Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa
File:                     NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (raw, json)
Hash identifier:          jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=
Subject key identifier:   35:C5:66:6C:11:14:41:96:00:D6:63:6B:73:85:45:DA:60:22:51:29
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       0194258F70EA5B37EE0D99046A5CDCCEBE12
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa
Signing time:             Thu 02 Jan 2025 05:49:05 +0000
ROA not before:           Thu 02 Jan 2025 05:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29608
IP address blocks:        2001:678:938::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:70:ea:5b:37:ee:0d:99:04:6a:5c:dc:ce:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Jan  2 05:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=35c5666c1114419600d6636b738545da60225129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:f6:09:b6:0b:c4:0a:89:41:1a:75:b5:18:
                    57:0b:83:65:fa:f9:5f:8c:87:3f:5d:c4:7b:1c:75:
                    e3:20:a5:c2:2a:02:b2:1c:ee:36:6f:83:bb:e1:26:
                    24:d8:59:c2:38:9c:66:21:be:17:d8:41:88:71:aa:
                    05:3f:52:8f:cc:64:69:c4:59:64:39:99:3e:3f:31:
                    94:57:db:bb:d6:02:f9:c8:3b:a3:75:63:de:14:76:
                    47:ad:2a:98:43:e5:49:00:95:e8:b7:26:cb:5d:69:
                    e1:b8:c5:54:ba:a5:87:ae:e8:65:72:82:2b:ea:49:
                    0f:fd:47:e7:03:44:34:2b:fe:9f:c6:36:06:7e:03:
                    3a:79:38:51:28:a7:1a:33:ce:5b:1f:fc:b3:ca:e8:
                    93:e2:1d:49:86:a8:6e:9f:c0:08:66:ba:2c:ce:4f:
                    5b:a0:43:ef:02:92:e5:35:36:21:4a:9f:d7:b8:13:
                    04:7b:b9:94:b2:e9:bf:fb:60:2c:89:cb:16:7a:97:
                    6c:29:58:37:a9:3f:03:e8:c0:eb:9d:47:34:07:fd:
                    f5:73:33:e0:32:ec:ce:94:d6:95:5f:86:2a:7c:77:
                    36:f8:c2:3c:4c:bf:06:4a:45:e2:51:3f:48:19:9a:
                    5a:12:eb:e6:48:c8:81:7a:28:e6:ed:4c:43:ae:a3:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:66:6C:11:14:41:96:00:D6:63:6B:73:85:45:DA:60:22:51:29
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:938::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:92:74:1c:cf:d0:80:96:2f:a0:66:7c:40:20:5d:2d:26:91:
         18:8e:3f:e1:6b:63:e6:9a:8d:bb:dc:be:97:ee:f9:12:74:53:
         5d:75:d3:e1:96:1a:76:64:83:5f:20:c6:a8:4d:34:10:f1:92:
         50:0c:9f:48:b1:7d:14:66:43:dd:b8:fa:11:65:2f:08:32:05:
         f5:7c:ec:fa:1d:e9:c3:13:ac:94:8e:44:b2:74:34:f9:54:83:
         0a:c1:1b:d2:9d:9d:5e:d1:15:17:1f:ef:06:a8:e7:07:e1:f0:
         ca:1b:34:bb:65:ba:9c:7d:31:21:4a:63:d1:92:20:af:a0:20:
         85:df:13:92:1b:79:3a:f8:ff:9c:9a:9b:6f:56:67:ef:09:b9:
         ee:2e:70:68:9d:8e:90:a4:e4:d7:e2:71:71:5e:eb:ba:3e:49:
         2b:fe:10:9d:47:00:ec:91:ea:31:4e:33:5e:c4:e4:76:7c:3f:
         36:9e:24:5f:d9:c1:e9:16:bd:b1:7e:53:8d:35:4a:7e:25:71:
         50:fc:8a:28:b6:c0:ee:45:ef:7a:62:7b:fa:02:c6:7c:43:9c:
         d6:52:51:d3:85:b5:a3:19:da:cc:3b:3b:57:80:55:70:0a:60:
         03:0f:fd:28:04:87:d2:66:12:ab:36:bd:db:2b:46:47:7c:10:
         00:e0:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----