Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TIXlkFRgn5qDeTU5GPtZw50sFgg.roa
File:                     TIXlkFRgn5qDeTU5GPtZw50sFgg.roa (raw, json)
Hash identifier:          StUjGKW5A9Vqz9JKMfVvVB0iqJDXj37ZwmT9ma7BuAQ=
Subject key identifier:   4C:85:E5:90:54:60:9F:9A:83:79:35:39:18:FB:59:C3:9D:2C:16:08
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       01941F8C61F89242574406FE1CD0F4A5978E
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TIXlkFRgn5qDeTU5GPtZw50sFgg.roa
Signing time:             Wed 01 Jan 2025 01:48:01 +0000
ROA not before:           Wed 01 Jan 2025 01:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3356
IP address blocks:        2a06:6540:2002::/48 maxlen: 48
                          2a06:6541:2002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:61:f8:92:42:57:44:06:fe:1c:d0:f4:a5:97:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jan  1 01:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c85e59054609f9a8379353918fb59c39d2c1608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:18:ad:37:79:91:c3:ad:f3:32:da:8e:e9:
                    8e:8e:97:59:6f:a9:57:16:8b:61:c5:6b:c0:5b:86:
                    2f:68:b5:df:0d:55:a6:e8:11:38:13:3e:df:68:73:
                    6c:b3:af:6c:cf:9f:d1:af:5f:d6:1a:d9:6e:4e:01:
                    65:28:cc:e1:ce:2f:60:26:ad:71:c9:3d:f9:2e:86:
                    15:fd:57:35:7d:1f:5a:9f:5c:1d:fa:00:c3:8c:42:
                    54:cc:47:68:7b:92:de:36:b5:06:98:90:a8:77:4d:
                    cc:ed:4b:ec:f8:fa:ce:0d:83:dc:d1:6f:92:f9:66:
                    9b:95:d6:86:fc:df:5d:38:87:a6:13:b8:72:c8:26:
                    05:27:58:a3:61:ae:66:ac:f8:c6:0f:67:01:7f:f4:
                    14:6c:dd:ff:d9:f9:86:c5:40:94:a2:53:d4:57:cf:
                    6b:45:b5:27:d6:34:34:28:e4:8b:75:65:5a:dd:de:
                    57:f8:4d:b7:52:1b:f3:2f:22:fb:85:7c:5d:8c:88:
                    37:2f:04:69:fa:5c:54:ca:f1:f3:bc:2f:29:f1:e3:
                    1e:f8:fb:30:71:40:29:5a:60:19:c5:8b:09:5b:71:
                    3b:9a:04:99:7d:b6:d5:b8:bb:a9:0f:00:cb:9b:41:
                    af:f7:15:17:40:77:5c:6e:6e:80:05:7e:47:af:24:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:E5:90:54:60:9F:9A:83:79:35:39:18:FB:59:C3:9D:2C:16:08
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TIXlkFRgn5qDeTU5GPtZw50sFgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:6540:2002::/48
                  2a06:6541:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:32:60:1b:55:ca:54:4a:71:9d:b5:55:5a:46:ba:82:b1:83:
         fa:41:8e:22:fb:4a:05:20:2b:f7:d0:61:93:86:62:86:7a:dd:
         3a:e5:ea:b5:57:72:82:68:30:c7:d4:e3:65:9a:48:04:28:e8:
         7e:03:47:f7:7e:5b:8e:d0:e1:3b:f5:6a:ec:5a:70:e4:a1:81:
         7d:98:b6:53:06:6d:22:fa:bd:51:e1:0e:4e:f3:71:ee:06:68:
         2e:c3:12:9c:cf:f8:b3:ac:14:e0:96:15:00:29:f9:95:6c:04:
         da:ee:e2:c6:91:6d:f6:a4:25:93:0d:da:3d:c2:bc:d7:dc:56:
         8e:15:8b:a9:52:6a:c9:17:e5:56:7b:ec:ad:89:c8:40:b0:c7:
         fd:e6:52:b4:e6:fc:d8:54:f2:09:cf:cc:6c:34:63:55:d1:6b:
         2b:f8:e1:4d:28:10:72:be:43:7b:85:71:e7:94:16:ea:f3:10:
         80:a7:ac:b2:45:f1:45:48:ea:1b:f6:ef:92:63:64:d7:75:33:
         52:f0:f1:61:26:c7:5a:9a:04:6e:75:d1:bf:fd:61:0a:a7:bd:
         fc:69:19:0c:0b:d2:3a:88:a6:b0:85:88:ee:01:5f:98:a5:27:
         59:cc:9c:b3:66:38:0c:c2:b0:5c:57:31:74:20:81:5f:df:47:
         af:6f:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----