Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EgiX64_w7NCgPEk5IR6_1lKUsC8.roa
File:                     EgiX64_w7NCgPEk5IR6_1lKUsC8.roa (raw, json)
Hash identifier:          BXY7U8NV0/yIHGRcAaKUi9ufycYkIS44o3cNWTyaK8Q=
Subject key identifier:   12:08:97:EB:8F:F0:EC:D0:A0:3C:49:39:21:1E:BF:D6:52:94:B0:2F
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       0193ACDCA9F6362EE3EDB306AE7374CDDFCB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EgiX64_w7NCgPEk5IR6_1lKUsC8.roa
Signing time:             Mon 09 Dec 2024 19:19:22 +0000
ROA not before:           Mon 09 Dec 2024 19:19:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213220
IP address blocks:        2a11:e9c3::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ac:dc:a9:f6:36:2e:e3:ed:b3:06:ae:73:74:cd:df:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Dec  9 19:19:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=120897eb8ff0ecd0a03c4939211ebfd65294b02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:35:12:9f:b6:d2:ba:91:ee:b1:97:fb:27:
                    79:9a:b8:9e:41:bd:fc:26:24:1e:73:ec:51:7d:f3:
                    f3:d4:03:c6:6b:f9:9e:69:ec:0f:de:89:9b:4f:e6:
                    85:2d:a7:2a:35:a3:e0:d2:e1:4a:92:82:42:70:58:
                    cf:3b:31:0b:03:34:d2:4d:70:9d:bf:a7:84:bd:c6:
                    12:d8:e2:a4:ad:33:f4:55:59:a2:fb:34:34:a9:6e:
                    d5:dc:19:e0:d2:41:6d:ea:1e:d0:db:6d:92:1c:a3:
                    45:ff:2e:84:0d:82:27:ea:be:4c:ab:3e:fa:a1:e4:
                    50:0e:75:94:bf:90:95:28:df:12:a5:70:d2:f8:c7:
                    1d:fc:ed:b1:26:4d:6a:2d:56:9e:d7:fb:5b:7a:10:
                    1a:05:e3:e1:37:6b:14:6e:01:d8:a7:a1:9f:92:06:
                    86:6e:b5:a6:48:ff:21:94:3f:80:77:41:c5:ec:fa:
                    98:5a:2d:55:49:6d:89:11:5d:92:7e:d1:bf:69:a9:
                    af:c5:b6:7e:9f:b8:7e:48:26:29:36:48:90:73:3d:
                    f5:dc:f7:45:f5:4b:8b:72:bb:92:2b:68:2e:20:29:
                    c4:b8:f8:7b:3c:db:2f:d0:7c:38:f4:de:14:2a:e9:
                    c4:5a:a5:12:fb:d4:23:14:97:cc:7e:07:71:6a:0b:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:97:EB:8F:F0:EC:D0:A0:3C:49:39:21:1E:BF:D6:52:94:B0:2F
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EgiX64_w7NCgPEk5IR6_1lKUsC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:e9c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:06:34:12:65:c0:ae:68:c1:d4:58:30:10:db:5b:9d:ab:c0:
         db:e8:b1:c6:32:91:65:d4:06:81:a4:fa:56:57:d0:b8:e4:cc:
         ea:48:be:c3:cd:09:8b:77:e0:a9:38:a2:4e:49:b1:7e:c4:ac:
         40:d4:0f:2f:63:3f:88:8e:fe:f6:44:fc:24:f7:e3:c9:52:a7:
         9e:7b:9a:a2:07:d2:42:2a:d4:02:27:aa:3c:3d:f9:b4:45:05:
         d0:ec:8f:ea:1b:3d:96:c4:49:62:e4:0e:3a:4c:61:b4:2d:79:
         95:65:ee:7b:0b:8c:34:b6:c3:ff:31:d8:43:e6:69:57:9b:ee:
         c5:cc:0d:2e:3e:9c:05:56:d2:24:65:6e:5c:c9:23:a7:37:57:
         e0:48:a5:92:ea:49:16:e9:a8:98:50:ae:df:d5:30:f5:85:e3:
         2a:67:4f:33:73:39:85:e7:74:dd:85:d1:86:a4:68:48:65:57:
         e9:16:71:8b:bd:a2:03:fe:e4:b2:1f:92:e6:28:82:1b:07:64:
         35:b5:8f:6a:48:28:f6:4d:5f:9b:b1:5c:c9:27:43:8d:df:36:
         82:9f:06:64:b0:a7:f1:19:dd:d9:f8:ef:40:b1:cf:73:37:ab:
         b8:8b:44:41:4c:fa:e1:05:b4:8a:2c:2c:a3:20:d8:f3:39:36:
         42:72:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----