Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa
File:                     50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa (raw, json)
Hash identifier:          1zEQgnD6BlkobEHrpf54y5TDCgcpHnLxK3nKztK1TZQ=
Subject key identifier:   E7:4B:F8:2F:39:47:85:83:0A:6C:3E:3F:66:41:09:52:04:DD:CD:9F
Certificate issuer:       /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial:       0195FAED2433CC002E29ABA5C33B9ACBBDC7
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa
Signing time:             Thu 03 Apr 2025 09:13:20 +0000
ROA not before:           Thu 03 Apr 2025 09:13:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50643
IP address blocks:        2001:678:b4c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fa:ed:24:33:cc:00:2e:29:ab:a5:c3:3b:9a:cb:bd:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
        Validity
            Not Before: Apr  3 09:13:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e74bf82f394785830a6c3e3f6641095204ddcd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:89:dc:a7:5a:30:36:88:52:5e:18:b3:87:
                    b3:bc:d2:1e:cf:cf:3b:80:5c:3c:0c:7e:43:18:f5:
                    86:d3:b1:c9:43:ee:d6:39:75:f8:c0:3f:b8:3e:77:
                    49:65:93:1c:74:17:5f:f9:2c:0a:ae:c5:02:5e:23:
                    6c:ac:c3:63:c7:a0:78:29:ae:8c:27:9e:18:8d:31:
                    80:dc:26:fd:00:c8:13:52:1f:48:dd:75:e3:9e:42:
                    d1:a2:70:07:83:e9:4e:04:56:fe:4e:bb:3d:52:05:
                    a7:40:10:c3:32:57:fc:0e:ff:cf:45:c1:7e:82:b3:
                    81:43:3e:e9:a0:a4:e4:09:63:38:76:58:12:11:3a:
                    70:43:b9:ad:c4:32:1b:b3:f9:cf:12:8e:b7:1d:6e:
                    5a:bb:06:da:98:79:13:c1:45:23:21:f3:6e:a0:ee:
                    6d:4a:6c:f9:f6:90:6c:a6:e6:a1:df:9c:ec:6e:1c:
                    53:c1:94:b9:bb:39:19:e3:cb:b3:98:e1:01:e8:7a:
                    e8:e9:24:2d:57:c2:12:67:7b:29:8b:05:02:0b:62:
                    40:2a:fc:31:ac:cf:14:17:cc:76:43:e4:86:0e:5a:
                    32:bd:e2:33:53:ce:e7:e7:73:3f:48:1b:3f:0c:bc:
                    6c:fb:3c:18:9a:8f:1f:8a:23:ba:c9:36:27:50:57:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:F8:2F:39:47:85:83:0A:6C:3E:3F:66:41:09:52:04:DD:CD:9F
            X509v3 Authority Key Identifier:
                keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:1c:97:c1:18:88:16:95:12:5f:4b:42:2c:de:de:53:ad:
         98:36:31:f9:e0:d1:97:c5:b1:24:88:ce:3b:43:9a:20:66:9c:
         7d:f2:3b:f7:b2:4c:61:77:fe:c1:f6:67:f8:8d:bf:3f:c1:75:
         c3:59:bd:1c:82:9c:1e:17:3e:a7:16:fc:6d:df:35:c4:36:c0:
         67:0b:ac:24:57:07:cb:f7:77:00:98:ac:d7:a8:49:68:16:2b:
         86:33:e3:8d:be:67:f2:72:18:a7:ca:ca:31:60:8c:4f:9c:88:
         ba:f3:be:c4:26:9f:cd:73:d8:92:a7:44:aa:92:bc:ad:77:6f:
         f5:09:f4:eb:8c:26:76:ee:20:d1:02:b6:63:bc:90:4e:4a:70:
         51:12:be:84:60:19:de:33:5b:50:3a:c7:f7:1d:9d:fe:8a:5c:
         e2:23:88:d7:b2:e1:9d:28:bd:c0:0b:e1:ea:b7:ea:79:3c:a7:
         62:22:e6:2d:74:b9:94:ee:46:79:b0:7d:5f:c5:03:32:f8:6d:
         d3:89:a6:70:b2:f6:47:61:b4:c5:1f:d1:3b:d3:d2:16:4d:7f:
         2e:4f:bd:de:db:d3:71:52:34:5a:71:16:ea:40:91:ed:ec:86:
         81:1f:e5:2f:5e:1f:be:9a:58:d0:0c:74:4d:30:94:0d:91:56:
         7b:dd:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----