Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/cg41KOlM1vNAwrdMnvNHppcwT4c.roa
File:                     cg41KOlM1vNAwrdMnvNHppcwT4c.roa (raw, json)
Hash identifier:          QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=
Subject key identifier:   72:0E:35:28:E9:4C:D6:F3:40:C2:B7:4C:9E:F3:47:A6:97:30:4F:87
Certificate issuer:       /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial:       0194228D09046444963103CD64705CDC18D2
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/cg41KOlM1vNAwrdMnvNHppcwT4c.roa
Signing time:             Wed 01 Jan 2025 15:47:35 +0000
ROA not before:           Wed 01 Jan 2025 15:47:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200494
IP address blocks:        2a13:5dc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:09:04:64:44:96:31:03:cd:64:70:5c:dc:18:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
        Validity
            Not Before: Jan  1 15:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=720e3528e94cd6f340c2b74c9ef347a697304f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:e5:6a:b8:e6:41:69:42:d5:df:5b:4a:ee:
                    55:2b:44:4f:52:73:d2:04:02:81:15:2c:6d:62:8e:
                    a6:d2:a9:bd:65:63:51:5b:c1:fe:95:c7:75:eb:4f:
                    3a:40:c2:36:25:3a:6c:78:ca:65:87:d1:63:3f:99:
                    c0:10:47:5e:07:27:9f:56:a9:05:6f:9d:b4:42:75:
                    c2:14:92:ed:7b:3f:fd:8f:52:87:a1:b8:2b:6b:bf:
                    6f:c9:7c:9a:fa:79:99:78:cf:f1:81:1d:8e:bf:f9:
                    98:6f:2e:ff:0f:54:17:a9:3d:ea:8b:a6:fc:b1:9e:
                    70:8d:cd:1a:7d:ea:ec:22:a8:0f:a4:35:18:87:23:
                    35:e0:1f:08:32:2e:f4:22:7b:d3:c9:1d:b6:5c:91:
                    85:15:5f:03:3f:4c:7f:35:00:28:9a:1e:e0:92:c6:
                    32:ff:74:09:39:e5:58:60:46:46:69:d8:aa:13:3b:
                    86:29:88:bf:63:11:bc:53:8c:da:9f:5d:a8:f7:71:
                    01:4c:f3:38:b4:fa:ff:79:13:16:f2:87:cb:fa:b7:
                    f4:08:e1:ff:80:0f:3e:0f:60:2e:52:95:f3:a4:d6:
                    04:c5:93:f4:ad:e5:85:88:a0:a5:9b:28:ca:fd:64:
                    f5:86:c4:d3:fc:9c:bf:68:ef:cb:5d:3d:cb:7b:ec:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:35:28:E9:4C:D6:F3:40:C2:B7:4C:9E:F3:47:A6:97:30:4F:87
            X509v3 Authority Key Identifier:
                keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/cg41KOlM1vNAwrdMnvNHppcwT4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         c7:20:b6:ff:69:fb:c1:d5:9a:67:56:19:1c:4f:b1:c0:82:4b:
         5f:a5:10:01:96:0b:a0:d9:72:99:92:81:f5:b6:17:98:91:4f:
         58:17:0d:c5:5f:a0:65:d4:9b:bd:a1:d1:af:ed:d2:bd:ed:f1:
         bc:5e:02:12:95:dd:64:da:d6:da:73:9b:c6:2e:91:59:7d:5a:
         60:5c:be:cf:78:10:3f:2d:f4:c4:4e:4e:3e:10:33:73:3e:77:
         98:9a:67:bd:57:f6:d8:01:ab:68:93:fe:8d:e4:17:c3:dc:7f:
         6e:5e:8d:69:f7:14:99:d3:0e:53:6c:1c:b4:ea:38:47:7f:78:
         ad:25:72:a6:4c:60:dd:b3:9d:51:c8:a4:ea:70:cd:94:aa:d7:
         e4:9a:f8:52:a4:d8:0f:85:2e:f0:ec:e4:ef:05:98:d1:e5:ff:
         ce:a2:00:d2:18:96:db:27:41:16:55:43:90:8e:3a:a5:02:fa:
         fc:74:26:6a:ba:78:a0:b4:b8:cd:bb:9c:28:e5:6b:5b:7f:b9:
         1a:90:1f:5c:59:01:e4:5a:f6:e5:1b:0d:eb:d0:ab:47:6a:44:
         dd:0a:09:56:d9:cd:1e:ff:a3:9a:4d:80:44:dc:16:21:20:b5:
         c4:dd:f3:3f:12:81:02:3a:a5:90:1f:d1:1f:93:97:7b:c2:31:
         8c:2f:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----