Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa
File:                     Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (raw, json)
Hash identifier:          hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=
Subject key identifier:   36:0D:19:FD:8F:18:3A:A2:54:F9:A2:70:51:AA:2F:BC:49:74:B4:39
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       019420D59A95FDAA87D6DE4F0ADADDA2B635
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa
Signing time:             Wed 01 Jan 2025 07:47:37 +0000
ROA not before:           Wed 01 Jan 2025 07:47:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60033
IP address blocks:        2001:678:b5c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:9a:95:fd:aa:87:d6:de:4f:0a:da:dd:a2:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: Jan  1 07:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=360d19fd8f183aa254f9a27051aa2fbc4974b439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:53:e5:ae:e6:8e:87:ba:a0:8d:d0:5e:ab:
                    b8:55:90:9c:d9:c5:d9:a5:b5:2f:ba:d7:3a:b9:a6:
                    d3:92:4f:95:5b:4f:96:55:4e:ae:1e:39:4b:2d:b4:
                    2e:73:ac:5b:a6:77:33:b6:15:4f:e7:d2:4c:b4:26:
                    22:38:c5:41:1f:b8:ae:87:0e:ce:35:5a:72:8e:22:
                    da:7a:1d:77:e4:9d:3d:a7:a1:3e:bc:6f:69:a1:26:
                    83:11:37:07:47:b4:1f:2c:8c:37:19:90:26:be:f7:
                    57:b2:6b:f9:f8:32:75:d1:76:f5:d0:1b:c5:9b:16:
                    51:b0:40:f4:e0:99:d8:ed:66:2c:34:99:13:79:57:
                    f7:6d:8d:94:ea:a3:c0:98:a2:dd:82:09:58:b3:1b:
                    03:d2:07:5b:07:16:e8:f7:3e:01:eb:3c:7c:4a:70:
                    03:73:f5:9f:49:32:7d:16:76:27:8c:82:f4:9e:27:
                    8d:c1:a1:f0:2d:bf:f2:04:09:86:6e:3b:ee:df:72:
                    f6:9a:d3:1c:6d:c9:fb:82:7e:63:e1:b5:50:82:52:
                    ac:2a:33:7d:d9:62:b1:5d:aa:8f:67:21:63:61:6c:
                    8d:d8:7d:97:c3:27:15:81:84:1b:28:4c:13:2f:ba:
                    6e:fc:c2:62:7b:c4:84:9f:1c:0c:67:c9:b2:b4:02:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0D:19:FD:8F:18:3A:A2:54:F9:A2:70:51:AA:2F:BC:49:74:B4:39
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:33:93:f1:29:72:53:a5:64:2d:c9:3e:9f:4b:39:d7:61:
         3e:8f:ff:86:d8:47:f4:f0:ca:37:28:f6:38:72:32:04:79:41:
         92:20:06:45:80:40:38:cc:6d:f1:80:9b:cb:16:d7:96:f5:a6:
         7e:fb:d4:26:b6:a4:e0:f1:7e:b5:ec:88:cf:82:d3:b8:94:da:
         45:bc:ea:7c:0d:17:7c:b3:73:5f:5c:7a:25:ae:a9:25:f2:00:
         97:eb:80:df:97:a7:10:92:6d:7f:16:d6:fd:82:53:d0:77:e5:
         14:87:1b:cd:40:40:68:77:46:06:91:5e:5e:7a:06:aa:06:9d:
         53:11:83:a6:1b:5b:3a:fb:0c:e2:36:fa:84:ed:b2:f8:98:6d:
         4c:c5:cb:cc:f6:85:b4:ff:83:b1:00:7b:65:ce:92:ee:74:0d:
         60:1b:88:17:42:55:22:42:c0:f7:6c:f0:e3:c7:65:e7:68:40:
         57:e5:41:a4:f5:d3:9d:be:4c:5b:b1:50:5c:d1:af:21:08:c6:
         9f:54:c3:a6:f9:32:b9:ea:12:6e:62:c4:bc:90:ba:c9:27:cd:
         c0:93:25:fc:b5:52:42:e1:5f:b3:2f:26:91:13:64:e6:62:6f:
         88:bf:4e:04:2d:de:77:5a:f0:c2:a1:37:94:9b:35:cd:c0:1b:
         f2:0a:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----