Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/bx_l27hAP8O-cN20bSgkC97xE0w.roa
File:                     bx_l27hAP8O-cN20bSgkC97xE0w.roa (raw, json)
Hash identifier:          CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=
Subject key identifier:   6F:1F:E5:DB:B8:40:3F:C3:BE:70:DD:B4:6D:28:24:0B:DE:F1:13:4C
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       019424B3D8212AF01628E0FE03C56E648A75
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/bx_l27hAP8O-cN20bSgkC97xE0w.roa
Signing time:             Thu 02 Jan 2025 01:49:13 +0000
ROA not before:           Thu 02 Jan 2025 01:49:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215948
IP address blocks:        2001:67c:5ac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:d8:21:2a:f0:16:28:e0:fe:03:c5:6e:64:8a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Jan  2 01:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f1fe5dbb8403fc3be70ddb46d28240bdef1134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:14:5a:11:18:d1:58:c8:94:a6:72:ea:db:
                    a3:fe:c8:a9:79:a9:fe:52:30:36:43:45:d9:7d:b7:
                    11:fd:95:a9:88:22:26:50:ff:30:e4:60:d3:6a:62:
                    b5:eb:ed:f8:f7:d5:ae:53:cb:2a:2f:41:cd:41:9f:
                    fe:2d:79:a3:50:d9:d9:b6:d1:e9:a8:2c:5c:b1:05:
                    79:e7:30:77:77:e2:75:f6:8e:e0:e3:50:ce:bc:5e:
                    c7:a8:91:9d:85:17:a0:0d:5d:b3:db:69:b4:d3:93:
                    b1:56:22:6f:f5:6b:30:c9:d3:2f:41:47:e3:b5:ab:
                    63:64:07:f4:26:15:cf:df:01:6f:5c:14:89:6b:df:
                    b6:7a:46:59:0f:ba:93:be:bc:8b:bb:80:be:58:44:
                    71:48:b1:a6:b3:45:ee:42:cb:d7:a4:21:43:48:1e:
                    a3:7d:ae:c6:52:69:0f:a8:a4:6c:ed:6f:db:3d:03:
                    13:5c:fe:ed:01:0c:a9:c1:98:84:24:72:5c:7a:eb:
                    bb:5d:07:77:f1:7b:b1:ca:91:0e:66:65:57:a3:10:
                    c4:c3:c6:46:b1:c0:97:95:c3:56:b1:c5:1f:a8:83:
                    e8:02:f4:cd:88:00:0d:fd:67:be:75:6d:3a:30:f2:
                    de:3a:a9:ce:c8:ac:62:27:14:0c:f2:b1:bc:b2:dd:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:E5:DB:B8:40:3F:C3:BE:70:DD:B4:6D:28:24:0B:DE:F1:13:4C
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/bx_l27hAP8O-cN20bSgkC97xE0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:5ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:99:44:d9:0b:99:62:c7:46:bc:ef:0a:73:0d:28:a2:26:
         4d:25:29:60:3c:e8:15:b8:6d:92:8a:11:58:ab:16:63:31:2f:
         09:a3:44:4a:39:05:6b:92:2b:03:cd:c3:18:e4:81:b6:23:ec:
         c9:87:54:e8:54:2d:eb:fc:82:01:5e:21:71:31:6d:3e:f4:13:
         d1:f6:a7:e4:02:50:52:99:b5:56:3e:f2:91:b7:07:8e:38:d7:
         79:ef:e8:e0:f8:ac:01:2c:85:af:b2:e8:b4:87:3f:df:a6:70:
         d3:43:98:27:1c:6b:ca:4a:e4:d5:89:25:80:2c:49:a7:e4:15:
         43:96:b9:9c:ea:e3:8d:cf:5f:32:a9:43:05:b8:ce:bd:37:a7:
         46:c9:82:4d:e9:b5:87:f5:6b:3b:17:c3:16:30:92:28:f6:da:
         33:0e:af:60:33:25:d9:97:eb:82:8a:98:3c:d5:0d:67:a8:68:
         9a:c5:34:3c:2c:af:a0:96:9a:1d:9d:3e:b6:ee:97:95:1f:5f:
         9a:e7:cb:bd:84:98:5a:75:4b:e2:12:f8:c5:0a:36:a7:a5:b3:
         12:0e:f7:60:19:61:f5:1c:9f:9a:b8:84:f6:80:38:39:66:5e:
         66:9d:a1:89:47:6c:59:1d:dd:f1:21:b5:33:8a:cf:0a:3a:ae:
         68:ef:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----