Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pcEoK4QA3f-GGyBVUIarpEIcSb4.roa
File:                     pcEoK4QA3f-GGyBVUIarpEIcSb4.roa (raw, json)
Hash identifier:          de4hkc9QMDCqpcQI8akFG5cXi6QKEWu+ACw61TCgbC4=
Subject key identifier:   A5:C1:28:2B:84:00:DD:FF:86:1B:20:55:50:86:AB:A4:42:1C:49:BE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019425228D1FBA79DE2606FB165366D66863
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pcEoK4QA3f-GGyBVUIarpEIcSb4.roa
Signing time:             Thu 02 Jan 2025 03:50:08 +0000
ROA not before:           Thu 02 Jan 2025 03:50:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215738
IP address blocks:        2a06:de00:700::/44 maxlen: 48
                          2a06:de00:7f0::/48 maxlen: 48
                          2a06:de00:7f1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:8d:1f:ba:79:de:26:06:fb:16:53:66:d6:68:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:50:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a5c1282b8400ddff861b20555086aba4421c49be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:4d:9a:fc:50:c0:d8:4f:0b:ac:67:1c:58:
                    08:c7:dd:27:07:37:6d:cf:20:0a:3d:ff:32:7f:12:
                    e1:aa:9c:d1:a2:1b:f1:d8:b7:c9:02:95:9d:1f:e3:
                    81:e1:95:62:d8:72:54:74:3d:b6:11:59:aa:91:57:
                    ad:70:10:74:63:c3:10:5e:d6:5d:cf:14:43:36:9a:
                    7e:94:a8:5d:1b:9e:73:b2:1c:e3:63:06:25:b4:f3:
                    14:df:ee:7d:02:82:c3:f1:3a:eb:d3:a9:19:6a:05:
                    dd:3b:78:2e:6b:d7:dc:c3:05:33:07:23:1b:c3:6a:
                    20:a5:7b:b6:17:b3:7d:fb:87:0f:ae:ca:06:e3:63:
                    d0:6e:3d:93:c1:c0:f8:ab:d1:f9:40:eb:88:b5:82:
                    58:6a:16:4b:e3:81:b4:bf:07:f6:d1:90:1e:0e:77:
                    0e:99:00:4b:b4:32:c4:a2:5d:31:b2:6b:98:e0:cb:
                    de:af:32:cd:76:f6:1f:0d:27:6f:d1:bd:04:9d:01:
                    74:66:9c:3c:b9:68:22:41:52:c7:a7:f3:aa:8d:33:
                    99:f4:11:6d:a3:28:e0:43:0d:42:61:81:dd:76:6f:
                    32:92:a0:43:01:e7:f1:7a:43:f0:3a:d4:ae:4b:a4:
                    a2:fd:83:06:07:94:b9:63:a0:35:07:ef:49:9c:0d:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C1:28:2B:84:00:DD:FF:86:1B:20:55:50:86:AB:A4:42:1C:49:BE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pcEoK4QA3f-GGyBVUIarpEIcSb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:700::/44
                  2a06:de00:7f0::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:00:00:cf:56:ea:40:43:0c:5c:61:02:02:ea:03:7c:a3:
         ac:3a:37:e6:5f:84:7c:f3:7f:49:e2:b7:8b:d6:18:1a:db:d1:
         1c:69:64:cd:8a:3f:d4:f1:76:a7:c9:7b:c9:b5:b6:f3:43:2c:
         28:0e:27:be:f4:1b:4c:6f:5d:70:40:fd:e1:ad:71:1d:7f:66:
         16:36:fd:fe:85:92:70:8d:53:65:52:c0:c5:b7:b6:1d:05:94:
         24:2b:d9:8f:5d:52:8d:cb:c7:e7:ac:91:c8:86:de:8a:ee:25:
         aa:9e:65:f3:b2:ec:1c:ad:75:d1:fe:94:4a:63:a1:ce:a8:0b:
         bc:14:9a:e8:05:01:86:9f:18:8d:fe:c2:31:ae:52:c2:b2:b7:
         b7:28:db:b5:47:ec:cd:48:b5:fb:6c:6d:66:d4:15:4a:36:c5:
         48:a3:f3:03:ff:f7:0f:ec:ca:0b:69:0f:fc:2e:7b:bd:1e:f3:
         3f:0f:0c:8c:03:91:12:53:7e:fb:c2:9e:f7:cb:4d:db:86:25:
         fd:f8:9f:f1:78:36:ba:74:52:09:b6:d9:a0:ab:58:6b:b3:d8:
         66:d7:e9:0a:bd:64:c3:fe:fb:c0:ef:bd:01:47:e5:58:09:f5:
         da:e7:a9:92:46:92:36:2b:8b:8d:f7:5f:72:db:fe:13:b2:0b:
         33:c0:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----