Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/YHHGCGfkm3-ojbm89zUZpVdC4H8.roa
File:                     YHHGCGfkm3-ojbm89zUZpVdC4H8.roa (raw, json)
Hash identifier:          UELjE4JA89B/hW6SiWgp/75eVMvYsE/BMGGrkk8YeKo=
Subject key identifier:   60:71:C6:08:67:E4:9B:7F:A8:8D:B9:BC:F7:35:19:A5:57:42:E0:7F
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       0195FC04D4F4B346C714B632195DC4069245
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/YHHGCGfkm3-ojbm89zUZpVdC4H8.roa
Signing time:             Thu 03 Apr 2025 14:18:49 +0000
ROA not before:           Thu 03 Apr 2025 14:18:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213861
IP address blocks:        2a11:3c46::/32 maxlen: 32
                          2a11:6bc3::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fc:04:d4:f4:b3:46:c7:14:b6:32:19:5d:c4:06:92:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Apr  3 14:18:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6071c60867e49b7fa88db9bcf73519a55742e07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:18:e7:68:7b:21:26:e8:df:72:34:44:6e:
                    bc:a4:f6:97:a1:58:99:8d:aa:14:19:8a:62:73:b7:
                    32:f5:04:d7:d6:0b:a7:de:8d:a4:a1:64:f2:0e:82:
                    b7:16:05:33:6c:a2:2b:a4:cb:f3:b6:d3:bc:07:c6:
                    90:5e:76:ab:ce:57:92:69:8d:98:da:19:6b:a2:31:
                    3e:81:ee:d7:3e:7f:31:e9:ce:5a:7b:2e:2e:ce:13:
                    ce:54:bf:81:18:a1:d9:6d:66:0e:18:c4:57:49:43:
                    90:c6:06:44:72:46:69:7d:fb:8d:29:c9:18:f4:b3:
                    23:0e:69:c3:18:e9:d8:eb:dc:6e:f8:d6:9b:71:5e:
                    1d:2e:ac:6f:9e:50:b3:ac:a4:07:c7:a4:35:8b:7c:
                    bb:a3:ec:c6:ed:95:1c:88:3b:8c:aa:2b:23:3b:d1:
                    96:cc:0c:25:df:b0:cf:1b:b5:fa:77:a3:71:9b:b5:
                    f0:fc:79:74:4e:4c:a7:21:8f:fb:d9:26:dc:30:23:
                    a7:4d:a7:1c:c8:df:e5:62:f2:fe:65:c4:da:22:8a:
                    93:ee:3a:40:04:86:40:fb:6e:56:1b:6d:b7:98:cc:
                    31:02:de:6e:fd:61:21:d2:89:2a:68:b1:1d:df:15:
                    fe:c1:22:70:ba:95:53:4c:bc:50:82:31:32:fa:e0:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:C6:08:67:E4:9B:7F:A8:8D:B9:BC:F7:35:19:A5:57:42:E0:7F
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/YHHGCGfkm3-ojbm89zUZpVdC4H8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3c46::/32
                  2a11:6bc3::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:5d:1c:56:98:ca:23:58:2a:bb:2b:ed:5f:fd:4d:67:5b:5e:
         99:fd:78:e1:3a:a1:e7:14:71:82:d7:c5:92:b5:2e:3a:39:6e:
         35:1e:75:14:a2:a3:d1:5c:a2:21:c2:2e:7d:9c:15:d5:20:15:
         a7:31:f5:41:bf:d5:cd:ea:61:11:85:c0:1f:ff:73:4b:e3:31:
         3f:86:7e:b0:64:1b:96:6b:42:52:33:a6:c5:a1:f8:ee:2e:03:
         60:6c:eb:13:75:7b:e7:e9:f9:cb:07:d2:57:8b:ef:5d:22:c1:
         63:d2:f6:cf:96:34:72:11:2c:1f:24:55:da:38:96:0d:27:f0:
         f0:10:dc:4a:70:be:57:b1:23:30:b2:f0:5e:c1:6b:27:ba:04:
         af:67:c3:a2:1b:95:bb:b3:dc:c8:81:59:13:5a:d2:a9:63:c8:
         85:70:ca:7c:55:b3:31:3b:98:1e:80:05:b5:6a:e9:22:2a:13:
         fe:ca:1c:c3:e4:4d:bf:93:8c:74:38:c1:15:18:d8:ee:04:ad:
         5b:dc:a0:fa:3a:5d:96:c5:73:1c:06:e9:b3:04:92:85:8f:1d:
         3b:5b:bc:04:8d:55:27:73:a4:cb:cd:ee:72:3d:49:a4:63:c0:
         58:16:9d:6c:34:a1:5c:2d:8b:4c:6e:58:5a:ba:a2:fa:60:f7:
         a2:62:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----