Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa
File:                     fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (raw, json)
Hash identifier:          5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=
Subject key identifier:   7C:23:E8:62:86:20:9A:75:6A:78:69:3D:89:0F:58:FE:EF:0A:AE:B9
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019424B3FB878217DC9D0D6F7F73BA66607F
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa
Signing time:             Thu 02 Jan 2025 01:49:22 +0000
ROA not before:           Thu 02 Jan 2025 01:49:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38945
IP address blocks:        2a03:8600:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:fb:87:82:17:dc:9d:0d:6f:7f:73:ba:66:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jan  2 01:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c23e86286209a756a78693d890f58feef0aaeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:e8:18:72:f9:a3:ff:f3:e8:85:c7:53:7b:
                    a8:05:99:57:32:6f:d5:60:ff:37:5e:a7:dd:94:db:
                    fa:bf:90:dc:1f:46:2a:b8:29:4c:c1:3d:09:0a:be:
                    d8:87:fb:11:1e:ca:ae:a9:04:6d:90:b7:88:18:49:
                    4d:7e:05:1f:b9:06:bf:a3:61:ee:18:79:56:d0:0d:
                    f9:23:b7:e8:8f:9f:15:71:7b:a9:38:a3:1f:66:82:
                    32:65:bd:27:26:49:a8:2b:01:19:fd:b4:8a:56:42:
                    05:7b:7a:3b:3b:d6:d7:0c:23:72:04:bc:88:af:9a:
                    e1:aa:da:08:24:86:55:e7:0b:93:4e:f8:06:09:13:
                    4b:37:66:47:5a:66:fa:93:0f:aa:3f:82:e8:b3:a9:
                    70:40:ba:c4:73:b4:5d:52:73:87:82:50:75:6e:5e:
                    cb:8e:ca:ab:81:e3:bf:70:b7:78:37:a8:62:55:84:
                    a3:4d:96:25:29:dd:5b:52:8b:38:fc:6f:b6:11:ca:
                    ea:de:d9:e4:80:1e:d7:fa:ca:6e:2d:da:a2:12:3b:
                    0e:8a:1c:69:91:1e:92:fa:bd:b2:bf:2c:6b:39:28:
                    cc:a9:4f:fe:59:8e:a6:50:4d:68:f6:52:88:49:97:
                    9d:c7:d9:20:85:bd:d8:83:b8:31:c6:72:3a:31:aa:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:E8:62:86:20:9A:75:6A:78:69:3D:89:0F:58:FE:EF:0A:AE:B9
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:8600:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:14:7b:ee:43:81:13:cf:48:43:99:63:e8:87:4c:d4:5b:
         ee:72:69:8c:b4:58:ad:c7:44:48:4c:ac:77:76:1d:45:14:fe:
         bd:d2:5d:0f:1b:ce:78:de:02:d6:bb:f9:43:ac:6d:ec:78:e9:
         3b:02:32:91:1b:32:f3:cf:4b:0b:4b:b6:89:c1:80:31:40:1d:
         24:92:68:fc:81:36:d2:54:1f:78:c5:6a:76:bb:2e:95:82:64:
         bc:56:de:bc:a8:b6:e9:df:18:58:1b:3e:01:f4:71:bf:0c:94:
         3d:42:58:00:cb:f3:bd:19:af:4d:0e:ca:11:92:d1:3f:4b:3b:
         84:c6:dc:b5:24:65:ed:ba:2e:fc:cf:8f:ea:43:cf:fc:f2:68:
         8e:6d:68:da:ed:f9:1d:94:54:e4:bd:86:d4:64:54:cd:d9:33:
         c6:94:d0:7a:73:3a:30:87:ad:af:de:b8:0d:28:f6:e7:1e:4f:
         e5:4f:a0:27:39:c3:65:99:6c:c7:11:34:ea:57:28:d2:5c:9e:
         b1:44:54:4a:7a:64:98:f2:fc:cd:c5:b9:e8:3e:91:92:47:5a:
         cf:ce:91:3a:5f:0d:09:80:12:a3:bd:b7:3d:ed:7e:15:a7:f3:
         97:61:29:d1:31:9c:42:2f:71:f3:39:a2:4b:4c:74:06:3c:c5:
         ed:37:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----