Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa
File:                     cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (raw, json)
Hash identifier:          dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=
Subject key identifier:   73:28:DF:02:7D:ED:BF:C6:56:0F:64:2A:75:91:2D:C7:72:E5:74:68
Certificate issuer:       /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial:       019593901B8E424FD20EEBDC8D3EA291C96B
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa
Signing time:             Fri 14 Mar 2025 07:30:49 +0000
ROA not before:           Fri 14 Mar 2025 07:30:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208344
IP address blocks:        2a01:ff00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:93:90:1b:8e:42:4f:d2:0e:eb:dc:8d:3e:a2:91:c9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
        Validity
            Not Before: Mar 14 07:30:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7328df027dedbfc6560f642a75912dc772e57468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:a6:d5:ec:2b:28:d0:32:ef:a9:91:c8:ef:
                    80:61:72:24:ec:96:9d:61:d4:4a:1f:2e:4d:ad:e1:
                    5f:4c:8f:de:c4:91:6f:60:69:1b:eb:cc:7c:99:a5:
                    5e:4a:8b:d6:59:74:c2:c4:61:8b:fd:82:45:18:f0:
                    22:5b:79:15:62:66:22:99:2d:50:52:c9:a9:57:29:
                    48:f4:64:e2:16:72:a7:08:37:c3:2e:3b:5d:28:f8:
                    b9:02:a4:20:67:32:fb:b0:6e:85:19:75:b3:c0:7f:
                    75:3e:eb:22:b4:8e:62:3b:34:57:17:2e:3a:a7:56:
                    e4:4a:6d:87:d3:13:56:81:9b:b4:05:99:3b:cf:e0:
                    f0:cd:b4:5a:ac:a8:d9:c7:00:79:92:33:43:8f:90:
                    10:72:bf:53:5f:a6:9f:82:36:95:88:e5:c2:c0:80:
                    36:f0:28:41:70:69:d5:41:86:43:71:9c:77:70:7c:
                    9e:39:c8:5a:b2:ac:5b:d3:fc:77:4a:37:cd:43:ae:
                    5f:0f:41:b3:cd:d4:55:b6:6d:a3:a9:49:9f:f4:d3:
                    d0:61:17:fe:62:b3:92:4f:c7:c4:08:5c:f4:ba:bb:
                    9a:66:26:10:d6:b1:a9:ad:5e:9c:cd:13:9b:5b:6f:
                    9a:53:83:91:29:83:fb:f4:68:d7:ce:ea:68:ae:a2:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:DF:02:7D:ED:BF:C6:56:0F:64:2A:75:91:2D:C7:72:E5:74:68
            X509v3 Authority Key Identifier:
                keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ff00::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:bf:e7:b8:14:6d:81:64:f2:e0:90:46:c5:ef:d9:1d:16:
         fc:25:ac:d7:3e:50:53:7f:9c:76:e8:8d:fa:d5:e0:6b:81:fe:
         40:0b:30:48:6c:e5:38:0e:67:68:c0:c8:32:de:b1:1e:9c:61:
         8f:78:0d:a1:5c:ad:16:e9:e3:4d:35:61:67:37:a9:a6:8c:e6:
         fe:b9:72:2e:6b:24:ad:c2:ad:dd:f8:a1:a7:8d:68:ab:43:42:
         13:6a:ff:04:7b:ae:6f:b5:25:6c:ec:69:7f:72:e4:27:6c:13:
         02:2e:9c:3b:f7:4a:02:fa:05:29:d5:6e:3d:9d:f2:7c:30:64:
         fc:75:63:ad:c4:83:ff:b4:4e:b0:48:17:11:82:74:56:e2:3f:
         cd:f9:16:92:16:7c:f0:88:df:b9:49:7a:74:a9:ec:30:33:ff:
         1e:9e:6d:e8:fd:5f:46:bc:d4:eb:78:f0:26:5b:2c:bc:28:40:
         80:dc:32:00:c4:bb:b8:d1:de:d9:25:37:1d:70:6a:f5:cd:9c:
         2a:31:51:fc:a2:75:2a:c4:e8:f0:23:17:00:56:a4:f8:88:de:
         87:bd:55:13:34:0d:5f:d4:e1:e0:95:2c:e1:75:bb:95:95:a4:
         88:82:3a:5d:08:81:bc:6e:ac:5c:ab:e6:77:03:e6:ec:76:a6:
         80:2c:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----