Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/pNL0nLB8DQ-8XQfUib6MUv_zcwI.roa
File:                     pNL0nLB8DQ-8XQfUib6MUv_zcwI.roa (raw, json)
Hash identifier:          cjYc4sdNFaH9z3SL5IzWlztWRXO11gTWgUjhdx7EkHo=
Subject key identifier:   A4:D2:F4:9C:B0:7C:0D:0F:BC:5D:07:D4:89:BE:8C:52:FF:F3:73:02
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       0193643BF03CDDD445642872DB2162065C48
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/pNL0nLB8DQ-8XQfUib6MUv_zcwI.roa
Signing time:             Mon 25 Nov 2024 16:51:09 +0000
ROA not before:           Mon 25 Nov 2024 16:51:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215236
IP address blocks:        2a06:d1c1:80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:3b:f0:3c:dd:d4:45:64:28:72:db:21:62:06:5c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: Nov 25 16:51:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a4d2f49cb07c0d0fbc5d07d489be8c52fff37302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:96:54:b6:cf:8a:45:0b:f2:d3:5a:9d:65:
                    7c:e9:dc:db:2f:46:73:d6:ee:c2:f5:58:c6:65:f1:
                    d8:ef:f2:2b:d0:90:3a:57:51:6e:15:fc:4d:f6:92:
                    a7:67:cf:4f:52:f4:2f:b7:09:9c:7c:00:f5:6e:80:
                    5c:5f:93:97:05:f9:09:a6:8f:d6:b8:b3:51:ea:4f:
                    c1:47:f7:c3:5d:f6:16:f5:ff:4b:63:d9:25:14:7c:
                    8c:9b:6f:38:14:7d:05:6a:d6:e4:27:34:9a:33:49:
                    d5:14:44:0a:a6:cc:c3:e5:c3:8a:ba:56:96:4d:69:
                    25:71:20:25:c3:1d:ba:3b:ca:f7:35:da:c0:f3:54:
                    5a:b8:25:21:bb:cd:7f:fe:cc:88:6a:57:65:f7:ea:
                    a0:4d:2f:fc:2f:9b:6e:0b:03:5e:50:d0:d4:24:3e:
                    e8:78:4d:02:4a:41:52:84:31:29:14:d4:60:9c:9b:
                    c8:ef:a0:7d:ed:f0:0f:14:9f:b3:4e:c5:5b:42:ce:
                    bc:9c:d4:82:39:c8:a9:95:f5:36:08:c2:5d:bb:de:
                    43:f2:69:b4:79:4b:ca:c8:80:57:d0:3e:d6:83:10:
                    e7:96:8c:96:82:fd:7f:40:55:ae:ee:c6:b4:fd:e7:
                    f1:ef:f4:5f:0e:8a:33:0a:95:b2:aa:f6:b9:2f:3d:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:F4:9C:B0:7C:0D:0F:BC:5D:07:D4:89:BE:8C:52:FF:F3:73:02
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/pNL0nLB8DQ-8XQfUib6MUv_zcwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:d1c1:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:78:9e:5f:15:9b:d3:08:6f:6f:0b:c9:98:ce:8c:c7:37:ec:
         fa:3c:bd:52:dd:2c:66:55:c5:31:ec:31:fc:09:e3:96:2d:fe:
         70:09:9c:56:d0:45:c6:8f:d9:3f:9c:07:de:e9:f9:7c:0e:a2:
         b2:f4:7e:14:8d:ad:fd:ba:b5:dd:f8:3d:c3:c4:2b:90:43:43:
         1f:cc:32:9e:54:4f:9b:63:c5:0c:63:a8:59:4b:db:09:8b:97:
         3d:b8:20:d1:8e:ec:81:f4:86:d7:40:ad:49:7d:1b:91:9c:1e:
         2b:ac:5d:3a:00:b7:aa:55:e4:e3:96:51:e5:4d:7c:26:0b:f2:
         28:d3:1f:e2:d5:ce:ce:57:5a:02:6d:61:63:1d:0a:96:08:d1:
         85:b6:36:f8:9a:e3:32:66:be:34:5b:08:e6:69:d3:44:d4:fa:
         3b:2d:2a:c3:71:c0:61:b9:ae:d6:0a:83:64:09:57:da:5b:e9:
         6b:bf:64:cf:77:4a:90:53:ae:ed:b3:6b:3c:d8:cd:12:50:a3:
         f3:33:53:00:0c:75:4e:a7:29:cf:41:3f:52:42:b0:32:88:e4:
         7d:ee:cc:96:38:c7:ee:ce:d8:44:da:53:b5:4b:9f:4f:49:ce:
         4e:87:46:8b:92:dd:44:cf:d2:fc:ac:81:7d:94:f4:c1:ed:f7:
         d2:4d:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----