Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JFVsgFbYrjh5C77tg48FZqxd4J4.roa
File:                     JFVsgFbYrjh5C77tg48FZqxd4J4.roa (raw, json)
Hash identifier:          ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=
Subject key identifier:   24:55:6C:80:56:D8:AE:38:79:0B:BE:ED:83:8F:05:66:AC:5D:E0:9E
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019427B5E0C89DCB9F3B5311F21BFCC984B8
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JFVsgFbYrjh5C77tg48FZqxd4J4.roa
Signing time:             Thu 02 Jan 2025 15:50:18 +0000
ROA not before:           Thu 02 Jan 2025 15:50:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48292
IP address blocks:        2a0c:f587:fffe::/48 maxlen: 48
                          2a0c:f587:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:e0:c8:9d:cb:9f:3b:53:11:f2:1b:fc:c9:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Jan  2 15:50:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=24556c8056d8ae38790bbeed838f0566ac5de09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:9f:61:2d:48:5d:96:2a:81:51:28:c4:8c:
                    69:84:b8:19:8f:6b:61:5f:a0:c5:80:b5:fc:41:8a:
                    b2:4d:fc:ad:57:38:fc:3e:e9:63:da:e8:d8:b5:b3:
                    82:6b:a7:f2:eb:dd:4b:d3:d8:ef:58:17:67:47:64:
                    b6:70:55:e1:b7:19:67:e9:34:50:5e:1e:3a:cb:b6:
                    c9:6d:d1:87:31:0e:dd:8c:0b:08:79:51:49:1b:cb:
                    c7:9f:b9:48:7d:e9:b0:9b:18:9e:9c:55:17:5c:dc:
                    2f:0a:9e:c4:00:d5:28:46:29:59:f3:1a:29:46:a2:
                    3c:0a:97:9e:e0:35:b9:29:94:e9:66:c0:10:11:26:
                    f7:18:30:4a:eb:9c:74:db:c5:a3:d6:5b:e3:9e:68:
                    d2:03:ba:81:9f:11:ac:88:8a:06:15:fd:8c:b9:7d:
                    64:80:c1:2b:67:30:9e:e3:b9:bf:a9:c5:3d:a2:60:
                    b8:64:8b:2d:23:56:ae:b4:7f:ef:be:8b:e7:96:24:
                    ba:3e:03:c5:46:b4:43:2c:ef:ab:a2:dd:b3:5d:60:
                    a6:67:dd:dc:17:6c:35:60:e0:79:0d:bc:2b:b1:e6:
                    74:26:d5:7d:24:af:12:f2:f3:89:7e:a1:61:66:cf:
                    7b:26:e0:f0:c4:1a:03:a5:57:8c:60:85:91:62:ad:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:6C:80:56:D8:AE:38:79:0B:BE:ED:83:8F:05:66:AC:5D:E0:9E
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JFVsgFbYrjh5C77tg48FZqxd4J4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:f587:fffe::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:08:e4:1b:c3:22:8f:b4:e0:2c:f6:63:1a:4b:02:a6:1f:
         84:b7:fb:cc:81:2e:e1:fc:30:11:02:c0:d2:ba:17:eb:99:0a:
         40:7c:dd:6f:c0:ad:a0:76:22:88:9e:e7:7b:ba:d8:eb:f0:c6:
         fb:9b:6a:f8:58:64:80:40:3e:8a:c1:fc:57:37:f1:12:d0:58:
         8f:e5:ca:c6:93:5f:6f:be:f7:a8:e0:88:cf:7c:78:b6:ab:94:
         25:71:2d:42:04:f0:14:83:78:98:75:8c:89:c6:fd:bf:a6:ef:
         c9:0e:bf:96:a8:0e:72:a0:ca:75:45:cb:78:4f:94:2d:ca:b9:
         f9:f2:38:e1:3d:a4:73:42:f4:b8:2a:79:6b:50:1d:79:7a:9a:
         eb:f0:43:8a:a7:22:84:06:de:3b:58:2d:74:b9:f8:cd:9c:b0:
         6b:13:2d:d1:4b:c7:45:2c:af:f2:dc:32:19:23:e3:3e:8a:84:
         c8:dd:8c:db:3f:b3:df:c6:a6:93:75:98:5b:a6:ec:b7:a2:36:
         c3:59:f4:f6:93:0f:1a:56:f5:64:ef:fd:5e:bc:86:7c:cc:b5:
         89:af:b3:01:9b:01:dc:14:51:41:8b:66:fe:5f:37:e0:52:70:
         c7:7c:83:01:39:91:e6:48:1c:85:29:62:13:c1:bd:7f:e9:89:
         85:dc:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----