:ba:c8:f4:94:14:96:39:52:15:42:af:ed:6e:
         17:d8:bc:ec:20:0a:e4:f1:72:84:0c:cd:d8:8e:02:b3:71:67:
         ba:6d:aa:b8:18:a4:84:75:0c:fc:18:83:ea:5f:8b:e8:43:43:
         77:ff:61:3e:a9:45:39:c7:70:c7:83:cd:14:7a:de:ed:24:59:
         ef:57:be:59:1d:63:72:fd:aa:3d:fe:14:8e:39:b0:87:58:03:
         5f:01:18:1e:62:8c:5f:d9:3d:5c:92:3d:e6:8a:bf:ea:23:c1:
         03:c3:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----