Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PYT3Sb2wPFQrod-nfDRdAk3276Q.roa
File:                     PYT3Sb2wPFQrod-nfDRdAk3276Q.roa (raw, json)
Hash identifier:          vhSHERYrrbQ/reHlC/6YHfON8e0cyXzpFG0Zmg/d6z8=
Subject key identifier:   3D:84:F7:49:BD:B0:3C:54:2B:A1:DF:A7:7C:34:5D:02:4D:F6:EF:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019425222BCFD97CFB9FD690F10D8A7706FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PYT3Sb2wPFQrod-nfDRdAk3276Q.roa
Signing time:             Thu 02 Jan 2025 03:49:43 +0000
ROA not before:           Thu 02 Jan 2025 03:49:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207994
IP address blocks:        2a10:cc40:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:2b:cf:d9:7c:fb:9f:d6:90:f1:0d:8a:77:06:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3d84f749bdb03c542ba1dfa77c345d024df6efa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:c8:53:14:49:99:34:ba:c9:5d:e4:1e:d7:
                    fb:e6:92:dd:9d:eb:50:b7:e5:ae:77:49:06:cb:07:
                    a7:8c:bc:53:fc:21:9c:0c:b4:75:e0:3d:a9:7c:0b:
                    2c:e9:5b:b7:62:cc:9f:b6:8a:02:99:d8:78:48:73:
                    55:ce:07:16:36:37:59:fa:72:a5:04:49:e0:66:9e:
                    c9:5c:a4:9b:41:99:1e:b4:b9:af:ae:c9:0e:e3:d8:
                    a5:af:a8:93:01:1a:89:f1:95:ee:dc:01:8c:01:21:
                    59:ac:c8:c1:d0:15:d4:20:20:c4:51:db:b7:7e:c2:
                    d1:c8:92:8b:26:e4:43:a1:70:95:ef:4e:4f:6c:8e:
                    30:79:34:b2:3b:68:9f:33:c7:2e:12:42:6f:ca:1b:
                    b1:9d:ae:59:05:7b:03:04:72:c7:dc:89:5b:fa:49:
                    4e:15:50:87:e1:27:b3:e5:52:29:4b:e0:72:fb:d9:
                    3a:22:cc:84:1b:44:1c:5a:66:03:41:22:1e:8d:be:
                    c4:85:92:ae:83:4d:2d:be:1e:8c:c2:a4:c7:4e:74:
                    f6:63:29:40:dc:0c:04:7d:9f:73:52:a8:56:fa:a5:
                    17:1e:a6:25:97:0d:f4:74:f6:85:bc:83:ab:8e:05:
                    f0:60:e1:8b:96:14:33:69:dc:47:90:a0:09:01:1d:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:F7:49:BD:B0:3C:54:2B:A1:DF:A7:7C:34:5D:02:4D:F6:EF:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PYT3Sb2wPFQrod-nfDRdAk3276Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:20:f5:7f:80:46:c1:a9:c4:fd:ba:f5:4f:c7:59:65:ac:
         8f:cb:3f:51:03:e7:92:e9:a1:78:d4:20:be:48:93:ab:3a:14:
         51:ed:30:c6:00:0d:6e:11:4d:22:a0:d8:21:f4:ee:59:0d:a9:
         97:e5:38:d8:88:cb:c0:d6:3d:50:5d:32:64:81:8d:f4:5e:30:
         bb:90:d9:08:9e:ad:ad:4e:52:6a:cd:6e:8e:d1:0a:66:de:19:
         8d:55:39:c2:cc:77:bc:92:4e:f4:06:51:ac:5f:db:c3:ad:ad:
         62:28:7f:d5:6a:65:a1:41:99:2d:c8:6a:78:60:45:59:fa:a0:
         bb:33:01:66:41:f6:84:d5:31:b1:e4:e7:ac:55:fd:aa:69:11:
         f2:6d:83:8c:59:56:ea:f9:46:5f:89:48:84:94:f6:a5:42:cb:
         65:a1:a1:94:c0:ce:e7:9c:10:98:9a:25:8d:c6:ee:77:9a:58:
         94:83:97:0b:57:bb:4d:ca:0f:30:16:16:80:01:be:36:56:7a:
         5a:da:38:0f:3c:69:9f:bb:a1:d1:4e:2f:b4:21:7f:4d:cc:28:
         4f:82:aa:ce:fc:2e:95:e6:91:a1:63:ad:07:35:cd:48:79:fb:
         95:ca:9f:7a:dd:fa:ec:69:f4:e7:d6:15:28:99:a2:77:51:66:
         31:75:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----