Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/HX3f5FZnDXBVPEnE5bxp-46XcDI.roa
File:                     HX3f5FZnDXBVPEnE5bxp-46XcDI.roa (raw, json)
Hash identifier:          Cn4L/fOgVlSahDb0v8tdmodjivbISS4FJEJArlg0b+Y=
Subject key identifier:   1D:7D:DF:E4:56:67:0D:70:55:3C:49:C4:E5:BC:69:FB:8E:97:70:32
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       01941F8C228DC9612526B990BC794222F7A7
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/HX3f5FZnDXBVPEnE5bxp-46XcDI.roa
Signing time:             Wed 01 Jan 2025 01:47:45 +0000
ROA not before:           Wed 01 Jan 2025 01:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56837
IP address blocks:        2001:67c:1808::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:22:8d:c9:61:25:26:b9:90:bc:79:42:22:f7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Jan  1 01:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d7ddfe456670d70553c49c4e5bc69fb8e977032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:d1:0c:5d:dd:33:6f:db:08:94:5a:d1:e7:
                    f7:40:5b:c0:f6:40:8a:86:3b:c3:49:89:aa:b5:d5:
                    2a:15:23:0c:cb:53:2e:46:a3:03:59:b8:cc:0c:6a:
                    b5:58:94:c9:44:0a:36:7f:4d:48:4a:c0:86:1d:11:
                    39:06:d7:b5:d3:56:33:f3:1e:82:35:31:be:d8:83:
                    d5:b5:9e:f7:3c:76:b7:fb:8a:6e:fe:32:0c:57:4d:
                    e4:a0:bb:47:57:8d:04:ff:b3:86:40:4c:27:41:cb:
                    e5:c1:bb:e7:db:72:fe:1c:1e:49:ce:47:fb:b3:04:
                    34:44:02:58:12:f5:97:85:5b:d3:d1:91:15:07:d4:
                    37:31:c2:b5:d2:1c:3a:f8:00:73:db:a9:84:b2:73:
                    87:d8:eb:8b:92:74:0f:c8:e3:09:3a:74:93:0a:4c:
                    72:ea:de:b8:62:f6:67:ba:d7:3a:61:e3:87:cc:b4:
                    c1:b1:45:ec:58:8a:b6:01:37:0c:95:da:f5:07:9b:
                    69:a5:6d:7f:b1:ca:ff:9b:62:18:a1:ac:b3:c8:77:
                    e9:24:40:b0:b7:af:98:03:09:62:65:bb:cc:de:6e:
                    43:01:35:d8:80:8b:16:b8:3f:94:bc:ca:df:bd:bc:
                    42:f0:75:cc:51:25:4a:e8:6b:16:5b:8f:bc:36:9c:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:DF:E4:56:67:0D:70:55:3C:49:C4:E5:BC:69:FB:8E:97:70:32
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/HX3f5FZnDXBVPEnE5bxp-46XcDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1808::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:4a:de:c1:44:85:9f:2d:f6:73:f4:f7:46:50:48:08:df:
         0a:8a:19:b7:11:95:03:93:11:39:72:bd:dd:78:0c:11:b3:5f:
         74:de:c5:ee:60:9b:57:63:ce:9b:3a:8a:88:6b:d0:31:41:08:
         92:88:37:d4:d9:6f:b0:ae:cf:cb:e6:fa:aa:84:c7:0b:05:9a:
         89:57:9d:9c:c2:e7:2d:56:58:49:f8:44:fe:c4:d7:89:b1:d6:
         c0:14:65:7e:8a:c4:bd:ce:10:fb:5d:8c:fe:cf:e5:cd:5e:f9:
         db:41:44:99:bb:6f:d9:45:c0:35:16:04:5c:05:34:f6:f5:ab:
         9f:11:8d:12:ac:4b:21:07:4b:95:28:1a:10:97:ac:72:63:5e:
         b5:04:d0:a2:56:be:c0:a5:ff:24:d3:56:49:fd:fd:4d:94:dc:
         57:64:e5:51:b8:be:fe:17:00:30:87:b0:59:85:f3:d2:3b:f0:
         04:80:9a:12:22:d6:b0:10:5d:81:06:68:92:bf:e4:90:6a:a3:
         09:2f:6c:1a:da:55:d3:92:5e:23:57:61:dd:8d:38:dc:1d:77:
         73:d8:d8:e2:87:07:b5:e3:11:64:4f:84:47:f4:03:86:5c:cf:
         92:aa:4a:51:9b:3c:4b:0b:ea:1e:90:70:df:a3:42:35:36:a6:
         2f:d0:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----