Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1-myx2BeDyM5k-bE9sf3i4MqIvxw.roa
File:                     1-myx2BeDyM5k-bE9sf3i4MqIvxw.roa (raw, json)
Hash identifier:          g4sunTQUScShnqDwAXyZ0LxDYZlNCbNlUhdQ3oYAzq8=
Subject key identifier:   FA:6C:B1:D8:17:83:C8:CE:64:F9:B1:3D:B1:FD:E2:E0:CA:88:BF:1C
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019423D6FFACF205EE1004275C363AD102E2
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1-myx2BeDyM5k-bE9sf3i4MqIvxw.roa
Signing time:             Wed 01 Jan 2025 21:48:00 +0000
ROA not before:           Wed 01 Jan 2025 21:48:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25369
IP address blocks:        2a03:b000:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:ff:ac:f2:05:ee:10:04:27:5c:36:3a:d1:02:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jan  1 21:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa6cb1d81783c8ce64f9b13db1fde2e0ca88bf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:25:5c:05:1c:58:b9:5c:1d:97:dd:fa:44:
                    3b:29:04:0b:95:c0:09:50:f4:96:d7:c0:fb:d8:58:
                    5e:18:40:61:4f:d9:5f:70:70:31:0a:50:16:9e:68:
                    42:05:6f:50:ab:80:55:fd:ec:be:4a:13:75:df:ff:
                    93:de:dc:19:53:e9:df:aa:15:a4:d3:e9:e4:c0:90:
                    70:03:27:26:2f:58:37:45:dd:b3:04:27:ea:30:c0:
                    18:f7:bb:41:16:ef:71:d6:9d:d6:de:1d:e4:4b:84:
                    d7:af:44:73:64:b0:39:8e:27:05:51:8c:c6:6f:3f:
                    3d:50:c6:da:7d:c8:c5:7c:5f:c1:9f:40:f6:d7:eb:
                    9e:ce:aa:e8:b8:1a:0c:0c:0f:23:01:7d:37:09:d2:
                    b1:77:ab:e7:47:a3:77:27:90:77:4f:e7:4f:e6:77:
                    d8:b4:cc:9f:b3:b9:40:e9:89:92:28:5d:3d:e5:67:
                    0b:a7:82:12:e7:d4:f6:28:eb:6e:36:c1:3b:33:da:
                    45:26:f0:4c:a7:04:ab:3e:77:34:23:3c:a3:e5:9a:
                    a4:bb:e7:76:f0:dc:88:2b:90:9c:22:a8:ee:f8:52:
                    ae:da:88:3b:7a:c8:fb:d7:0d:d3:63:f7:4c:8d:17:
                    6a:cf:eb:96:93:c6:99:6e:cd:51:c3:53:2d:9d:c5:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6C:B1:D8:17:83:C8:CE:64:F9:B1:3D:B1:FD:E2:E0:CA:88:BF:1C
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1-myx2BeDyM5k-bE9sf3i4MqIvxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:b000:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:70:c8:b1:73:48:df:f5:d8:70:fa:d8:bd:ed:67:df:b5:
         eb:fb:12:27:66:d0:79:0d:c9:df:de:e6:be:4d:51:5f:d3:ef:
         89:f2:57:38:7d:0f:b7:48:f6:22:95:32:e0:b5:d3:8a:4d:32:
         c8:7d:0c:48:f6:07:a9:3e:40:35:f0:eb:3c:3a:53:d1:fa:3c:
         05:f6:d4:74:77:b9:26:ad:71:dc:4f:fc:57:c9:31:38:12:57:
         97:a4:e5:65:fd:75:29:a7:5a:fa:1d:2c:95:81:64:24:5d:4d:
         d4:9d:2e:ce:ed:73:fb:af:d2:3f:9a:a2:9d:23:a8:c1:2e:5a:
         52:c3:0e:65:28:f7:6d:e3:65:bf:b7:e1:7f:61:20:85:79:ed:
         bc:f4:66:c4:73:b1:d8:c6:ac:3b:ff:31:e3:d7:ca:95:0d:67:
         bf:3d:ee:93:2f:71:f1:57:c6:5c:dc:78:72:aa:c4:62:ba:58:
         e1:e4:ce:09:08:09:aa:a7:32:a4:81:39:43:f0:46:ac:7f:3d:
         72:1d:10:7e:15:ee:13:1d:fb:a6:56:a9:d5:45:93:4f:40:bc:
         78:57:f4:bc:69:7e:65:95:83:0d:87:ee:9d:32:74:7d:91:80:
         75:f2:66:cf:2c:e4:00:f2:ec:e7:4d:6b:99:6d:07:68:ab:b4:
         4d:12:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----