Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa
File:                     smxtunAvuwVl7VA4eJFp9OAuEeE.roa (raw, json)
Hash identifier:          vsm3kM5rrg0dXu1eTZs7BBtTYDRIipRLgFl8mbMMCgg=
Subject key identifier:   B2:6C:6D:BA:70:2F:BB:05:65:ED:50:38:78:91:69:F4:E0:2E:11:E1
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       018D4B823031C4E59F22882088067EE1A0A0
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa
Signing time:             Sat 27 Jan 2024 15:20:39 +0000
ROA not before:           Sat 27 Jan 2024 15:20:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204104
IP address blocks:        2a05:9080:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:4b:82:30:31:c4:e5:9f:22:88:20:88:06:7e:e1:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Jan 27 15:20:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b26c6dba702fbb0565ed5038789169f4e02e11e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:a7:e4:b9:b5:d9:c3:b6:ed:34:60:2f:54:
                    d7:29:61:b7:21:36:22:ea:a8:d4:e8:93:46:55:b4:
                    34:f1:dd:96:1d:c1:d2:20:27:d6:dc:06:54:1b:8e:
                    bc:28:3e:ef:99:c5:88:88:59:c4:fc:4e:68:03:7f:
                    17:56:0a:df:bb:18:d8:c9:a5:9e:4f:26:ea:e8:fa:
                    fb:6c:48:23:1f:e0:78:b3:ee:c0:e6:4b:82:5f:06:
                    af:91:40:19:a1:f1:e3:1f:f8:0c:14:ce:b9:dc:87:
                    6e:16:a1:e1:2f:3f:25:bf:84:3c:ee:cb:dc:bb:a2:
                    8a:29:78:88:62:08:72:a2:ee:91:8d:3a:f7:a9:2f:
                    d4:18:0d:f7:21:63:3a:85:5a:dc:af:a6:c7:ce:5c:
                    aa:4a:28:c3:f5:5b:d4:cc:a3:6e:1f:e6:77:c8:51:
                    b2:24:d7:fa:90:72:ea:fb:0e:af:78:a6:01:c3:f0:
                    96:84:97:3a:f7:3d:c9:31:ca:48:2c:8a:5e:a9:a7:
                    90:56:80:0e:fd:7e:92:18:c5:5f:6e:73:03:68:81:
                    90:44:67:4c:0a:3e:3c:91:8d:87:92:9a:86:12:d5:
                    f9:66:70:d3:de:97:c3:87:04:ff:eb:09:f9:a5:d0:
                    8a:ea:ae:74:a6:19:51:36:ef:93:2e:1b:96:a9:b1:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6C:6D:BA:70:2F:BB:05:65:ED:50:38:78:91:69:F4:E0:2E:11:E1
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9080:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:75:a9:94:0e:57:f4:0d:76:dc:44:26:c0:2a:89:56:bf:4b:
         6b:49:54:61:a6:7c:2a:07:51:ea:3e:3b:c2:5f:17:6f:6f:62:
         29:cb:79:0c:bb:f4:ed:4b:1c:eb:8d:3b:9f:6f:98:12:1e:44:
         4c:7d:69:89:f9:db:66:85:63:47:d8:de:08:aa:f6:96:cc:52:
         54:c2:b4:52:b6:3c:94:aa:28:b6:33:84:e3:3c:2d:9e:c1:b6:
         b0:73:1e:61:5c:f2:e3:58:99:60:ac:2e:b0:21:bb:e8:6e:c4:
         f6:db:2c:9b:a7:cc:05:d9:61:9e:6d:b9:8d:a2:dc:38:5b:2d:
         70:56:0d:34:26:4f:4f:3f:fe:b1:fb:10:0b:ac:c3:56:63:ca:
         1f:01:6a:14:e5:ca:cb:f7:2f:71:fd:27:ba:84:66:7e:cf:fa:
         a2:09:c8:8c:2f:b9:69:4b:2d:3d:cd:8c:a7:81:ba:52:e5:74:
         81:16:64:e1:31:46:63:f9:6d:0a:78:66:d7:be:b1:ff:fe:fb:
         01:6e:ce:0a:fc:41:1b:dc:81:b8:8e:5f:00:0a:d5:8f:8f:9b:
         e1:f5:d4:7b:ad:f5:38:1d:8f:a7:3c:86:fd:96:25:8c:95:91:
         30:a2:c0:fa:05:79:c4:e5:93:6a:ba:47:00:28:f9:b6:b0:ce:
         72:17:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----