Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa
File:                     rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (raw, json)
Hash identifier:          l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=
Subject key identifier:   AE:10:A8:39:0D:1B:DC:B2:05:87:FA:73:18:2C:7C:98:4A:50:48:25
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       0194228DB3EB2A839844AB08011EFA7CF222
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa
Signing time:             Wed 01 Jan 2025 15:48:19 +0000
ROA not before:           Wed 01 Jan 2025 15:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1299
IP address blocks:        2a01:e281:a600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:b3:eb:2a:83:98:44:ab:08:01:1e:fa:7c:f2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Jan  1 15:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae10a8390d1bdcb20587fa73182c7c984a504825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:87:5e:d8:d4:38:63:76:e1:48:ca:4f:22:
                    c4:47:99:95:34:30:aa:59:3c:59:b5:1d:27:70:2f:
                    f6:7c:f9:13:30:0e:07:fa:8d:46:31:96:33:83:cf:
                    9f:3b:8e:a9:97:c6:71:7d:60:1e:b3:bb:fd:d8:0f:
                    37:15:78:94:0c:3b:6f:59:32:65:c2:3b:b4:f9:c3:
                    f4:dc:78:06:2d:35:55:1a:e2:5f:ce:cb:71:6a:89:
                    ab:4a:7b:4e:20:14:3d:88:2b:3f:56:ba:ab:db:b0:
                    d8:a5:ba:28:a0:77:56:ea:20:67:f8:ec:0f:c7:b4:
                    7e:eb:46:25:88:cd:33:08:5f:e2:59:f4:66:b6:11:
                    c2:1e:7c:1e:69:f9:5a:fe:65:cd:04:4a:cf:cd:9b:
                    c5:68:73:7f:58:36:87:19:29:fb:75:2f:2e:ec:c2:
                    cb:bb:0b:ed:96:5e:d7:94:4f:17:65:50:c8:18:4e:
                    01:d5:52:bd:8e:f4:dc:b4:23:ca:27:ec:96:01:86:
                    5d:84:38:46:14:8f:35:7b:fc:7e:64:ba:96:5a:d5:
                    ea:09:2e:f4:b9:f0:62:1c:28:00:f7:67:c4:79:1e:
                    fb:3e:48:27:44:7c:7a:55:11:7f:4e:dc:9a:95:c1:
                    c0:f0:93:34:12:30:18:25:93:64:b6:88:77:91:1e:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:A8:39:0D:1B:DC:B2:05:87:FA:73:18:2C:7C:98:4A:50:48:25
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e281:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:52:b0:f1:24:71:bf:e4:89:f6:b7:bf:07:8f:4e:9e:69:
         7b:ad:e5:43:a4:de:3d:ea:5f:67:af:f4:e7:71:ed:a0:7a:11:
         cb:2e:ae:b7:2d:ef:b8:10:98:8d:25:33:24:a0:7c:ee:e2:3a:
         0d:1d:02:60:44:f2:b6:02:b3:9f:79:1f:8c:1f:cf:32:45:07:
         f6:9b:7c:a2:7d:29:0b:c2:1a:46:1f:46:80:03:0d:ab:32:39:
         48:68:9f:46:a9:6e:23:43:6c:ff:d5:e9:a2:35:12:ba:ac:ee:
         c1:8a:ca:3f:d7:52:3c:46:84:d0:b6:78:f5:77:75:e2:b3:51:
         88:58:43:6b:ab:d7:3f:a8:a7:d3:eb:8a:28:e2:e3:b0:9b:fd:
         1c:a9:26:a1:6c:f8:cf:38:01:b2:54:da:4b:95:eb:6d:c5:1e:
         ce:7a:21:5d:6d:50:5e:c1:9e:b9:9f:ab:2e:f7:5a:ce:53:e4:
         f5:23:ef:68:9b:f4:d0:5f:1b:9a:71:15:b9:f4:88:45:0b:04:
         05:21:9d:45:00:5e:1b:62:d1:ca:a1:fa:f4:b8:8a:9e:45:c1:
         1a:a2:0e:5b:84:43:72:2c:57:f9:e1:f9:f6:bb:72:d9:e5:43:
         3d:12:68:93:5d:63:1f:71:45:97:6f:0f:a4:23:87:41:98:47:
         83:d0:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----