Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/x0sLhzFdsabJsjGmaTnhB2s9wws.roa
File:                     x0sLhzFdsabJsjGmaTnhB2s9wws.roa (raw, json)
Hash identifier:          ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=
Subject key identifier:   C7:4B:0B:87:31:5D:B1:A6:C9:B2:31:A6:69:39:E1:07:6B:3D:C3:0B
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       0194252167D7894D20D8E95D961DDAD0A094
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/x0sLhzFdsabJsjGmaTnhB2s9wws.roa
Signing time:             Thu 02 Jan 2025 03:48:53 +0000
ROA not before:           Thu 02 Jan 2025 03:48:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3215
IP address blocks:        156.28.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:67:d7:89:4d:20:d8:e9:5d:96:1d:da:d0:a0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jan  2 03:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c74b0b87315db1a6c9b231a66939e1076b3dc30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:23:d4:f0:09:33:03:77:84:3e:47:54:16:
                    be:fe:eb:ec:b8:85:f6:82:b0:12:67:c7:08:ea:e9:
                    e6:0f:e5:a6:86:a8:e7:57:fd:84:51:12:b3:b4:81:
                    f4:ee:3c:b6:85:0e:6e:63:40:51:ab:fa:aa:e9:76:
                    3a:7d:6b:16:0e:3f:16:18:c1:05:a7:78:aa:0b:6f:
                    55:0f:73:cb:fc:bd:f1:f6:25:7b:0f:c7:51:4f:99:
                    e5:ef:30:c9:40:37:fb:f7:98:da:ab:56:b7:e5:b8:
                    62:24:8c:d8:06:82:d1:35:49:27:6b:72:41:05:b2:
                    d5:59:f7:ac:58:11:81:ae:4c:74:9d:c8:0e:75:06:
                    69:78:b0:02:a8:fa:a5:dd:f1:1b:6d:40:92:50:d8:
                    54:0c:ff:20:24:94:80:3c:ff:5b:45:91:19:0c:d6:
                    46:a8:e0:03:0e:f3:75:ab:4e:b2:b8:56:52:b1:62:
                    c8:5d:37:22:68:49:84:ea:72:7d:a9:ff:b3:60:60:
                    2a:1c:c4:87:50:c1:8a:62:e4:5c:11:14:5c:b5:d2:
                    bd:f4:4c:d3:76:d1:bf:45:66:07:ba:c8:df:7a:1b:
                    7c:ee:f2:a2:d7:d7:22:f6:08:c1:c0:d7:f5:12:9f:
                    27:5a:3d:c9:58:20:9b:da:80:32:9a:e6:3d:23:4c:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:0B:87:31:5D:B1:A6:C9:B2:31:A6:69:39:E1:07:6B:3D:C3:0B
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/x0sLhzFdsabJsjGmaTnhB2s9wws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.28.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:70:52:22:76:33:0f:25:64:dc:06:c9:ea:7d:30:ef:5d:
         e3:6c:29:8c:d8:4a:77:70:fd:86:6e:ef:25:11:3d:df:95:ad:
         71:d8:75:e6:36:b4:0c:db:95:aa:ae:79:0b:18:ee:f2:4a:05:
         a6:be:5f:80:13:99:82:67:80:5f:da:2a:05:e0:a5:68:96:f6:
         c1:f3:e8:58:77:12:94:40:f5:85:04:85:dd:ec:fb:30:b5:e3:
         c5:3d:92:ff:ff:43:f9:cb:cf:58:03:ed:7e:ec:f2:14:8b:8b:
         a6:a2:24:28:68:28:80:b3:ad:c4:7e:94:0e:2f:43:83:b1:75:
         d1:22:9c:96:60:ce:42:6d:2f:6d:83:c8:db:94:95:81:83:26:
         de:5c:99:36:68:83:3f:85:9f:ae:97:aa:1d:81:8e:cd:3c:10:
         98:55:75:63:3c:69:cc:a0:75:46:b5:38:d1:fb:f6:b5:6b:cb:
         89:2d:d5:a3:f0:c4:9d:ca:58:68:1d:0f:90:87:c4:97:18:68:
         97:00:8d:b6:55:7c:60:73:38:98:77:d8:ec:2e:a4:6a:c2:b0:
         44:e4:66:ef:bc:76:6d:65:40:11:61:d5:02:91:80:5a:45:93:
         84:16:31:36:a3:10:2c:08:f3:7d:f2:39:5c:ee:b1:53:95:9b:
         4c:4b:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----