Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/bRCOse-YwXmlb0_TSMXc_qYW3rA.roa
File:                     bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (raw, json)
Hash identifier:          WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=
Subject key identifier:   6D:10:8E:B1:EF:98:C1:79:A5:6F:4F:D3:48:C5:DC:FE:A6:16:DE:B0
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       019421B19D210C5764EAC026A1C118D37596
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/bRCOse-YwXmlb0_TSMXc_qYW3rA.roa
Signing time:             Wed 01 Jan 2025 11:47:55 +0000
ROA not before:           Wed 01 Jan 2025 11:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204915
IP address blocks:        2a02:4780:bad::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:9d:21:0c:57:64:ea:c0:26:a1:c1:18:d3:75:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Jan  1 11:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d108eb1ef98c179a56f4fd348c5dcfea616deb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:31:3e:38:6d:52:dd:c1:2d:dd:dc:17:1a:
                    56:06:2d:02:e0:82:d4:0e:0b:96:bc:1f:2e:28:ee:
                    54:8d:6c:c6:ca:42:b0:21:e3:17:fd:e4:9f:d1:c5:
                    8c:a1:88:9b:81:e3:2b:d4:d1:3a:65:16:27:4f:88:
                    7b:35:81:6d:d8:dc:33:c3:5f:fb:ae:a3:e0:6f:b7:
                    1b:f5:f5:62:0d:8a:5d:02:c1:57:d0:d6:dd:49:67:
                    b9:a8:45:a7:e8:02:08:36:a6:96:b8:07:8d:b2:ca:
                    27:b2:85:4f:95:dd:c6:4e:6c:37:96:72:02:82:00:
                    2e:05:a3:58:f5:a4:fa:6e:f2:5a:32:9f:6c:e5:5e:
                    e1:00:ce:d3:3c:2b:c1:0e:23:d2:8a:f1:43:e8:0b:
                    81:e9:e5:bd:1f:9c:df:d3:e5:ad:6d:bf:d4:62:25:
                    a1:bf:b9:e2:48:e7:5e:ea:74:45:c8:3a:ec:5b:d3:
                    68:c2:ec:5f:dc:c8:b0:d0:32:58:e8:a6:b4:58:69:
                    38:d8:fd:fc:2a:ff:a9:99:69:74:3d:fd:05:45:84:
                    fd:b9:b0:7f:f9:24:d3:cd:b5:8d:7e:59:0f:74:9f:
                    f8:ee:b2:d2:49:a5:bf:89:91:b4:94:28:46:f6:1c:
                    7d:fc:3d:40:00:fc:31:f8:8f:bb:fc:6c:e0:d3:44:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:8E:B1:EF:98:C1:79:A5:6F:4F:D3:48:C5:DC:FE:A6:16:DE:B0
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/bRCOse-YwXmlb0_TSMXc_qYW3rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:4780:bad::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:35:49:31:2e:fe:d9:fd:34:fb:21:80:e9:d3:d0:35:02:
         06:d1:7e:f8:17:5f:80:02:10:c6:17:97:84:69:a2:bd:9f:f2:
         2d:71:15:70:8b:8c:aa:52:46:64:5b:a4:9c:cd:f3:3e:c9:64:
         37:dd:a1:7b:6d:39:aa:36:2e:a5:82:ad:ac:51:5b:8e:0c:7a:
         3c:ba:95:da:90:5e:1c:ff:57:30:15:6a:07:8a:61:ef:9b:76:
         65:4a:42:2a:fa:72:e9:7b:1d:57:56:cc:4e:82:99:ad:79:32:
         b2:73:6b:58:ca:a3:0e:e7:1b:b5:b6:0c:d1:73:fb:70:4c:d6:
         0e:d7:72:f7:b7:a7:28:64:8c:34:dd:5f:80:e7:a3:35:8a:0b:
         dc:53:52:76:b1:74:20:45:b4:b0:e9:19:2f:54:15:d0:c7:42:
         4c:77:69:e0:31:23:bc:10:82:71:ad:04:0d:7c:e7:bb:e7:df:
         c4:71:3e:ee:8c:cb:36:eb:b5:a8:a9:9c:52:17:e6:70:9e:60:
         fc:34:27:0e:02:5a:62:ea:b7:37:4d:f4:eb:38:8c:3c:51:a8:
         8f:d8:f6:41:bf:13:6f:c5:c2:18:7a:77:62:b9:c7:03:47:6b:
         89:88:3f:7f:4f:78:4b:05:c4:dc:81:de:ae:90:07:6e:f7:fc:
         93:db:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----