Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/mvmUvaM2JRysTq3IiKyyysU6GY8.roa
File:                     mvmUvaM2JRysTq3IiKyyysU6GY8.roa (raw, json)
Hash identifier:          dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=
Subject key identifier:   9A:F9:94:BD:A3:36:25:1C:AC:4E:AD:C8:88:AC:B2:CA:C5:3A:19:8F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0194258F69DFEE59A8D4B96EE60DF5100B5A
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/mvmUvaM2JRysTq3IiKyyysU6GY8.roa
Signing time:             Thu 02 Jan 2025 05:49:03 +0000
ROA not before:           Thu 02 Jan 2025 05:49:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212104
IP address blocks:        2a12:5844:1110::/44 maxlen: 44
                          2a12:5844:1111::/48 maxlen: 48
                          2a12:5844:1112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:69:df:ee:59:a8:d4:b9:6e:e6:0d:f5:10:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Jan  2 05:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9af994bda336251cac4eadc888acb2cac53a198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:3c:ba:3b:0c:e9:77:ae:fe:7f:e4:16:5b:
                    4b:9e:2a:72:da:85:76:9d:a2:1e:9d:a4:a7:8d:52:
                    70:e0:0b:71:79:e6:ac:1d:60:7e:2e:a7:e9:5c:06:
                    d5:a1:d8:f5:ef:ba:54:6c:60:1f:dc:a6:36:76:6f:
                    d4:4d:2b:4a:84:6c:9a:03:2b:62:6f:83:bc:e2:ed:
                    de:3b:00:f2:54:be:02:8f:1a:63:b0:0c:29:dc:06:
                    c5:f6:7e:52:2d:ab:a9:2d:72:1d:8c:e3:25:ff:a6:
                    29:54:68:96:a6:28:80:07:be:fb:a0:54:ff:66:b1:
                    80:7b:a7:a2:ff:56:bf:8d:c2:71:3e:af:e9:5e:57:
                    c8:01:e7:d2:b0:1b:4e:0a:50:ea:04:b2:60:2c:b5:
                    e4:d0:99:a2:29:f5:05:28:c2:9b:a6:78:81:d9:bb:
                    ba:1f:4e:0c:86:a3:e8:b3:ee:90:72:fd:e4:19:98:
                    a7:8e:af:43:af:03:a4:96:0f:a3:1f:ae:c2:a1:8b:
                    5f:de:63:53:bb:7c:23:07:00:10:b6:6e:a2:6c:93:
                    3d:ec:6a:79:96:39:ab:94:e8:16:23:db:fb:19:50:
                    9f:7f:54:3f:4c:0a:34:eb:dc:1f:83:3d:97:6d:2b:
                    da:bf:81:f0:14:d4:1c:f9:8a:b6:d7:c1:d2:c8:d8:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:94:BD:A3:36:25:1C:AC:4E:AD:C8:88:AC:B2:CA:C5:3A:19:8F
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/mvmUvaM2JRysTq3IiKyyysU6GY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5844:1110::/44

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:34:c3:4e:0b:5c:90:f8:9c:a7:d5:dc:7a:52:40:35:fe:
         1f:b7:3b:fe:13:ce:ba:83:3d:69:0d:b3:aa:b5:58:62:7b:7f:
         bd:37:f2:6c:eb:6f:b3:8e:f5:8d:a1:7b:29:52:af:07:b3:00:
         4b:80:a5:33:4f:d0:22:53:1c:56:7c:f0:39:0b:42:8d:aa:43:
         02:b9:b5:1b:e1:d1:fc:3c:56:91:cc:96:4a:b5:6d:18:bd:09:
         16:51:9d:76:b7:f3:4e:07:63:72:d8:93:26:0d:21:b4:85:c8:
         26:ef:74:bb:93:19:b8:60:2c:34:76:e8:17:cc:cb:4f:8c:ca:
         48:b1:21:c2:b0:09:a4:45:0f:02:e6:72:30:28:7f:92:4a:61:
         27:da:ae:57:86:27:ca:05:c9:72:82:f8:40:6e:5b:12:64:d4:
         56:63:f6:d8:c1:98:b1:c3:49:1c:32:7a:bb:60:04:bf:dd:74:
         5b:e6:63:7b:56:68:5a:98:4c:ed:a9:ce:dd:08:80:31:47:95:
         56:24:0c:17:ac:ee:41:58:7a:4b:42:02:87:13:14:07:5e:c3:
         3e:3e:84:1a:4d:e9:d6:ab:9f:45:9b:91:54:a2:b2:1e:c2:fb:
         2f:55:bf:ad:de:a9:e1:31:13:e8:88:a7:a4:ec:e0:07:7b:ae:
         35:7c:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----