Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/GCDECUA53das4KdfVgJGCGchlPM.roa
File:                     GCDECUA53das4KdfVgJGCGchlPM.roa (raw, json)
Hash identifier:          Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=
Subject key identifier:   18:20:C4:09:40:39:DD:D6:AC:E0:A7:5F:56:02:46:08:67:21:94:F3
Certificate issuer:       /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial:       019423690BDAA9678BBCC072FC37EF334447
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/GCDECUA53das4KdfVgJGCGchlPM.roa
Signing time:             Wed 01 Jan 2025 19:47:54 +0000
ROA not before:           Wed 01 Jan 2025 19:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31451
IP address blocks:        2001:67c:1550::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:0b:da:a9:67:8b:bc:c0:72:fc:37:ef:33:44:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
        Validity
            Not Before: Jan  1 19:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1820c4094039ddd6ace0a75f56024608672194f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:ff:f8:e0:93:a1:df:4c:91:ec:af:31:54:
                    e0:33:be:8b:20:5c:e9:8d:e4:8b:de:31:6d:14:fd:
                    5f:5f:e5:b9:c6:04:94:6c:0b:3e:1b:3b:66:e7:ff:
                    2a:72:cd:82:86:e4:ad:5c:e1:50:2b:0d:fa:51:d9:
                    6b:b3:72:62:38:6f:a3:c1:c5:fa:9f:e3:88:c8:48:
                    15:d7:8d:7a:b4:fc:b9:3c:db:48:5c:0c:cd:18:d1:
                    57:2f:a6:83:29:ee:7c:d3:59:4c:04:7e:94:c6:84:
                    f5:cc:de:9c:e8:f0:a5:8f:f7:ff:07:4d:2b:c0:6c:
                    39:6e:56:35:df:18:b8:dd:60:e3:11:5b:b5:81:7b:
                    7c:e5:4b:3d:1b:10:51:e4:b1:76:41:03:13:4f:85:
                    6b:46:c0:1f:2b:0e:07:f7:fb:d5:55:cf:d7:4e:35:
                    3d:14:f0:a8:49:26:d3:8b:c5:7f:bb:75:f3:57:66:
                    92:35:fc:8d:f5:62:83:53:38:d3:f7:b4:a0:1f:ff:
                    e0:28:ce:ae:e1:26:89:36:1d:51:62:2a:bf:5b:68:
                    1b:6a:6c:b3:50:78:31:3e:08:1a:75:e4:e5:31:45:
                    24:b8:d3:85:8b:c4:a1:e2:43:0b:99:6e:86:08:d2:
                    39:ec:64:26:56:18:1d:21:43:ff:3e:fc:df:42:06:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:20:C4:09:40:39:DD:D6:AC:E0:A7:5F:56:02:46:08:67:21:94:F3
            X509v3 Authority Key Identifier:
                keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/GCDECUA53das4KdfVgJGCGchlPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1550::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:41:c3:24:26:02:5c:c3:69:77:15:d3:72:48:37:3e:f5:
         7e:50:2d:84:e2:55:ee:f0:1b:7e:50:95:dc:bd:cf:b9:e1:ab:
         65:e8:f7:32:22:2f:33:6a:a6:77:f3:6f:a0:ac:b5:cf:41:ee:
         cd:b8:d4:0a:dd:90:7b:0f:be:d5:eb:23:c8:b1:6d:eb:cb:10:
         6b:50:94:e7:4b:55:5c:4f:25:74:e9:ab:36:1a:84:2c:e9:e0:
         2f:eb:6f:00:f9:a1:75:c9:bc:d1:19:f6:ca:bc:c7:30:bb:a9:
         5e:0d:0a:08:47:02:78:22:aa:f2:2f:1d:23:63:20:d4:da:d2:
         fc:85:18:59:11:e4:5e:f1:a4:d0:e0:4c:8c:e3:b8:05:e5:95:
         91:54:ea:79:80:38:1a:3d:dc:54:7b:50:67:63:03:d4:64:ac:
         10:ec:99:ba:9d:33:e3:c4:5f:0e:70:c9:b9:3c:e3:19:2b:c9:
         73:b3:f1:03:cc:fb:d1:72:a8:82:89:40:0c:92:f6:0c:52:bd:
         5f:12:b3:e4:95:12:38:33:61:01:3b:e8:a1:a4:a1:17:e4:66:
         89:d7:40:9f:37:a8:97:89:c8:2e:a3:40:f4:e1:54:d0:de:d2:
         56:de:f0:ba:d1:18:be:97:1a:e3:73:c9:f1:eb:23:79:4d:35:
         ab:ce:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----