Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/9PgT8am9GX2lNTUWeiRs0LXntY0.roa
File:                     9PgT8am9GX2lNTUWeiRs0LXntY0.roa (raw, json)
Hash identifier:          X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=
Subject key identifier:   F4:F8:13:F1:A9:BD:19:7D:A5:35:35:16:7A:24:6C:D0:B5:E7:B5:8D
Certificate issuer:       /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial:       01962B547DA371C05480CAC808DD0A6139F9
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/9PgT8am9GX2lNTUWeiRs0LXntY0.roa
Signing time:             Sat 12 Apr 2025 18:47:59 +0000
ROA not before:           Sat 12 Apr 2025 18:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48771
IP address blocks:        2a12:3fc0:4877::/48 maxlen: 48
                          2a12:3fc7:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:54:7d:a3:71:c0:54:80:ca:c8:08:dd:0a:61:39:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Validity
            Not Before: Apr 12 18:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f4f813f1a9bd197da53535167a246cd0b5e7b58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:df:b8:01:db:19:a0:7f:ad:56:ea:5d:2a:
                    a2:3b:e9:30:44:90:45:7c:96:6b:72:3c:7f:ab:a5:
                    79:a3:92:a9:22:c8:38:16:07:0a:80:fe:d6:1a:a0:
                    ff:e3:3f:ab:79:c7:36:1b:f0:5f:23:fc:e1:60:ef:
                    7d:6e:1f:55:c8:96:4f:c4:9c:2b:61:72:21:1e:16:
                    d7:64:4e:8e:db:5f:d2:e5:15:fa:c2:03:30:01:9b:
                    f7:48:c9:81:67:a3:bb:cc:ab:8e:1e:12:af:56:a9:
                    07:42:55:fe:62:eb:93:0e:42:7f:4f:83:54:15:14:
                    76:d1:80:6c:d3:c4:ea:02:69:06:56:eb:58:45:fd:
                    87:e0:a6:17:d7:35:e2:c8:1c:48:09:e7:20:99:9c:
                    59:31:72:b8:61:9c:05:e4:d0:cd:ad:68:9d:bd:1f:
                    48:10:12:4e:31:7b:90:a3:f3:25:01:12:23:c7:9c:
                    50:71:90:fd:5a:bf:9c:74:ef:00:49:93:f2:c1:7d:
                    83:fe:77:e0:76:1d:66:b1:c8:96:91:a7:f7:9f:46:
                    d6:93:ce:44:28:c1:fc:5c:cc:90:e5:0d:79:8c:d2:
                    a6:86:9e:e7:8c:5a:f1:b9:f5:d7:ac:2f:6e:4c:e2:
                    25:2a:65:8f:85:aa:49:00:ec:e6:33:c0:7d:bc:d0:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:13:F1:A9:BD:19:7D:A5:35:35:16:7A:24:6C:D0:B5:E7:B5:8D
            X509v3 Authority Key Identifier:
                keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/9PgT8am9GX2lNTUWeiRs0LXntY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:3fc0:4877::/48
                  2a12:3fc7:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:74:d9:e4:bf:62:4d:0d:f1:95:ee:84:1d:c8:56:05:89:a8:
         21:e4:28:bc:25:05:a9:c8:dc:70:e1:87:28:62:ca:ed:73:c4:
         f1:2b:ec:b2:46:63:b4:86:62:6d:1f:92:5b:95:40:de:4e:54:
         77:2e:2e:0a:71:b7:7a:2e:6b:35:54:8e:c5:b9:a8:66:bc:9a:
         b7:73:e0:3f:64:f1:aa:9e:e7:7f:db:16:66:df:97:fd:4c:b3:
         dc:4f:c2:a3:1e:39:f3:a0:9a:1f:a1:4e:89:00:22:c3:06:b9:
         d4:0e:e7:dc:06:dc:85:ba:58:34:d5:7b:81:fd:d6:26:9b:5d:
         2f:27:44:b7:6a:60:85:5a:78:11:39:49:e3:cd:d9:12:fd:2a:
         4d:b6:70:30:ee:bb:03:66:89:d2:b1:de:ab:77:7f:f5:05:35:
         05:36:7b:22:fa:17:d5:30:03:90:ca:aa:d2:37:da:d3:bf:cc:
         95:5b:e7:04:0c:e1:16:df:e7:57:ac:e2:a6:67:f1:db:69:1f:
         8b:bd:64:8d:95:1e:27:1d:af:8a:96:78:b1:ed:fc:85:8d:e8:
         f9:cb:2c:92:1e:81:92:47:c5:c6:92:44:8e:03:76:9a:dc:1c:
         30:ee:07:87:e8:e7:c0:ce:6f:52:0c:70:3a:16:89:92:0a:5d:
         7d:19:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----