Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/wOvEyLEfRcu6DG-p65x_OfzTRz4.roa
File:                     wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (raw, json)
Hash identifier:          ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=
Subject key identifier:   C0:EB:C4:C8:B1:1F:45:CB:BA:0C:6F:A9:EB:9C:7F:39:FC:D3:47:3E
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       01961A0141DCDBF1F614D8C6D3B3558D7B83
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/wOvEyLEfRcu6DG-p65x_OfzTRz4.roa
Signing time:             Wed 09 Apr 2025 10:03:32 +0000
ROA not before:           Wed 09 Apr 2025 10:03:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204834
IP address blocks:        2a0b:7c80::/48 maxlen: 48
                          2a0b:7c80:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:01:41:dc:db:f1:f6:14:d8:c6:d3:b3:55:8d:7b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Apr  9 10:03:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0ebc4c8b11f45cbba0c6fa9eb9c7f39fcd3473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:04:bd:1d:5c:37:53:2e:5c:8a:e3:3b:22:
                    e1:75:da:97:62:76:4c:87:23:c5:a6:8c:3b:48:47:
                    41:89:4d:fc:eb:99:fb:53:cb:dd:32:23:21:98:1d:
                    3a:25:f8:97:f8:2d:32:11:d5:f5:80:dd:28:6d:7d:
                    24:20:47:9c:5e:0e:2f:ba:71:3a:7b:fe:c5:92:b3:
                    85:fd:23:85:68:f1:e8:43:f8:90:d0:84:b0:33:c9:
                    72:a8:cf:31:b3:c8:81:0c:a9:c4:39:cd:a3:a6:a7:
                    2c:b1:f1:c4:b3:f5:91:4a:8c:c3:c6:3b:83:aa:50:
                    c1:88:ac:dc:53:61:44:fd:c7:43:2d:a6:99:82:f3:
                    6c:c3:4c:31:3e:75:57:a4:6b:20:b7:c6:89:f9:97:
                    af:e1:f0:e7:83:2f:10:34:18:89:9a:77:6e:29:cd:
                    86:ec:a4:cf:1d:f5:de:9d:6d:15:5a:45:9b:cd:d8:
                    f4:75:67:a5:78:8e:67:fa:b5:6e:18:76:40:a9:72:
                    6d:45:dd:41:e2:40:2c:b9:48:da:f5:ca:12:78:7f:
                    ef:fa:02:bc:cc:5b:ab:9d:10:8a:20:2c:f6:0a:52:
                    1d:1a:eb:d7:b1:e6:d0:ea:af:c8:ff:cf:19:34:10:
                    06:38:e4:9e:ee:86:23:4d:b1:7b:48:b6:71:67:ad:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:C4:C8:B1:1F:45:CB:BA:0C:6F:A9:EB:9C:7F:39:FC:D3:47:3E
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/wOvEyLEfRcu6DG-p65x_OfzTRz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:7c80::/47

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:33:c1:44:11:98:46:fb:b7:4c:d8:28:b7:f9:7c:d1:f9:
         98:ab:8d:24:2e:d1:a6:40:98:11:5a:79:46:0b:27:2e:19:ac:
         be:dd:26:31:e7:62:d7:ca:07:8c:49:87:04:52:00:09:e0:6d:
         13:3a:30:5c:9a:17:3a:b5:11:1c:c8:58:26:4e:19:02:30:ee:
         fa:79:f5:a9:ef:f2:fc:c4:b3:01:a3:72:38:2c:17:00:40:9e:
         34:fb:fb:47:c1:f4:38:d6:b6:6d:45:49:ad:d5:32:a1:fb:53:
         e5:07:6f:6b:96:41:46:76:fb:c5:38:03:80:7d:0a:36:4d:cf:
         b0:8d:70:8d:fa:d3:b5:a0:b0:34:fb:e0:df:bf:fb:0a:46:49:
         e5:3b:d5:a0:6b:80:15:38:c7:c4:b8:d8:b5:54:63:60:ce:42:
         13:e1:e2:b4:fd:9e:e0:69:c5:98:45:ef:a0:be:d4:15:4b:74:
         3c:7b:45:ec:6a:fd:a0:09:96:1d:49:ca:8f:b4:75:a1:b6:3d:
         d4:11:94:1c:c4:30:f3:eb:a0:a2:3f:36:21:b5:76:b1:f6:48:
         12:7e:46:99:10:a4:d1:2e:6b:82:20:a2:8a:bb:cb:9a:94:09:
         e2:62:31:08:2d:06:46:d8:48:57:2c:03:4d:48:50:4a:c6:c8:
         c4:ee:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----