Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/nFeHU4vrYRFo-11ovr0Tku54r4I.roa
File:                     nFeHU4vrYRFo-11ovr0Tku54r4I.roa (raw, json)
Hash identifier:          LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=
Subject key identifier:   9C:57:87:53:8B:EB:61:11:68:FB:5D:68:BE:BD:13:92:EE:78:AF:82
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       01942521A9BDEC2DFBE2FE2EC632FB668642
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/nFeHU4vrYRFo-11ovr0Tku54r4I.roa
Signing time:             Thu 02 Jan 2025 03:49:10 +0000
ROA not before:           Thu 02 Jan 2025 03:49:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16347
IP address blocks:        2a04:ac40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:a9:bd:ec:2d:fb:e2:fe:2e:c6:32:fb:66:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Jan  2 03:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c5787538beb611168fb5d68bebd1392ee78af82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:97:ca:c4:a1:6d:e7:f9:6f:4b:8d:8d:12:
                    29:0f:71:03:f3:af:72:81:c0:cd:85:0d:d8:e1:18:
                    38:4a:74:f6:c5:5e:8c:29:48:a5:29:c1:bd:5b:49:
                    e1:bb:4f:ee:67:4c:76:0c:56:d2:8f:9f:f8:12:96:
                    db:90:96:de:c4:a4:60:ee:0b:de:fd:4d:2b:ac:ab:
                    31:40:ce:53:4a:03:04:55:26:9b:45:72:f7:ba:c3:
                    c5:41:55:54:90:3d:0c:30:d5:52:c2:45:08:cd:96:
                    ad:84:8f:c6:6e:8e:b4:27:37:77:25:7b:52:43:e6:
                    9f:ca:e4:45:31:fd:bc:74:d8:b1:f6:59:75:4e:6f:
                    b1:20:db:15:6b:0b:62:b7:ec:14:99:23:aa:11:ac:
                    11:84:ac:c4:21:e7:ea:d5:be:65:a3:1a:3b:98:d7:
                    5e:63:3e:48:80:fd:02:df:7f:e9:c9:37:90:db:ac:
                    06:4d:17:ff:b2:eb:2d:81:a7:57:99:36:df:e8:ea:
                    94:40:18:e3:99:31:45:1e:c4:01:c8:d9:e9:56:3b:
                    71:de:b9:ea:d5:7a:de:ef:b2:7a:42:77:1a:62:61:
                    f2:c6:2e:a9:ae:6e:08:a5:6d:7c:70:0e:7f:32:7a:
                    64:03:17:ae:9f:a8:00:e0:4f:e9:1a:4e:0c:34:ca:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:87:53:8B:EB:61:11:68:FB:5D:68:BE:BD:13:92:EE:78:AF:82
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/nFeHU4vrYRFo-11ovr0Tku54r4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:ac40::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:9d:ed:5f:63:b9:63:e2:29:33:6a:da:9f:27:1b:07:48:
         22:82:b2:40:92:18:1e:f1:62:1e:ca:8e:02:08:b3:cb:e6:b5:
         80:ab:64:ef:d5:42:08:75:85:b5:d8:cc:f5:b9:77:10:df:ea:
         ab:40:24:f5:9c:bf:78:a8:a6:f5:12:3e:e6:a4:a1:06:d0:66:
         59:2f:fe:74:6f:74:28:b1:39:6b:3d:d6:2a:3c:94:b4:ac:ce:
         2e:ef:8c:4e:e3:fb:66:1c:33:8e:34:f7:00:6f:4d:ed:3a:39:
         5a:24:1e:75:e1:1c:13:ec:24:d5:e1:65:0e:85:43:77:00:4b:
         23:8d:32:2d:97:02:97:cb:3b:f4:d9:af:97:28:f9:79:6b:b4:
         79:bb:e7:03:4e:c5:07:32:aa:88:9a:0d:bb:0a:c9:56:c0:2b:
         78:06:03:ce:1d:b4:1c:fb:ce:53:63:74:1f:64:c0:83:47:22:
         73:e4:a1:2d:75:81:3c:fa:8e:b0:16:31:07:8e:51:b0:f4:0b:
         21:1c:51:7a:c6:b4:02:42:2d:20:e0:f7:46:8a:ba:5f:2f:35:
         c5:e6:ec:69:5e:b7:08:1a:bd:5b:df:05:00:b2:17:6f:89:7c:
         a5:16:85:ad:86:98:83:d6:91:9f:fd:f5:fa:b2:42:43:13:9b:
         dc:94:49:0c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlIam97C374v4uxjL7ZoZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj
NGUxY2EwHhcNMjUwMTAyMDM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzU3ODc1MzhiZWI2MTExNjhmYjVkNjhiZWJkMTM5MmVlNzhhZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYOXysShbef5b0uNjRIpD3ED869y
gcDNhQ3Y4Rg4SnT2xV6MKUilKcG9W0nhu0/uZ0x2DFbSj5/4EpbbkJbexKRg7gve
/U0rrKsxQM5TSgMEVSabRXL3usPFQVVUkD0MMNVSwkUIzZathI/Gbo60Jzd3JXtS
Q+afyuRFMf28dNix9ll1Tm+xINsVawtit+wUmSOqEawRhKzEIefq1b5loxo7mNde
Yz5IgP0C33/pyTeQ26wGTRf/sustgadXmTbf6OqUQBjjmTFFHsQByNnpVjtx3rnq
1Xre77J6QncaYmHyxi6prm4IpW18cA5/MnpkAxeun6gA4E/pGk4MNMo6UwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJxXh1OL62ERaPtdaL69E5LueK+CMB8GA1UdIwQY
MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt
NDczYTI5YWMzMzYzLzEvbkZlSFU0dnJZUkZvLTExb3ZyMFRrdTU0cjRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz
LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgSsQDAN
BgkqhkiG9w0BAQsFAAOCAQEAYVud7V9juWPiKTNq2p8nGwdIIoKyQJIYHvFiHsqO
Agizy+a1gKtk79VCCHWFtdjM9bl3EN/qq0Ak9Zy/eKim9RI+5qShBtBmWS/+dG90
KLE5az3WKjyUtKzOLu+MTuP7ZhwzjjT3AG9N7To5WiQedeEcE+wk1eFlDoVDdwBL
I40yLZcCl8s79Nmvlyj5eWu0ebvnA07FBzKqiJoNuwrJVsAreAYDzh20HPvOU2N0
H2TAg0cic+ShLXWBPPqOsBYxB45RsPQLIRxResa0AkItIOD3Roq6Xy81xebsaV63
CBq9W98FALIXb4l8pRaFrYaYg9aRn/31+rJCQxOb3JRJDA==
-----END CERTIFICATE-----