Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/dJFiVvdyRrc-N47GUy0rDR_3aS0.roa
File:                     dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (raw, json)
Hash identifier:          0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=
Subject key identifier:   74:91:62:56:F7:72:46:B7:3E:37:8E:C6:53:2D:2B:0D:1F:F7:69:2D
Certificate issuer:       /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial:       01961EAC04591754C335570EDBDD8A748260
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/dJFiVvdyRrc-N47GUy0rDR_3aS0.roa
Signing time:             Thu 10 Apr 2025 07:48:31 +0000
ROA not before:           Thu 10 Apr 2025 07:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202891
IP address blocks:        2001:678:bcc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:ac:04:59:17:54:c3:35:57:0e:db:dd:8a:74:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
        Validity
            Not Before: Apr 10 07:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=74916256f77246b73e378ec6532d2b0d1ff7692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:ab:a0:d1:51:d1:ea:c0:f8:be:0a:a0:88:
                    e8:77:97:12:da:bb:f2:95:c5:c5:c2:19:21:54:2a:
                    a6:73:ff:67:8b:d9:d0:c2:a8:53:5c:10:33:f0:29:
                    4a:d5:d4:72:9e:1b:64:76:91:06:aa:f4:df:2d:cb:
                    75:53:16:86:ce:c7:46:cd:c1:28:24:e9:41:46:24:
                    3d:1f:5c:53:8f:8c:ad:38:87:98:17:dc:3b:b5:93:
                    ea:71:43:67:c0:4e:76:03:87:b8:a3:7e:70:63:51:
                    9d:a5:37:66:3d:a8:e2:bf:01:f3:b5:54:4f:0c:64:
                    2d:61:9a:6d:64:98:43:db:fa:35:cb:08:9e:66:38:
                    86:89:5d:33:34:d5:f4:81:37:97:e9:c9:fe:0e:7b:
                    92:8d:e3:22:9b:f5:98:cc:93:ff:96:d8:f5:a5:8b:
                    5e:25:c7:f0:8c:cb:e8:39:f5:67:a1:aa:5a:13:76:
                    95:ff:57:26:cd:bf:5b:f9:8d:59:c9:4d:22:eb:cf:
                    1d:ec:18:44:6a:30:4c:ff:a9:e6:77:84:3d:1c:41:
                    68:45:29:7f:92:d7:41:ef:06:3a:46:b7:6b:94:8b:
                    c5:59:90:31:3e:96:11:a1:fe:f1:da:5c:a0:a6:fe:
                    ef:ae:2f:91:0f:2e:f4:bb:33:62:03:ab:d1:c1:87:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:91:62:56:F7:72:46:B7:3E:37:8E:C6:53:2D:2B:0D:1F:F7:69:2D
            X509v3 Authority Key Identifier:
                keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/dJFiVvdyRrc-N47GUy0rDR_3aS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:bcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:23:ae:44:b0:b0:1c:d1:00:de:28:7a:87:e0:a3:63:dc:
         1e:e4:2f:1d:12:c2:8f:06:6b:97:5b:62:b4:57:1a:52:a1:42:
         18:31:58:3e:1f:1d:78:da:18:4d:20:99:9f:71:88:b4:dd:8e:
         f0:9d:29:07:77:ed:38:60:3a:ee:93:20:d9:57:74:d9:d9:66:
         4a:9c:77:93:a4:f9:50:a0:37:6f:d5:22:e1:bf:e6:0a:f2:82:
         08:e5:d2:cc:5f:76:69:c0:9d:89:84:90:94:55:ef:3f:ff:bd:
         1c:95:70:28:12:0a:62:15:1b:d2:08:f1:bb:37:9e:5f:9b:b0:
         cf:49:09:89:c4:05:2e:24:31:51:f1:65:5e:67:41:76:e6:11:
         a7:0a:23:4b:1a:7e:11:aa:de:2b:3c:40:32:e7:90:1b:38:88:
         15:16:25:2c:e1:57:44:3a:3a:6d:f1:2b:82:4c:bc:e9:33:85:
         05:8e:ab:bd:c8:a5:4b:aa:a1:6b:07:76:fc:1b:f7:e4:67:ab:
         0e:ac:10:22:79:5a:e6:06:eb:d4:19:1e:c1:a7:f9:29:43:ff:
         fb:70:38:c8:d2:bb:66:b4:71:a2:82:ee:89:67:8f:0b:be:fe:
         c8:18:51:c3:2c:70:c3:94:c2:11:1a:2c:aa:fc:c9:f5:bf:f8:
         d5:e5:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----