Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/_q_4z0J5i384UaXDQJYWs6HPoTM.roa
File:                     _q_4z0J5i384UaXDQJYWs6HPoTM.roa (raw, json)
Hash identifier:          b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=
Subject key identifier:   FE:AF:F8:CF:42:79:8B:7F:38:51:A5:C3:40:96:16:B3:A1:CF:A1:33
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       0194221F8220EB68F4166A8AE7BC4802EBA3
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/_q_4z0J5i384UaXDQJYWs6HPoTM.roa
Signing time:             Wed 01 Jan 2025 13:47:57 +0000
ROA not before:           Wed 01 Jan 2025 13:47:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208713
IP address blocks:        2001:678:a84::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:82:20:eb:68:f4:16:6a:8a:e7:bc:48:02:eb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: Jan  1 13:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=feaff8cf42798b7f3851a5c3409616b3a1cfa133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:a8:75:b7:ac:0d:9d:0e:98:0a:db:8e:7b:
                    5b:a0:fd:6b:09:d2:7b:77:80:e1:7a:dc:21:2c:20:
                    42:1d:0e:88:36:c5:5b:34:6a:41:ce:87:2a:da:cb:
                    0e:0e:40:4e:e8:44:ea:d6:63:d0:7c:4d:f6:bf:5d:
                    0a:de:df:5a:90:3c:7e:0c:c9:73:c8:60:3e:1d:2e:
                    0b:f5:ce:6f:52:29:3a:81:2d:53:36:c2:9a:18:8d:
                    ae:10:bd:11:2c:a2:d8:64:30:3e:59:a9:65:92:81:
                    e8:f1:72:64:58:df:15:83:2a:ce:62:7e:b3:80:7c:
                    3c:b3:fd:5d:24:ba:1f:4f:b5:a4:9b:15:c6:56:bb:
                    6a:cc:85:ed:5f:ec:e3:3f:8a:8f:45:4b:40:b0:e0:
                    a8:44:41:c8:4c:60:c3:49:78:31:ee:d9:cf:87:c6:
                    fd:78:96:62:90:45:46:d2:93:61:3c:0c:f3:b9:01:
                    32:68:39:fd:fe:96:24:10:aa:dd:b0:1d:39:97:a7:
                    23:98:22:30:8c:b8:71:56:9a:88:68:75:be:9e:50:
                    98:62:ad:7c:b5:6a:0e:61:16:ce:71:02:f9:83:4a:
                    c7:0d:79:84:cf:e6:02:8b:9e:e0:7e:8a:a9:96:5b:
                    7f:2a:20:66:4b:00:24:fe:da:39:dc:90:fe:43:4b:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:F8:CF:42:79:8B:7F:38:51:A5:C3:40:96:16:B3:A1:CF:A1:33
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/_q_4z0J5i384UaXDQJYWs6HPoTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a84::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:07:46:04:9a:16:4f:06:e7:3e:b8:15:1b:56:b1:7b:70:
         9b:c8:dc:3e:7f:ae:bf:ee:6e:92:0b:69:56:96:ec:1b:cf:58:
         46:e8:26:a5:cf:cb:74:fc:b0:e6:c1:26:43:e4:14:75:3c:59:
         8f:16:de:1a:59:4b:d3:25:ca:4f:8e:16:77:9c:02:7f:3a:be:
         3a:db:38:d2:8e:da:44:ed:c0:93:66:b5:42:df:eb:bc:55:8f:
         b1:bc:75:8f:84:42:1e:f3:e3:3d:52:8b:85:7b:90:e0:1a:b6:
         6f:18:6f:dd:a9:83:98:30:f0:42:31:47:6f:7f:b2:5a:de:fb:
         84:2f:b3:74:f3:8b:a4:a7:53:65:be:b8:21:b0:3a:de:ab:73:
         2f:a8:c6:b8:a5:f1:0e:16:11:7f:40:d5:04:40:c8:44:b0:a1:
         ff:f7:a5:a2:45:ea:ad:62:ff:a3:dc:87:74:06:4b:be:30:3d:
         ff:fc:06:b8:01:4e:39:44:96:26:7a:0e:68:d9:91:ea:4f:05:
         7e:d6:15:7f:dc:4f:e1:f1:00:c2:a7:f9:4d:00:c2:39:98:61:
         91:e0:3d:e2:46:24:d0:f3:d0:ee:09:72:b0:60:bb:1d:d9:fe:
         08:ff:51:9e:ac:07:c1:a6:f5:30:c1:b9:0c:7e:27:68:89:9b:
         3d:3e:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----