Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/Wg-bSrUatmukyH3xDDiSbozsSDE.roa
File:                     Wg-bSrUatmukyH3xDDiSbozsSDE.roa (raw, json)
Hash identifier:          +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=
Subject key identifier:   5A:0F:9B:4A:B5:1A:B6:6B:A4:C8:7D:F1:0C:38:92:6E:8C:EC:48:31
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       01941FFA55FE3821F3076A5BE80DF12C21A0
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/Wg-bSrUatmukyH3xDDiSbozsSDE.roa
Signing time:             Wed 01 Jan 2025 03:48:07 +0000
ROA not before:           Wed 01 Jan 2025 03:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203017
IP address blocks:        2001:678:154::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:55:fe:38:21:f3:07:6a:5b:e8:0d:f1:2c:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5a0f9b4ab51ab66ba4c87df10c38926e8cec4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:0e:aa:df:fb:d8:63:40:e4:db:b3:d5:3e:
                    0c:1c:46:4b:66:12:1b:4e:69:a0:6b:41:e5:be:3b:
                    92:7a:a2:ed:31:83:85:d1:d3:01:f5:ad:97:d4:ea:
                    8e:0e:03:1b:83:bf:27:da:8a:48:97:af:b7:fa:f4:
                    cc:a8:d9:df:b9:b0:ac:e6:b7:c6:ac:8d:44:02:af:
                    08:97:b4:cc:c7:69:c3:74:54:1b:85:d5:7b:6d:22:
                    77:5b:80:76:5e:d2:92:98:6a:6a:c5:8a:25:95:b1:
                    f8:05:5b:39:97:b9:d6:5c:f6:8e:6a:83:0c:9d:9c:
                    71:83:26:00:c9:15:a1:48:c0:4c:a6:01:37:5a:af:
                    b1:ba:d3:0e:a0:63:8c:5d:a7:84:0d:0c:81:40:47:
                    d7:d7:71:00:c8:3f:6d:c5:e2:30:94:c7:70:34:dc:
                    40:1e:e0:99:40:28:1c:e1:a1:88:d5:b6:00:31:99:
                    5d:30:5e:0a:e4:f1:9b:62:4a:ea:ca:64:9b:3a:b5:
                    bf:9c:ea:96:93:42:11:8e:0b:b6:5a:d2:b8:6b:20:
                    a8:a1:62:81:0a:8e:42:9e:50:1b:bb:fd:1a:e6:52:
                    6e:4f:e6:61:02:93:9e:41:3e:79:84:04:25:3e:de:
                    cc:81:fe:1e:a3:e6:52:bc:c2:42:29:ff:61:54:71:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:9B:4A:B5:1A:B6:6B:A4:C8:7D:F1:0C:38:92:6E:8C:EC:48:31
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/Wg-bSrUatmukyH3xDDiSbozsSDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:154::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:38:b9:e2:09:11:7a:93:76:85:32:a9:ae:04:6c:a3:54:
         3c:f4:0d:b0:a0:0e:b2:48:51:f3:7a:85:10:33:ed:5e:7c:30:
         07:48:d8:20:57:2a:fb:30:21:2b:96:ff:e6:75:0e:c5:f6:e4:
         1a:d0:c3:1c:96:b9:a6:2f:65:f1:00:a2:8e:f4:c7:17:e9:5f:
         4f:c7:3d:f9:2f:23:82:73:07:13:af:26:51:e7:c2:79:65:92:
         83:31:f4:b8:c3:1a:5c:7b:aa:57:4d:a4:db:ed:1b:13:10:e7:
         a0:cd:5d:a9:c6:e0:98:67:6f:94:69:bc:1f:9a:f2:04:4a:06:
         ef:12:2e:4c:41:92:5d:3c:55:d0:a8:d6:7d:23:be:35:e1:4d:
         12:40:55:e6:4c:34:36:1d:0d:eb:9e:44:d7:42:aa:40:85:16:
         c2:5d:c5:9f:7e:5b:e6:ae:56:b6:7a:37:a0:e2:4a:b2:a6:01:
         60:c4:32:73:62:f6:2a:51:fe:2d:69:c4:e5:8c:9c:16:1a:fb:
         1a:f1:a3:03:6b:99:5d:d5:82:35:e9:4a:6b:b0:58:1c:f2:5f:
         e7:a0:6d:49:35:15:24:96:51:40:95:5c:ae:4b:f6:0b:78:a4:
         dc:55:02:a8:d4:6c:d4:76:2e:6e:bc:7e:ad:91:5d:fb:85:b5:
         ca:c2:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----