Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/qv1Sau3fL4G3RgHjzDZHci6uI6I.roa
File:                     qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (raw, json)
Hash identifier:          ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=
Subject key identifier:   AA:FD:52:6A:ED:DF:2F:81:B7:46:01:E3:CC:36:47:72:2E:AE:23:A2
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       01942369B8D45C556261F4E8F4528124B387
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/qv1Sau3fL4G3RgHjzDZHci6uI6I.roa
Signing time:             Wed 01 Jan 2025 19:48:38 +0000
ROA not before:           Wed 01 Jan 2025 19:48:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207540
IP address blocks:        2001:678:bf0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:b8:d4:5c:55:62:61:f4:e8:f4:52:81:24:b3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Jan  1 19:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aafd526aeddf2f81b74601e3cc3647722eae23a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:19:2f:b9:b1:7e:ff:5f:34:18:4b:90:b9:
                    06:f8:e2:6a:a1:d3:8b:b0:c8:dc:07:b1:56:79:21:
                    06:e9:e2:1b:74:ea:3a:51:2e:09:47:27:40:5f:e7:
                    85:24:1e:3a:07:cc:d9:01:ef:de:93:16:9f:ac:06:
                    d6:12:6e:04:0c:b1:ce:6b:2e:40:13:2f:95:24:79:
                    b9:ee:87:49:4b:32:59:04:c6:ee:cb:3f:3c:77:ef:
                    9a:ef:6c:c7:b6:39:5f:50:6d:d3:fe:7d:9c:e7:e8:
                    88:0e:31:3f:ab:5f:c3:88:f9:1a:00:98:0d:a1:ad:
                    35:11:20:be:de:55:a4:00:0f:cd:3d:12:eb:a1:ae:
                    82:e3:1b:42:1b:6c:e9:1b:23:da:3e:81:9a:f1:4c:
                    b0:0f:b9:35:98:e8:58:bc:11:ba:60:09:43:e2:8b:
                    30:ee:20:ae:93:cd:a6:c4:49:0b:6e:7b:2f:c6:85:
                    ef:f1:e6:f3:ee:55:9b:5e:26:5c:66:42:46:7b:b8:
                    51:18:48:73:b4:b2:4a:32:2c:78:2d:5f:fc:25:ed:
                    24:eb:68:26:14:b0:3a:85:8f:98:ef:b1:fb:8c:f6:
                    a4:69:cd:df:c8:90:ef:15:5b:15:d6:bf:be:dc:ab:
                    96:6e:89:f7:54:13:03:7c:45:c2:3d:f0:ac:ea:af:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:52:6A:ED:DF:2F:81:B7:46:01:E3:CC:36:47:72:2E:AE:23:A2
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/qv1Sau3fL4G3RgHjzDZHci6uI6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:bf0::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:12:c8:62:0f:5f:09:d1:a9:83:06:94:58:06:8c:9d:59:fa:
         f1:7e:d5:da:c8:a7:b4:d7:35:0e:e5:16:66:d8:93:6d:fc:96:
         19:91:eb:99:2e:8d:bd:7e:03:fd:06:2e:d5:3c:3c:0a:7c:92:
         8a:74:f8:fe:9d:30:e8:b6:92:66:4a:fe:a6:0e:8f:10:18:14:
         8d:97:f3:ef:dd:f2:da:53:c5:cb:a4:37:83:07:4a:43:06:d9:
         f3:32:63:d5:b8:f8:fa:48:fa:95:f5:b7:49:4e:da:10:85:a7:
         86:63:81:1c:44:32:38:81:1f:0e:8f:bd:14:e0:95:07:70:4e:
         a5:65:40:52:f9:94:62:12:15:1f:c1:93:a4:b1:73:29:64:4d:
         48:a8:99:c8:68:ac:3e:45:4a:00:ac:4b:d3:2a:9a:09:ff:7d:
         72:b7:2d:3f:0e:03:84:9a:40:d8:f1:5e:6b:7d:0a:7d:f7:cb:
         6c:c6:04:c9:b0:98:7d:71:75:c7:41:83:a7:31:a4:07:fd:3d:
         ab:05:dd:6c:15:c8:40:98:fe:a2:95:fb:e2:cf:a3:8d:93:56:
         b7:0d:72:c6:96:0d:2e:79:53:88:6b:16:fd:cc:e5:77:f1:bf:
         f7:9e:bc:40:79:2a:de:25:c2:32:f5:36:ab:9e:13:d3:26:06:
         be:11:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----