Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/fIVXLAJ-WfUWTK0Q6m6RjR0bJRE.roa
File:                     fIVXLAJ-WfUWTK0Q6m6RjR0bJRE.roa (raw, json)
Hash identifier:          TiUQz40YHGuI0vSCyvsQ/P34mm4y28flRVcycV/qaug=
Subject key identifier:   7C:85:57:2C:02:7E:59:F5:16:4C:AD:10:EA:6E:91:8D:1D:1B:25:11
Certificate issuer:       /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial:       0194221FE13808D22B56499F82C8FF58A7CB
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/fIVXLAJ-WfUWTK0Q6m6RjR0bJRE.roa
Signing time:             Wed 01 Jan 2025 13:48:22 +0000
ROA not before:           Wed 01 Jan 2025 13:48:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0d:b9c2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e1:38:08:d2:2b:56:49:9f:82:c8:ff:58:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
        Validity
            Not Before: Jan  1 13:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c85572c027e59f5164cad10ea6e918d1d1b2511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:64:2d:48:54:a8:f2:1e:37:69:55:78:96:
                    c1:d5:f4:14:87:07:69:8d:bc:a3:ac:f7:0b:29:be:
                    3a:98:7b:06:e1:cd:c7:7e:f3:d7:21:c3:11:b0:91:
                    ac:33:80:1b:ad:f2:30:45:82:a3:9d:4d:e2:7a:75:
                    64:d3:28:dc:78:0c:a5:f4:09:5b:16:3e:27:bf:bc:
                    d8:8c:31:bc:e3:a7:df:27:36:85:81:c7:65:f2:59:
                    be:23:7b:b8:21:df:c5:3c:d3:fc:79:08:ad:2f:b0:
                    97:f9:27:e2:c4:61:b1:3a:62:24:e6:cc:61:ef:53:
                    cf:9d:9e:92:3e:87:05:64:bd:e5:67:9b:a2:44:fc:
                    34:3c:5f:26:24:15:d0:e3:b2:4c:3d:e2:72:dc:bc:
                    ae:0e:29:a7:5c:2a:86:e7:ab:a3:79:5f:3c:67:b2:
                    2f:57:22:e3:09:57:16:01:a2:dd:40:21:04:b3:df:
                    b9:d0:ed:30:7b:3d:6b:55:4f:ab:c7:79:26:85:58:
                    3a:84:a0:31:fb:9b:8b:82:a8:82:fe:db:a0:3a:9b:
                    55:24:f7:c4:15:38:d8:2a:2b:f8:91:be:3e:67:80:
                    01:1e:9a:de:f9:7b:23:86:e8:ce:91:be:7f:92:57:
                    e9:11:98:2b:43:ed:27:34:55:d2:f5:6f:db:63:e9:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:57:2C:02:7E:59:F5:16:4C:AD:10:EA:6E:91:8D:1D:1B:25:11
            X509v3 Authority Key Identifier:
                keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/fIVXLAJ-WfUWTK0Q6m6RjR0bJRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:b9c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:43:ef:5d:30:0a:0b:bb:27:e9:d6:80:32:89:22:4a:8f:
         35:01:01:9b:66:38:72:9f:1a:b0:5d:61:17:c3:fd:f5:f0:8e:
         2b:34:eb:7d:ac:23:a3:7d:b6:a4:98:d6:68:e0:97:a5:27:96:
         47:f1:4e:47:e9:cc:73:37:dd:21:f8:f2:9b:d5:e9:3b:a5:3a:
         19:72:4e:87:32:2c:b1:1d:75:0a:43:9b:be:62:f0:ac:ca:20:
         4b:0d:41:f7:be:89:7f:5c:67:38:ca:86:8d:d8:15:cc:e7:9e:
         da:99:93:81:53:db:9d:b9:86:6f:16:63:1d:ed:ce:ad:24:7e:
         fb:15:9c:dc:3f:2b:4b:49:88:9c:26:ee:b3:8b:ce:15:37:a2:
         88:38:db:a9:e5:6e:ab:45:cf:85:62:6e:48:fb:32:84:32:ed:
         d3:0b:40:5c:be:ba:44:12:bd:3e:48:64:ed:03:69:26:4b:90:
         29:62:e3:3d:d1:94:e8:bd:94:00:37:58:12:23:00:be:1c:ba:
         f4:21:46:50:d5:4b:52:f0:2f:98:29:b4:2a:5c:39:9d:eb:76:
         26:21:f2:af:c6:d4:a5:8a:82:29:fb:a1:b8:01:9f:b0:80:e8:
         21:18:d3:a8:82:bf:26:c3:ba:8b:1d:67:d2:2f:55:27:5e:ec:
         67:94:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----