Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/LMHD5jghEaDQC9_G7jF8XWal8ps.roa
File:                     LMHD5jghEaDQC9_G7jF8XWal8ps.roa (raw, json)
Hash identifier:          jxKicmXNBewinH9/ixPIJjvckHeRxlb2ek2Hy+28d80=
Subject key identifier:   2C:C1:C3:E6:38:21:11:A0:D0:0B:DF:C6:EE:31:7C:5D:66:A5:F2:9B
Certificate issuer:       /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial:       0195FF68C03293D469BBADBBB9E8BDBA3A79
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/LMHD5jghEaDQC9_G7jF8XWal8ps.roa
Signing time:             Fri 04 Apr 2025 06:06:49 +0000
ROA not before:           Fri 04 Apr 2025 06:06:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     53388
IP address blocks:        2a14:d285::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ff:68:c0:32:93:d4:69:bb:ad:bb:b9:e8:bd:ba:3a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
        Validity
            Not Before: Apr  4 06:06:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2cc1c3e6382111a0d00bdfc6ee317c5d66a5f29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:79:56:74:35:82:aa:1b:04:c0:e9:bd:96:
                    6b:31:d9:6e:29:74:2d:55:ca:88:b4:ce:a0:c6:9e:
                    d8:c2:52:9e:45:be:42:da:28:d6:83:36:bb:30:f8:
                    54:4c:d8:b5:ce:30:c3:4d:61:d9:33:7a:d9:00:8f:
                    78:db:87:40:65:d3:ed:3a:74:c8:5f:71:1b:93:db:
                    cf:ef:16:b8:11:25:ae:df:18:da:de:e6:ac:13:18:
                    02:1f:d0:06:8c:99:e3:72:6e:99:25:7a:7d:8d:42:
                    05:73:f1:92:4e:88:8a:80:34:2b:92:0f:ee:58:2c:
                    5a:65:97:36:9f:8f:c3:43:12:3c:f9:f8:60:44:ac:
                    5e:b1:4e:32:57:1a:34:fd:92:55:ac:a4:08:da:8f:
                    ca:d9:c1:ea:83:bb:da:35:d1:e8:28:a3:c2:c9:cf:
                    8e:7f:3f:ae:f3:f4:cc:0a:f4:12:a4:94:ab:66:4d:
                    3e:6c:b3:07:1c:8c:36:ae:cc:92:6e:90:e1:83:e0:
                    73:26:f4:49:0c:84:e2:2a:4d:79:16:7d:2e:7c:8c:
                    56:3d:21:fd:91:25:50:17:e1:81:01:12:20:24:23:
                    3d:db:a6:90:a3:ed:d3:be:7a:8c:90:34:f5:a8:ce:
                    08:26:60:f1:18:f7:c0:0c:f4:92:e3:2b:05:ee:12:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:C3:E6:38:21:11:A0:D0:0B:DF:C6:EE:31:7C:5D:66:A5:F2:9B
            X509v3 Authority Key Identifier:
                keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/LMHD5jghEaDQC9_G7jF8XWal8ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:d285::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:29:11:b3:99:5e:b3:6c:00:62:5d:5d:7d:8e:81:20:e2:
         ce:2c:6d:27:dd:df:ae:71:67:1e:1c:e4:77:6e:df:73:b9:21:
         e6:12:38:b5:0c:ef:78:3f:4f:96:61:43:3b:ba:da:16:27:f4:
         90:d7:22:15:84:c3:77:a2:8c:e2:cf:82:c8:47:9d:d9:f4:ba:
         ee:35:7b:28:0c:a3:1e:35:54:a3:32:c8:97:aa:ff:8b:f9:48:
         88:20:ef:b2:3d:83:17:e5:5c:f9:2c:85:6e:91:ce:58:b8:8a:
         dc:70:8e:90:a8:0d:6e:15:b0:9c:0c:9f:1d:9d:5e:97:22:19:
         09:70:32:68:41:0e:66:53:24:5c:f5:7c:d1:ce:b1:1e:a4:7c:
         2c:03:ad:20:2d:00:2c:1b:b0:4b:b5:5a:ae:fc:a3:83:40:44:
         9a:25:6a:db:2e:88:42:83:b4:c9:3e:7e:1e:35:9f:75:43:35:
         8d:d5:ff:9a:47:9f:a5:88:24:2c:f4:95:36:79:ab:31:bf:48:
         e6:f9:6f:9f:e6:f1:79:23:15:23:a7:d9:c8:d9:9c:b4:76:9a:
         9b:5e:43:be:49:6e:6e:17:f7:67:3d:6d:5f:98:9f:d5:59:4e:
         34:dd:07:0b:31:51:14:d8:f2:28:b3:ed:2f:2f:a2:7f:b1:11:
         f3:29:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----