Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/F1clSCHfCrBchpNItB3_ECdQ4G0.roa
File:                     F1clSCHfCrBchpNItB3_ECdQ4G0.roa (raw, json)
Hash identifier:          UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=
Subject key identifier:   17:57:25:48:21:DF:0A:B0:5C:86:93:48:B4:1D:FF:10:27:50:E0:6D
Certificate issuer:       /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial:       0194258EC72CB1D86A1EA66038AF7251A84E
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/F1clSCHfCrBchpNItB3_ECdQ4G0.roa
Signing time:             Thu 02 Jan 2025 05:48:21 +0000
ROA not before:           Thu 02 Jan 2025 05:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209057
IP address blocks:        2a0e:6a00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:c7:2c:b1:d8:6a:1e:a6:60:38:af:72:51:a8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
        Validity
            Not Before: Jan  2 05:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1757254821df0ab05c869348b41dff102750e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:0a:4e:e2:c6:55:23:f3:0d:51:44:13:7f:
                    4d:37:98:08:11:f8:0a:43:8f:ce:8d:9a:a0:f3:7a:
                    f4:87:ae:29:2c:cb:8c:cc:c5:e3:c0:71:42:89:a6:
                    b9:64:41:fa:95:b9:2f:f6:26:0f:88:62:40:ee:ad:
                    a2:bb:27:28:7c:81:d3:e4:33:83:15:26:0d:32:9b:
                    14:5d:21:bb:ef:74:4e:8a:4e:16:e6:24:88:94:3f:
                    c7:9a:6a:1c:22:68:89:8d:bd:be:32:6d:96:d9:36:
                    d6:da:3e:1c:4f:0d:b3:1e:09:aa:65:e6:e4:7d:8c:
                    e9:11:87:70:fc:5c:4d:82:44:a3:76:f8:32:92:ba:
                    d8:48:b1:6f:d6:c7:0e:aa:db:82:cd:76:8f:c0:32:
                    46:e1:85:73:27:d0:e3:1e:12:3f:ea:2e:ef:5d:4a:
                    b7:03:6e:79:07:81:8f:81:0d:b4:9c:f3:b9:78:c9:
                    b1:2f:a2:d7:78:76:f4:d1:6b:af:2c:a3:1b:f9:77:
                    d9:66:bf:32:8c:46:82:bf:bf:8e:8d:82:b1:e3:34:
                    7e:d4:5f:a8:ba:28:34:e5:9d:d7:38:e4:36:da:fb:
                    01:48:f9:8f:da:51:c5:42:4b:8f:76:1b:45:85:68:
                    b1:65:b4:79:96:c7:d0:e2:06:f2:b8:d3:d1:a3:d7:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:25:48:21:DF:0A:B0:5C:86:93:48:B4:1D:FF:10:27:50:E0:6D
            X509v3 Authority Key Identifier:
                keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/F1clSCHfCrBchpNItB3_ECdQ4G0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:27:4e:7a:c4:6a:83:48:77:74:e4:eb:19:71:0e:c2:21:
         4d:24:81:40:50:64:3d:43:57:87:8c:45:15:68:cf:3b:a4:1a:
         37:0c:39:64:0a:0b:ec:1e:8e:38:a9:af:eb:24:e7:3d:87:8b:
         0c:a7:88:86:44:a4:03:46:f9:73:62:b3:69:90:20:79:b2:b8:
         df:af:d5:c8:81:a4:50:7b:69:b1:1d:b0:11:a6:71:e8:3b:99:
         0e:43:09:73:7a:54:5e:a5:f7:68:81:44:88:30:4f:eb:a5:fa:
         dd:16:eb:63:95:58:4c:b4:12:47:67:90:d4:e3:93:75:cb:a7:
         d1:cd:88:29:df:fd:f7:2b:2e:74:93:8d:0b:92:18:4b:3a:a3:
         71:8c:0d:39:1d:a3:aa:ac:ee:e4:52:1f:97:38:32:b2:1a:42:
         79:6f:3a:5d:e8:f2:87:0e:ed:6a:f9:d7:2c:f2:e5:83:a4:01:
         89:c2:3d:e0:4c:fb:85:e8:82:73:8c:c0:63:d3:c0:bb:c6:6d:
         78:d3:a8:76:e0:29:c2:74:f6:7f:f5:73:8c:2a:d4:25:df:c9:
         d7:87:0c:39:42:93:84:1e:f2:af:04:39:a0:a3:e7:49:04:b8:
         97:db:5a:8a:2b:36:b3:82:c7:f8:3e:e4:a6:e5:95:3d:2f:87:
         ae:4a:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----