Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CepTD_sRHzQKM1km_XqGFUiFw_A.roa
File:                     CepTD_sRHzQKM1km_XqGFUiFw_A.roa (raw, json)
Hash identifier:          6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=
Subject key identifier:   09:EA:53:0F:FB:11:1F:34:0A:33:59:26:FD:7A:86:15:48:85:C3:F0
Certificate issuer:       /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial:       01942067FB8961F191973F95853A55485453
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CepTD_sRHzQKM1km_XqGFUiFw_A.roa
Signing time:             Wed 01 Jan 2025 05:47:52 +0000
ROA not before:           Wed 01 Jan 2025 05:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216352
IP address blocks:        2001:67c:c4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:fb:89:61:f1:91:97:3f:95:85:3a:55:48:54:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
        Validity
            Not Before: Jan  1 05:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09ea530ffb111f340a335926fd7a86154885c3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:56:81:01:ab:9b:ab:38:09:ce:02:6d:ef:
                    79:69:06:dd:7a:f1:51:e3:81:44:c9:97:44:33:13:
                    60:2c:43:df:40:29:3b:47:cf:15:0a:5c:13:3d:f4:
                    4d:40:3e:30:c3:7e:61:aa:4b:e2:37:f1:b5:39:81:
                    23:88:b2:2a:f2:71:79:97:73:26:88:55:76:4f:04:
                    23:de:2e:ff:6c:aa:45:2a:3f:32:ad:83:01:63:21:
                    b4:76:0a:6f:8d:4c:a2:1d:16:79:1c:ae:44:f6:73:
                    3c:49:86:cb:c6:84:5a:90:af:39:b7:d7:11:ae:ea:
                    b2:35:4b:d0:94:f0:c8:81:f9:e6:83:dd:3e:b7:ff:
                    e3:1a:ee:aa:b9:8d:30:16:6a:5f:bf:d2:15:1a:ba:
                    ad:99:c4:39:0b:c2:d1:2b:e2:68:17:36:e8:26:83:
                    24:f7:83:d5:f1:8c:e9:47:fe:cf:fb:46:8b:b0:ec:
                    21:ff:f3:38:2f:e7:a6:77:f4:d1:3f:ed:6d:40:30:
                    b0:b4:10:cc:b6:f9:2a:43:5d:71:6c:bc:aa:14:93:
                    a3:54:cf:e9:7c:c5:fd:33:1d:83:9c:5a:8d:4b:3d:
                    7d:bc:6b:56:60:f6:be:57:9e:d7:34:a3:59:1d:4d:
                    17:20:98:52:68:67:d0:d8:b5:2b:ba:87:17:58:1f:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EA:53:0F:FB:11:1F:34:0A:33:59:26:FD:7A:86:15:48:85:C3:F0
            X509v3 Authority Key Identifier:
                keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CepTD_sRHzQKM1km_XqGFUiFw_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:21:80:65:78:1f:62:e3:79:a3:cf:e0:2d:b7:f3:52:d4:ab:
         13:9a:5f:11:ac:27:99:19:5d:a8:0b:9f:fc:61:c5:57:06:80:
         06:ab:06:d3:a6:d9:72:82:d5:35:eb:53:ab:79:3c:c6:cb:e2:
         7c:6c:a3:ba:dd:a0:0c:8c:e7:5a:2b:aa:d0:9b:8b:7c:19:ef:
         17:08:8e:bd:5f:60:9a:7e:bf:5f:7b:0c:f5:9f:97:3b:b2:80:
         e8:a0:89:f6:74:ca:0a:0b:d9:82:36:54:02:2c:d3:0a:97:54:
         29:e2:9e:e9:9a:e6:c0:d7:2f:8e:44:a5:d1:99:f9:43:d3:d5:
         55:da:9c:e2:ce:bb:ed:f2:21:05:90:e9:18:20:ad:b4:9c:ba:
         3d:4a:20:59:29:98:a8:fb:1b:11:a2:fe:51:4d:28:3e:8d:f5:
         34:ee:58:31:27:92:d3:05:a4:11:ac:59:4d:2f:61:8f:94:b5:
         d6:07:ea:17:98:5d:3b:84:98:6d:07:6b:a6:a5:cd:bd:6a:d9:
         c3:5c:56:e7:e2:19:4e:79:f8:0e:cb:67:29:a6:e7:11:6e:f4:
         a9:57:60:81:2d:76:11:55:f6:3b:08:43:e5:21:21:1c:b1:99:
         fc:14:ed:74:d6:fc:7e:47:59:bd:f8:b5:bf:37:f3:5d:17:7d:
         5b:6e:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----