Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/zAPwb7bovDcweikHvlN-q4fyaQM.roa
File:                     zAPwb7bovDcweikHvlN-q4fyaQM.roa (raw, json)
Hash identifier:          B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=
Subject key identifier:   CC:03:F0:6F:B6:E8:BC:37:30:7A:29:07:BE:53:7E:AB:87:F2:69:03
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       0194266BF8EBAD5409E630BCE74311589D99
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/zAPwb7bovDcweikHvlN-q4fyaQM.roa
Signing time:             Thu 02 Jan 2025 09:49:57 +0000
ROA not before:           Thu 02 Jan 2025 09:49:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201110
IP address blocks:        2a05:6740:40c4::/48 maxlen: 48
                          2a05:6740:40c5::/48 maxlen: 48
                          2a05:6740:40c6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:f8:eb:ad:54:09:e6:30:bc:e7:43:11:58:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jan  2 09:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cc03f06fb6e8bc37307a2907be537eab87f26903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:6f:16:bb:e2:0f:fc:13:99:d8:e8:cf:78:
                    e5:fb:56:ad:58:28:0b:57:09:90:24:44:3c:d2:b8:
                    1a:58:7a:0c:7c:72:cd:ae:13:ce:d4:17:a5:95:67:
                    ae:76:65:91:bb:d1:88:08:b9:b1:23:3d:16:54:1f:
                    30:4a:0f:1a:45:bb:1d:a2:50:ad:04:08:21:67:51:
                    0e:81:9d:dd:a5:09:37:d4:dc:59:aa:de:2a:9b:11:
                    19:28:02:f6:b7:5c:d2:51:fc:be:a0:d7:dc:c0:fe:
                    7b:a7:35:01:c9:4d:8d:e3:d7:4c:ea:20:d8:e3:67:
                    ac:45:05:e4:39:b5:24:a2:c0:79:ff:cf:76:fe:3e:
                    8d:2f:6a:35:3d:34:0f:69:86:63:a5:48:fc:24:7a:
                    b8:dd:85:c1:45:11:59:58:28:d5:3c:60:50:0e:28:
                    9d:6e:50:00:fa:bd:e9:d1:ce:46:5e:b4:f7:5d:63:
                    fa:55:84:64:13:f3:7a:9d:9f:8d:c3:4e:4f:53:b6:
                    68:82:71:f2:e3:43:b7:ba:61:01:b3:8c:a2:0c:9b:
                    50:0d:9e:be:aa:3f:ae:5c:e1:3b:f1:c7:b4:ce:12:
                    c0:0d:e3:04:0f:93:1b:94:c4:90:52:f9:5e:03:49:
                    74:7f:51:b3:6f:9f:c0:1e:78:ad:c7:26:0e:c9:f6:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:F0:6F:B6:E8:BC:37:30:7A:29:07:BE:53:7E:AB:87:F2:69:03
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/zAPwb7bovDcweikHvlN-q4fyaQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:6740:40c4::-2a05:6740:40c6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:60:b6:c0:66:dc:65:db:09:bd:16:e4:ca:6b:5e:9f:da:
         82:66:71:15:68:07:e3:a2:7c:fa:c1:17:27:6f:7a:67:d0:37:
         41:72:8c:b3:9a:dd:81:68:17:76:f0:f1:df:8e:b9:58:5d:0f:
         f4:9e:31:a4:0d:7d:cf:55:25:cd:d6:60:3b:0f:8d:15:f8:89:
         27:13:8c:47:dd:76:36:ab:71:5d:4a:77:90:24:cf:69:91:2a:
         85:89:4d:5d:75:bb:67:df:25:b8:83:5e:63:d2:1c:38:77:ef:
         78:fd:e3:05:4d:2d:ea:4b:9f:47:cf:78:8c:4d:3f:a9:40:19:
         32:e3:58:f7:43:fd:4d:af:96:a8:12:9d:59:33:75:67:78:b3:
         0b:5d:52:b5:2a:b9:a2:5a:e3:42:fc:a3:e0:95:78:82:c3:10:
         ed:be:51:d8:c4:52:32:58:65:93:bf:9f:de:6c:89:fa:ad:70:
         46:aa:71:10:47:91:1f:bb:e6:00:23:59:1e:94:7b:1e:7b:ef:
         7a:9f:6d:c0:3c:1f:69:8a:c7:e2:ce:5d:e0:3f:58:78:e4:e7:
         60:c9:c8:c3:7c:42:52:dd:d2:50:74:76:54:ae:48:0d:29:1a:
         64:e0:98:09:2a:52:12:35:2e:b5:41:50:23:61:87:05:5b:18:
         9b:eb:13:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----