Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/mRxq_iwcFMsCP1Gw0RaIqvC9Abg.roa
File:                     mRxq_iwcFMsCP1Gw0RaIqvC9Abg.roa (raw, json)
Hash identifier:          UB/UUQVaT3C2mmL/7s5WYcK5aVZgR6HOphP5jgF36a0=
Subject key identifier:   99:1C:6A:FE:2C:1C:14:CB:02:3F:51:B0:D1:16:88:AA:F0:BD:01:B8
Certificate issuer:       /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial:       0194228E09452519317E0BFE7036A71CD802
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/mRxq_iwcFMsCP1Gw0RaIqvC9Abg.roa
Signing time:             Wed 01 Jan 2025 15:48:41 +0000
ROA not before:           Wed 01 Jan 2025 15:48:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21263
IP address blocks:        2a0d:9600::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:09:45:25:19:31:7e:0b:fe:70:36:a7:1c:d8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
        Validity
            Not Before: Jan  1 15:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=991c6afe2c1c14cb023f51b0d11688aaf0bd01b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:79:ef:f6:f7:8e:03:17:77:a6:22:97:77:
                    c5:b9:ab:b2:14:11:9d:19:f0:bb:b3:89:af:0d:20:
                    6e:d5:c0:76:b3:a1:1f:48:b1:2e:66:e7:8c:41:6b:
                    b5:5f:0b:eb:df:67:c8:c5:24:ec:02:cb:7d:35:c1:
                    98:42:f9:eb:57:ef:4f:17:e6:8c:82:33:65:c4:3e:
                    bd:7f:1a:d3:9a:c6:2f:88:21:8e:75:7a:75:20:5d:
                    c1:48:77:21:e0:2d:f6:e9:87:1b:33:79:21:55:d8:
                    00:d1:4e:cc:b0:ef:5d:8c:30:d8:76:fb:fc:5b:fb:
                    e1:46:d9:a0:a6:2b:67:45:4d:6a:7a:a2:1f:f0:31:
                    7b:31:03:a4:07:c2:04:76:ad:80:fc:ee:7b:b6:bf:
                    38:ef:41:8c:6e:64:2a:68:b9:b5:19:bc:04:a6:df:
                    cb:9b:7f:be:c8:58:b1:bb:65:95:62:0a:05:2d:2a:
                    c3:ec:46:12:db:de:82:48:dd:8e:65:53:a9:21:19:
                    d0:83:b4:ce:8f:f6:f4:c7:b8:6f:8a:2f:ec:80:c7:
                    db:a0:d0:b8:4a:15:04:3f:06:3b:13:99:af:b1:cd:
                    1a:3f:64:02:3c:92:49:92:8f:44:62:7f:61:9c:27:
                    97:97:e4:c3:67:fb:bc:58:38:9c:e9:48:21:bf:a7:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:6A:FE:2C:1C:14:CB:02:3F:51:B0:D1:16:88:AA:F0:BD:01:B8
            X509v3 Authority Key Identifier:
                keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/mRxq_iwcFMsCP1Gw0RaIqvC9Abg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:9600::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:c7:42:83:a8:fe:9e:6b:f2:62:6a:5b:8b:7e:f9:b2:00:
         fd:56:8d:ed:ac:4d:59:42:0f:61:ae:05:7e:88:78:69:16:86:
         c6:fc:97:9e:a3:2d:a0:af:f8:c2:0f:71:4c:3d:61:57:b5:90:
         a4:dd:09:b5:5e:a8:30:14:c1:65:66:8d:3c:f2:92:37:ca:33:
         cd:57:cc:32:b4:e2:97:2b:55:f1:e0:c1:42:2b:78:e3:ea:42:
         84:a4:40:d6:5c:41:7c:87:f0:73:d3:9c:05:03:3c:e5:cc:d2:
         28:fe:8b:dc:17:d4:5d:ca:ac:28:e3:ad:ec:88:a6:3d:cc:66:
         f3:63:c9:6d:2d:6c:dc:88:44:43:64:e6:99:a2:bd:de:93:4f:
         a9:6c:3e:1c:73:28:6f:2e:ae:a5:cc:06:07:7a:0f:62:4f:86:
         b5:7a:7e:63:5b:3a:ee:42:a4:e9:90:88:8a:b3:98:4a:15:7f:
         d4:a3:c5:61:42:6f:4a:84:36:61:9c:a6:3e:f3:d6:d6:c3:94:
         fb:2a:5a:61:d2:5d:5b:7b:ce:06:97:d2:47:d0:45:b5:82:4f:
         56:b2:9b:94:f4:be:04:c7:aa:85:02:f2:45:1d:9b:8a:99:9e:
         fa:2b:3f:88:82:42:d0:2c:c1:81:05:2f:7b:43:fb:7d:c8:65:
         c6:05:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----