Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/wreINdEXrzvFl4TS78nixyXhWT4.roa
File:                     wreINdEXrzvFl4TS78nixyXhWT4.roa (raw, json)
Hash identifier:          BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=
Subject key identifier:   C2:B7:88:35:D1:17:AF:3B:C5:97:84:D2:EF:C9:E2:C7:25:E1:59:3E
Certificate issuer:       /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial:       0194221FA9558B2C61C93E99BE3CD4F56D1A
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/wreINdEXrzvFl4TS78nixyXhWT4.roa
Signing time:             Wed 01 Jan 2025 13:48:07 +0000
ROA not before:           Wed 01 Jan 2025 13:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20118
IP address blocks:        2a03:ba1::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:a9:55:8b:2c:61:c9:3e:99:be:3c:d4:f5:6d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
        Validity
            Not Before: Jan  1 13:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2b78835d117af3bc59784d2efc9e2c725e1593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:07:26:2a:b6:ea:77:91:45:fb:cb:01:fa:
                    59:cb:e4:80:34:ce:62:37:26:7f:72:82:a9:83:42:
                    7a:13:b6:69:21:40:a5:39:37:ad:67:2a:ee:e6:62:
                    e3:bc:2e:69:b5:79:fd:5c:cf:69:47:1d:0f:5d:55:
                    dd:70:6a:c6:6f:4d:99:af:96:54:44:c9:c8:79:28:
                    dd:45:f5:b5:04:9d:6f:b5:c6:fc:ef:40:6c:6e:30:
                    94:86:77:f1:4e:a6:1f:2e:61:2d:df:6f:d9:72:71:
                    8c:0d:3f:4a:1f:67:06:89:eb:cd:6f:3f:26:45:d4:
                    a0:59:29:a8:cf:ba:9c:66:58:45:b4:fc:61:d5:cc:
                    56:35:8c:22:ce:a6:d6:98:f2:24:c1:58:d7:d0:ae:
                    0a:72:eb:35:6f:84:20:7d:a6:54:14:fd:d7:19:6e:
                    b7:24:f7:1f:88:97:04:7f:b3:34:8e:07:42:31:f6:
                    7a:f7:7b:1d:12:28:8f:82:e9:6f:63:10:71:97:09:
                    f6:f6:c5:61:f2:da:21:a6:78:de:c7:07:cc:4f:1a:
                    5b:38:28:80:f3:8e:8e:51:3b:53:09:ee:22:86:d0:
                    c0:1b:07:05:a8:86:6c:04:e9:f7:08:13:2f:bc:84:
                    cf:34:87:c8:3c:e1:df:6b:57:3f:16:7f:0f:2f:bb:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B7:88:35:D1:17:AF:3B:C5:97:84:D2:EF:C9:E2:C7:25:E1:59:3E
            X509v3 Authority Key Identifier:
                keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/wreINdEXrzvFl4TS78nixyXhWT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:ba1::/64

    Signature Algorithm: sha256WithRSAEncryption
         72:65:ea:79:74:49:8f:9b:7c:0a:12:15:ce:76:d5:d4:8c:70:
         06:0d:d5:3f:08:9a:57:95:bb:24:3f:ed:45:83:1d:aa:33:11:
         f7:1f:81:93:0b:d2:86:e7:a2:1f:36:7c:19:60:df:f1:de:72:
         28:18:fe:70:0b:1e:9a:46:c4:03:7c:eb:97:49:20:a9:09:c5:
         95:90:82:e4:5c:1b:fe:ce:a5:f0:80:99:c7:94:ee:2d:35:1b:
         74:d2:f6:5e:39:42:78:f0:8d:8a:cd:d2:36:7d:60:b0:d3:ff:
         11:66:53:1c:3e:05:97:98:5c:21:f1:b2:1e:98:51:1a:22:16:
         7a:bf:d8:47:3b:4d:0d:d2:ce:db:0d:06:d3:6c:3d:a1:1c:23:
         aa:48:6d:34:28:4b:43:e3:53:16:a1:01:9c:b5:19:50:b0:ff:
         63:29:cf:6b:ec:e1:56:cb:aa:20:d3:24:5c:d6:b4:66:f4:e3:
         30:21:fd:48:73:67:11:0e:90:e5:9d:cb:30:43:23:24:05:88:
         50:da:47:3d:fb:e1:f0:ff:1b:fb:82:dd:aa:1f:13:6e:d5:3b:
         be:25:15:c1:ae:1a:33:e7:09:a2:5d:5b:5c:4e:b6:cb:c4:b1:
         5c:19:e5:81:12:d6:5c:e0:b0:aa:91:db:b2:10:e9:a8:48:65:
         6c:67:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----