Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/YwzWinKJc46_U8FICjJOYyamFbE.roa
File:                     YwzWinKJc46_U8FICjJOYyamFbE.roa (raw, json)
Hash identifier:          6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=
Subject key identifier:   63:0C:D6:8A:72:89:73:8E:BF:53:C1:48:0A:32:4E:63:26:A6:15:B1
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       01956BE673EF6CC8F785CD0D2EB61C130701
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/YwzWinKJc46_U8FICjJOYyamFbE.roa
Signing time:             Thu 06 Mar 2025 14:40:19 +0000
ROA not before:           Thu 06 Mar 2025 14:40:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205745
IP address blocks:        2a01:64e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6b:e6:73:ef:6c:c8:f7:85:cd:0d:2e:b6:1c:13:07:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Mar  6 14:40:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=630cd68a7289738ebf53c1480a324e6326a615b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:ad:1f:d9:3c:53:3c:4e:b8:03:f7:ad:9e:
                    c1:13:0b:ec:ee:6f:dc:d0:a1:59:17:1c:4a:1b:34:
                    d9:be:07:f3:73:74:87:0f:50:17:d8:54:42:21:a6:
                    f0:c9:ac:56:dc:02:2a:8e:f9:c8:89:08:c4:a0:e0:
                    97:1e:14:60:16:7b:4e:63:77:22:db:d7:96:22:3b:
                    06:38:c2:9c:5c:ac:e3:54:ac:b4:e1:7a:f6:07:81:
                    df:13:ec:1d:a9:21:36:14:4d:d1:14:b2:f8:bd:ef:
                    1d:10:74:0f:f1:39:13:62:0a:93:89:c3:2b:03:8e:
                    c1:c9:05:37:34:75:9d:24:d7:57:37:19:f0:11:55:
                    21:17:f2:90:08:e0:ea:b8:fb:8f:5c:41:06:f6:70:
                    43:15:d4:3d:7c:4d:e6:47:a3:bc:08:88:3b:04:02:
                    cd:f7:04:d1:13:57:bc:37:c8:66:15:1d:b1:ff:71:
                    46:11:94:0e:02:fe:84:ab:ee:25:b8:45:0c:64:75:
                    73:72:ef:64:84:21:37:6f:ac:f6:7e:99:1e:56:15:
                    c2:06:69:59:0f:db:72:ae:59:86:c4:99:ca:0a:15:
                    a9:25:56:6c:0b:b4:90:4f:b2:ae:5f:b1:fa:66:1c:
                    38:30:73:3b:c5:4a:3d:4c:7d:ab:b9:34:0e:e8:32:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0C:D6:8A:72:89:73:8E:BF:53:C1:48:0A:32:4E:63:26:A6:15:B1
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/YwzWinKJc46_U8FICjJOYyamFbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:64e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:50:29:f2:d7:9e:33:e0:ac:bd:17:d5:ee:cc:11:b2:82:e4:
         f6:fb:09:a7:d0:47:41:79:62:be:65:c0:77:3b:f8:0a:ce:7b:
         20:a5:78:32:25:01:31:ec:ec:fe:0d:d6:37:64:a2:66:73:52:
         8b:55:d7:b4:4d:ac:b3:9c:45:cb:98:54:8e:3f:67:26:11:b4:
         97:dd:58:85:eb:88:dd:52:ae:47:85:83:54:9c:16:ff:27:ba:
         23:05:7b:bb:21:37:5f:c0:23:a6:d6:2d:5d:2e:9d:1b:c8:04:
         ef:96:5c:fd:de:0e:7a:bf:96:c1:ee:73:4a:57:44:cb:96:24:
         91:95:44:a5:5e:58:6e:59:a6:9b:c8:55:e1:15:52:b4:cf:7c:
         76:42:9f:0b:a7:14:12:af:67:81:22:03:94:c0:85:89:4e:13:
         cc:75:40:6b:cc:75:84:06:ac:3f:70:39:20:1c:9d:5a:85:9b:
         93:47:9d:54:81:b8:5d:29:03:08:a2:c0:b9:00:01:da:30:a7:
         78:b0:e2:f6:a8:5b:e1:e4:8b:b4:22:75:b4:20:3b:1c:93:e3:
         44:a6:34:69:f2:3c:e7:e1:90:7e:3a:71:a8:07:2c:8a:61:39:
         93:37:f8:9b:a8:78:10:80:fb:9d:54:90:db:b3:6b:a2:4d:01:
         f6:e1:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----