Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa
File:                     hnuqfuqQFfls7WsQI7eQEfSUik0.roa (raw, json)
Hash identifier:          4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=
Subject key identifier:   86:7B:AA:7E:EA:90:15:F9:6C:ED:6B:10:23:B7:90:11:F4:94:8A:4D
Certificate issuer:       /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial:       019427B56CB4062434531C8F1EFADFB01288
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa
Signing time:             Thu 02 Jan 2025 15:49:48 +0000
ROA not before:           Thu 02 Jan 2025 15:49:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208545
IP address blocks:        2a01:170:1050::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:6c:b4:06:24:34:53:1c:8f:1e:fa:df:b0:12:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
        Validity
            Not Before: Jan  2 15:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=867baa7eea9015f96ced6b1023b79011f4948a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:31:52:c6:6a:8b:d1:23:a0:98:e9:b8:e8:30:
                    ee:c7:a4:5d:c8:16:cf:62:c5:3c:9a:a2:c4:88:85:
                    7c:d9:31:5d:ff:8e:89:a4:2b:05:d6:94:81:c2:da:
                    42:dc:c2:46:70:c9:40:f7:53:d5:f3:b4:57:9d:24:
                    1c:b9:43:80:0a:05:e7:07:b7:0a:e1:66:5f:e5:1a:
                    f8:a3:e8:35:80:69:0b:c0:0e:ee:00:91:96:0d:10:
                    d9:88:40:3a:ba:42:72:b2:7e:eb:ce:e6:a0:9e:80:
                    d5:62:b6:15:dd:4b:5d:a5:ca:68:27:68:0b:fc:30:
                    3c:44:e8:bb:83:98:fc:a4:65:3f:d3:23:a9:d2:f8:
                    8e:c0:6d:1d:1a:16:90:c5:1f:56:75:24:2f:aa:28:
                    87:2f:10:5c:d0:0b:ec:fa:d1:b0:8f:c7:21:b1:7d:
                    43:d8:76:2e:dd:ab:68:2b:97:a0:0e:8c:0a:94:2a:
                    a5:28:3f:91:ac:79:07:8c:8a:33:02:c1:36:bd:d1:
                    4e:8d:e7:dd:c4:06:60:42:c8:9a:7b:d0:99:20:0a:
                    0a:dd:04:2c:37:41:cf:0a:8e:b3:71:24:56:a0:c2:
                    af:34:25:d9:fa:45:64:a5:44:b9:30:61:44:56:ce:
                    b8:21:26:d1:ee:79:59:f6:c3:69:c4:3b:09:e7:fe:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:AA:7E:EA:90:15:F9:6C:ED:6B:10:23:B7:90:11:F4:94:8A:4D
            X509v3 Authority Key Identifier:
                keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:170:1050::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:48:27:df:34:3c:38:cb:e9:81:a6:20:17:84:5c:6d:21:
         9b:7a:17:aa:62:cd:e9:41:60:1f:d1:5a:63:51:de:0f:34:98:
         2d:53:53:ad:35:6d:3f:62:9e:70:a9:aa:bc:ae:fc:45:62:73:
         76:10:6f:66:df:9d:9c:2d:bc:be:e9:42:82:b3:59:a0:35:08:
         0e:03:e5:95:5a:61:49:fc:be:69:f0:38:78:20:de:bb:9a:ff:
         db:1b:9f:61:26:14:bd:b5:1b:92:1c:60:05:29:33:95:d2:c2:
         30:21:41:d3:6c:b3:d6:2c:37:6d:bb:b1:44:04:3b:ad:9a:04:
         0a:c1:a6:d0:ba:aa:77:2c:bf:19:fc:60:06:1a:d5:de:71:c5:
         66:05:84:5b:31:17:8c:71:71:60:1f:50:99:73:f5:7a:0a:c0:
         ed:b6:7e:33:ec:7c:3f:32:d8:51:c3:bd:8f:56:42:00:9d:60:
         dc:9a:e7:74:7c:1d:89:3b:02:12:fe:71:38:bb:d4:6e:a1:15:
         01:3e:f5:ce:61:14:4c:1d:33:53:b2:45:16:ef:cc:5d:e8:ea:
         73:d0:2b:0b:e1:a4:05:64:c6:2b:37:04:80:9a:5b:99:ef:5e:
         b1:50:77:3d:cc:84:1f:5c:88:f5:a9:04:a3:24:b9:c2:8a:c7:
         48:b4:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----