Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/_1ATULCZ98sbSKA4UnZIqchgnFI.roa
File:                     _1ATULCZ98sbSKA4UnZIqchgnFI.roa (raw, json)
Hash identifier:          dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=
Subject key identifier:   FF:50:13:50:B0:99:F7:CB:1B:48:A0:38:52:76:48:A9:C8:60:9C:52
Certificate issuer:       /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial:       019421445DAF9A54910A42828D343C8C5AA3
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/_1ATULCZ98sbSKA4UnZIqchgnFI.roa
Signing time:             Wed 01 Jan 2025 09:48:35 +0000
ROA not before:           Wed 01 Jan 2025 09:48:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25145
IP address blocks:        2a09:6080::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:5d:af:9a:54:91:0a:42:82:8d:34:3c:8c:5a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
        Validity
            Not Before: Jan  1 09:48:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff501350b099f7cb1b48a038527648a9c8609c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:ff:79:6f:ab:57:6b:e5:ca:ae:44:39:0c:
                    46:46:c1:40:bd:2d:95:b1:86:89:0a:f7:e4:a9:f8:
                    de:15:8f:88:11:30:d8:ba:84:58:e0:ad:48:7e:97:
                    d3:f0:a9:3c:6d:36:07:76:6c:d3:cb:1e:06:bf:51:
                    7c:e6:35:82:fb:e1:bb:79:37:a0:e9:b3:75:79:e2:
                    3c:00:04:49:db:73:94:02:93:69:1f:bf:33:32:99:
                    92:03:b2:92:a7:e8:cd:1a:45:6b:0e:71:ff:b0:2e:
                    2d:f9:c4:94:2f:4c:f5:be:24:fd:04:aa:c8:97:f3:
                    78:b9:0b:1a:79:c7:82:0f:61:52:53:38:9e:81:c7:
                    ee:08:2a:29:8e:e9:dd:06:26:85:ff:e0:12:0d:80:
                    76:84:b5:e5:37:96:1c:fb:ca:6e:83:1b:ad:9d:cc:
                    01:ff:79:0d:04:86:7b:86:e0:5e:d5:39:59:74:2f:
                    06:cc:04:2c:e5:bc:6c:6a:32:82:7b:d6:34:2e:36:
                    85:b9:3b:52:98:d6:2d:48:67:d7:9c:21:c5:e3:b4:
                    74:b2:f0:e9:d3:85:21:bf:3d:e2:34:8f:92:7f:1c:
                    d0:89:05:0e:84:8b:c6:3f:1b:50:5d:76:d6:2f:08:
                    d0:70:c2:85:74:b5:ce:16:e2:69:ab:97:be:92:8d:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:50:13:50:B0:99:F7:CB:1B:48:A0:38:52:76:48:A9:C8:60:9C:52
            X509v3 Authority Key Identifier:
                keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/_1ATULCZ98sbSKA4UnZIqchgnFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:6080::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:fb:a4:22:5c:cc:ea:25:f6:95:05:bd:45:b4:b6:0d:e9:
         b0:6d:ab:9c:70:c6:90:75:8f:20:be:e0:22:72:f5:52:ad:09:
         aa:3b:93:04:0d:72:4d:3e:8e:f5:2c:1d:35:00:ee:95:e6:80:
         74:e0:91:b4:cd:7b:98:73:20:9c:91:2f:34:61:4b:8e:9a:b5:
         c4:e2:10:2e:d2:26:3d:ba:ff:a7:d4:dc:5d:14:02:fa:89:f4:
         e3:b2:5e:09:24:a4:ae:e6:42:78:94:e8:8f:ac:e6:7e:7b:a3:
         d3:c6:9e:05:99:db:7d:fa:cd:31:e3:c5:1b:54:b0:5f:46:e8:
         1c:b9:cb:f0:c1:e6:1f:3a:8d:c3:a6:e5:8f:37:31:d0:4e:d7:
         df:19:2e:f2:12:8d:0f:60:44:c9:a8:04:b0:ef:71:bd:d0:74:
         05:2d:1c:ea:93:b0:a8:be:96:9a:fd:6c:74:a3:0b:dd:f2:99:
         af:05:05:ed:ab:8a:16:b1:d9:96:30:96:55:0d:84:85:eb:85:
         e3:76:fa:a8:f3:3a:25:17:16:d5:4f:2c:ce:ae:63:ab:44:97:
         63:cb:b6:d2:93:07:d2:ea:9d:2a:1d:01:65:84:3f:1f:58:81:
         b0:a1:24:8c:e1:c0:c6:e4:04:4b:16:9f:30:7a:f6:05:f7:29:
         6e:d7:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----