Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/z6gRZQL9dktzDQCQibZshxDiKi4.roa
File:                     z6gRZQL9dktzDQCQibZshxDiKi4.roa (raw, json)
Hash identifier:          4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=
Subject key identifier:   CF:A8:11:65:02:FD:76:4B:73:0D:00:90:89:B6:6C:87:10:E2:2A:2E
Certificate issuer:       /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial:       0194244557CCB2115F80C4B81559CAF451CC
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/z6gRZQL9dktzDQCQibZshxDiKi4.roa
Signing time:             Wed 01 Jan 2025 23:48:31 +0000
ROA not before:           Wed 01 Jan 2025 23:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214469
IP address blocks:        2a13:9ec0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:57:cc:b2:11:5f:80:c4:b8:15:59:ca:f4:51:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
        Validity
            Not Before: Jan  1 23:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cfa8116502fd764b730d009089b66c8710e22a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:a7:f4:df:51:c5:47:4b:25:dd:a0:0f:5e:
                    28:39:fd:bf:04:1a:fa:e4:18:02:97:ca:8e:38:b6:
                    c8:e0:f1:ca:07:1d:0e:3c:e8:68:89:3f:51:90:e7:
                    9f:7e:1c:cc:28:1a:55:47:7b:da:9c:7d:67:61:7d:
                    45:f9:fe:bb:26:3c:f7:b0:e9:c7:29:c4:9b:e4:ac:
                    2d:61:35:42:52:90:bd:9d:21:6c:01:7f:c6:f6:d8:
                    52:65:2b:ef:0a:d3:1d:0a:00:4b:ef:6f:ba:ea:0d:
                    19:04:a3:99:da:af:ab:99:4b:d5:46:54:2b:0e:04:
                    d1:ee:40:c3:84:ad:94:5d:0c:76:04:d6:62:9c:c8:
                    9d:30:5a:e1:99:14:1d:16:84:00:bf:8f:26:14:c3:
                    22:34:b8:7d:92:f7:05:5d:c9:eb:8f:78:55:30:99:
                    96:60:df:d0:ef:92:5e:ca:05:68:69:5a:4c:40:5a:
                    e5:6b:d0:0f:e1:ab:4e:a0:cc:73:01:52:c6:ce:74:
                    a8:f8:b3:6b:7c:1c:d6:13:ed:cd:98:eb:4c:aa:ab:
                    8b:17:24:fd:33:9d:e0:1b:d0:53:d2:6d:8a:78:78:
                    cb:73:09:f8:e9:57:f5:95:23:de:5f:5d:bd:f6:a9:
                    6e:32:f5:2d:10:53:77:39:a2:2f:d4:50:49:7f:0e:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:11:65:02:FD:76:4B:73:0D:00:90:89:B6:6C:87:10:E2:2A:2E
            X509v3 Authority Key Identifier:
                keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/z6gRZQL9dktzDQCQibZshxDiKi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:aa:26:06:25:7b:38:25:30:cd:c9:3f:0c:42:bf:8d:e9:
         d1:3f:d4:e1:e0:1d:3b:60:e4:9c:78:9c:59:c0:bf:5e:44:54:
         e2:20:76:b1:25:14:ad:fc:67:d0:39:60:31:a1:5c:27:ca:ea:
         32:a1:75:72:e5:c4:83:d6:e1:37:ff:20:dc:6c:6d:2c:e6:67:
         02:1f:83:66:59:f9:51:54:1d:6e:8a:c5:62:73:6b:de:ad:8b:
         35:15:eb:10:aa:ca:b9:ab:44:98:03:75:d8:ce:6f:6b:16:6a:
         f4:0b:3b:57:fd:ed:07:25:7f:06:58:b8:83:5e:9c:82:e8:fd:
         1d:23:29:18:43:72:f6:f2:a3:74:f7:07:4d:a6:3d:48:98:26:
         ac:1b:45:46:e3:6e:18:28:7a:1e:98:5e:1c:b9:64:33:b4:63:
         9d:df:05:a1:e1:09:46:ec:48:88:3c:ea:ea:18:d5:de:ee:49:
         dd:b8:1d:0c:f8:2f:ee:78:2b:64:e4:e7:d9:e6:b7:b3:f4:62:
         bc:37:c7:23:dd:96:6d:22:f4:d5:3f:82:49:f7:6d:c0:3c:83:
         18:11:6b:0f:c7:84:e0:fb:d2:61:f9:d3:1d:9b:66:ab:5c:b3:
         90:3f:de:75:08:53:21:62:74:ee:a6:6f:2a:f7:e2:17:46:00:
         09:30:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----