Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa
File:                     Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (raw, json)
Hash identifier:          6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=
Subject key identifier:   5E:3D:E8:54:C5:02:B7:4D:6E:F1:81:64:82:A3:F6:5C:DC:4D:39:87
Certificate issuer:       /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial:       01942521B33BA6C341B80CAB8B188E361DA0
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa
Signing time:             Thu 02 Jan 2025 03:49:13 +0000
ROA not before:           Thu 02 Jan 2025 03:49:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     33988
IP address blocks:        2a04:f500::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:b3:3b:a6:c3:41:b8:0c:ab:8b:18:8e:36:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
        Validity
            Not Before: Jan  2 03:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e3de854c502b74d6ef1816482a3f65cdc4d3987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:e3:ae:0c:d3:c6:08:82:c0:55:4b:50:6f:
                    ae:1a:b2:5b:9e:e1:00:16:18:50:b9:9b:fe:98:ea:
                    d8:32:4b:12:dd:44:71:8e:aa:e5:c7:cd:68:ee:b4:
                    f9:0e:e4:3c:d5:cc:7b:e6:0f:ee:0a:a0:03:d7:0f:
                    e5:1a:5d:0c:00:cf:24:14:06:5c:96:4c:3d:cd:3d:
                    80:37:f8:73:30:09:47:b0:31:17:41:27:c5:01:7b:
                    15:b5:bd:0b:8a:11:00:61:f5:ba:a0:6e:f9:99:0f:
                    b4:a3:31:45:36:05:64:fa:8b:60:45:69:5d:78:d2:
                    05:32:46:52:6d:6f:13:6e:d4:22:70:49:23:ba:67:
                    28:3c:14:4b:9f:92:fd:4f:3b:16:aa:e8:f9:e9:9a:
                    43:f2:49:28:77:12:9f:c4:44:51:af:29:79:93:b5:
                    52:ec:fd:ec:60:4d:ef:76:63:e7:4e:ea:c5:e8:4c:
                    97:0e:0e:8f:48:e7:e1:a2:a0:04:18:43:b0:5f:b6:
                    f4:04:23:00:0d:d3:9d:58:8b:a3:ed:cb:dd:c4:26:
                    94:b1:9c:e1:cf:33:7e:46:80:8a:61:04:93:52:3d:
                    86:49:af:ab:11:68:f5:3f:72:8c:62:b1:04:21:95:
                    4e:08:83:b6:7b:22:6b:c3:86:17:0b:ad:df:98:0c:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:E8:54:C5:02:B7:4D:6E:F1:81:64:82:A3:F6:5C:DC:4D:39:87
            X509v3 Authority Key Identifier:
                keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:f500::/29

    Signature Algorithm: sha256WithRSAEncryption
         df:89:7a:29:36:28:e1:b9:74:41:41:48:ee:1f:7d:e3:f7:a4:
         3f:f0:50:ad:b3:77:ef:ba:47:be:58:45:6a:fa:19:86:bf:5f:
         ef:07:ac:e9:55:fe:6b:4c:94:bf:5a:2c:5e:fa:88:7b:86:7e:
         26:65:e6:cb:af:2f:3a:6f:8c:df:e2:4e:49:08:3e:ec:0b:8f:
         c2:d1:ef:03:f5:f2:b8:16:1f:96:a5:02:0c:56:ef:da:f3:06:
         b3:a6:7a:94:9c:e5:e7:aa:fa:f7:af:69:b4:d4:4f:2b:df:87:
         26:c1:c2:66:53:e7:0f:25:4a:20:12:65:3d:60:e1:92:11:33:
         a9:5c:73:39:fb:d4:d3:ad:5e:ce:08:c6:2d:2b:2f:a0:64:df:
         e7:a3:f6:97:1c:3c:d2:f9:96:9a:a5:a4:85:0b:71:4b:f9:02:
         fb:57:3d:dc:91:74:a2:09:db:6e:ee:a4:85:70:ac:90:dc:c2:
         45:90:7c:9d:96:ea:83:1b:6c:80:b5:1c:17:4a:b6:46:3f:82:
         d8:b4:35:83:3c:0d:05:eb:02:e1:2a:eb:60:f4:99:73:8f:39:
         ff:84:fe:17:24:39:81:c2:4c:d0:5e:8d:9e:b9:3d:77:b8:b4:
         21:fd:69:56:0f:19:e3:cd:45:b5:ba:48:d2:1c:32:87:0b:4d:
         74:d9:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----