Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/e-gDJNXzm0Ybkz_ors_9mzoknFc.roa
File:                     e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (raw, json)
Hash identifier:          EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=
Subject key identifier:   7B:E8:03:24:D5:F3:9B:46:1B:93:3F:E8:AE:CF:FD:9B:3A:24:9C:57
Certificate issuer:       /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial:       0194E1726E226A1BAD84E34EF714494D6AF1
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/e-gDJNXzm0Ybkz_ors_9mzoknFc.roa
Signing time:             Fri 07 Feb 2025 17:26:00 +0000
ROA not before:           Fri 07 Feb 2025 17:26:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213452
IP address blocks:        2a0a:8f80:4155::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:e1:72:6e:22:6a:1b:ad:84:e3:4e:f7:14:49:4d:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
        Validity
            Not Before: Feb  7 17:26:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7be80324d5f39b461b933fe8aecffd9b3a249c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:0d:75:3b:4f:7e:17:83:19:97:1f:bc:ff:
                    77:1d:27:18:d4:94:2f:f0:76:8f:e4:bd:40:e6:e9:
                    af:15:2e:e6:f4:06:26:01:c5:97:da:06:86:53:6b:
                    3f:07:e0:4a:57:2a:0e:51:3d:c3:9e:cf:5f:9f:97:
                    ea:61:5e:67:a4:10:3a:b3:4a:87:30:e5:cd:4a:64:
                    97:43:96:7e:9f:8e:0e:73:7f:93:13:48:7b:29:4e:
                    db:e6:9a:30:bf:18:8a:73:d1:4c:46:91:d7:3c:0f:
                    b9:58:6e:65:49:d9:06:40:3b:9f:18:aa:52:04:72:
                    c5:3c:a6:55:92:c2:bc:16:db:9a:0f:79:7b:94:5e:
                    21:b9:2f:3e:44:23:bf:7e:45:2a:ac:5f:7d:b7:70:
                    41:fa:ef:35:d9:96:32:ff:1e:48:07:71:7e:bc:f8:
                    90:10:af:a6:b2:d4:ea:65:3b:95:37:32:f2:08:1a:
                    e6:68:12:ef:3f:26:9b:46:58:27:cd:f5:ac:73:c1:
                    43:b3:a9:79:47:7a:11:dc:5e:1f:c2:c9:6b:68:cc:
                    6d:b4:21:08:77:f6:18:f9:2d:50:bc:b4:de:f6:e0:
                    dc:c6:85:f9:15:5c:03:c4:33:7c:1d:9a:4e:fa:fc:
                    7c:53:64:a5:75:b7:af:4e:92:40:1b:8f:6a:e2:09:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:03:24:D5:F3:9B:46:1B:93:3F:E8:AE:CF:FD:9B:3A:24:9C:57
            X509v3 Authority Key Identifier:
                keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/e-gDJNXzm0Ybkz_ors_9mzoknFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:8f80:4155::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:2e:d2:69:c9:84:6e:fe:c2:bb:47:af:de:49:8c:7b:1f:
         2b:2c:62:c8:0c:6a:e3:a7:97:7f:40:04:b5:4b:30:5c:1a:01:
         80:d6:e2:dd:25:4f:c4:0b:a4:b9:ae:cc:d2:9f:06:90:35:49:
         e8:70:c5:d3:f1:a0:d8:3e:68:d1:e4:9e:cf:3e:a6:7c:ea:aa:
         dc:40:ed:d8:0c:61:ae:40:45:f3:35:ae:aa:3c:73:54:50:c1:
         1d:d2:5a:22:df:9a:40:d0:12:04:39:da:f3:1b:5d:80:92:87:
         24:43:2d:09:d2:2d:8c:96:30:20:e9:97:2b:60:ee:c1:78:50:
         00:7d:bd:ba:53:29:8b:0f:39:be:34:63:e1:31:2f:32:94:86:
         b4:17:93:ea:15:c8:6d:6e:d7:6c:b8:db:d6:82:ca:ba:0e:1c:
         72:3f:d2:42:77:14:a8:c6:71:ca:90:46:24:e1:d4:39:9f:e5:
         c5:0e:33:fd:d8:c4:f5:3c:c0:14:b7:89:5f:da:8d:78:88:84:
         dd:c5:bb:e9:ac:10:72:f0:b8:3d:f7:c9:50:19:ad:fe:d6:c9:
         2c:29:7c:c6:87:ab:65:6b:d6:64:62:66:13:08:be:ca:f7:55:
         06:ff:75:aa:41:6e:40:b9:9d:00:63:06:6b:9f:fc:7e:58:a7:
         e9:ab:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----