Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa
File:                     Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (raw, json)
Hash identifier:          7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=
Subject key identifier:   2B:0D:3B:27:10:0C:E8:F2:23:AF:66:59:10:33:27:EC:97:D8:00:B5
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       019423699E08512804D17E7BA8FC5DD4ECE5
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa
Signing time:             Wed 01 Jan 2025 19:48:31 +0000
ROA not before:           Wed 01 Jan 2025 19:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25415
IP address blocks:        212.51.0.0/19 maxlen: 19
                          2a01:780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:9e:08:51:28:04:d1:7e:7b:a8:fc:5d:d4:ec:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: Jan  1 19:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2b0d3b27100ce8f223af6659103327ec97d800b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:7c:2a:7a:e4:11:4c:bf:0a:c9:ac:8a:b7:
                    d9:5c:07:4d:ed:98:7d:e7:db:3a:b8:b8:97:7f:32:
                    bc:34:6d:c4:aa:13:1f:b8:0f:a9:fe:51:ed:ad:c8:
                    2f:ca:07:84:d8:53:98:e0:a0:08:21:ee:9e:7e:55:
                    c1:94:e0:6c:50:e6:33:74:7e:96:74:f3:9b:0e:09:
                    03:e6:65:43:1d:3a:7d:79:6f:62:af:5e:52:3c:51:
                    d3:e0:13:b0:84:53:e4:f5:84:55:77:4a:1c:a3:ea:
                    fc:f7:62:57:77:9c:83:d7:0a:13:13:1a:2e:77:8d:
                    24:9e:76:71:19:3d:56:f4:22:f9:0d:64:cd:9e:e9:
                    ba:62:76:b8:6a:f3:e8:dd:85:2f:24:13:a7:86:f1:
                    c7:26:4b:a0:ca:ab:4e:8d:af:73:e3:82:4c:fe:08:
                    9b:e9:1a:f0:dd:bd:af:da:6b:c3:4d:27:34:f4:c6:
                    4f:13:4e:d5:18:32:de:ca:95:2e:94:1d:52:c9:75:
                    72:2e:a3:f3:4c:1f:15:ad:78:8d:9b:c7:3e:18:fc:
                    4e:de:3e:7f:ee:1a:58:f9:10:20:18:fc:89:09:53:
                    61:79:70:ea:7c:e5:13:06:13:3d:8e:a1:2b:6d:5c:
                    b0:7c:87:f4:43:91:f4:65:94:c6:c1:77:a9:f0:d5:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:3B:27:10:0C:E8:F2:23:AF:66:59:10:33:27:EC:97:D8:00:B5
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.51.0.0/19
                IPv6:
                  2a01:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:28:ae:4c:36:f4:9c:99:04:22:d0:37:05:96:91:fb:1a:
         97:44:0f:dd:9f:85:14:cf:07:a6:eb:bf:a1:86:99:48:93:0e:
         9a:18:8e:57:7a:b6:45:7c:f1:9c:19:fc:50:66:f0:aa:f3:92:
         32:16:5c:dc:cf:af:e3:88:c7:c3:98:38:13:a4:78:80:60:d5:
         33:ee:53:49:6e:82:f6:35:79:6f:c8:fa:ab:fe:f7:d6:ca:28:
         03:67:7c:1b:a4:e0:76:7e:c3:8e:2a:47:0a:29:24:33:72:5c:
         50:e7:c7:6b:22:19:48:8e:ed:36:48:48:4d:80:b3:5b:9c:21:
         ab:39:59:f0:4a:00:75:1e:d3:fe:64:3c:a5:b7:a5:7e:1c:bc:
         58:55:64:ab:0e:ec:61:9b:9f:b6:ba:9c:1f:23:bc:95:31:d0:
         e2:66:34:03:36:f3:ee:2a:8b:7b:5f:f4:eb:63:f9:5a:9c:4c:
         4d:e9:f5:3b:d0:34:cd:4b:c5:6f:b4:3c:e1:d7:47:46:f4:c6:
         50:96:e7:40:cf:4c:74:04:40:b0:9b:76:83:41:a7:ad:ea:21:
         96:67:9e:9a:8f:3c:01:11:e0:39:73:af:c2:81:0a:77:2d:37:
         cf:44:8b:a6:65:38:87:20:e5:d5:14:49:af:84:96:41:75:d8:
         ba:44:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----