Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/NvT_wFcOabTSwHjdknxz6JGnZ8I.roa
File:                     NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (raw, json)
Hash identifier:          lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=
Subject key identifier:   36:F4:FF:C0:57:0E:69:B4:D2:C0:78:DD:92:7C:73:E8:91:A7:67:C2
Certificate issuer:       /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial:       019423D6E41A74214EF700B9078FBB7C866C
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/NvT_wFcOabTSwHjdknxz6JGnZ8I.roa
Signing time:             Wed 01 Jan 2025 21:47:53 +0000
ROA not before:           Wed 01 Jan 2025 21:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49825
IP address blocks:        2a0b:8fc1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:e4:1a:74:21:4e:f7:00:b9:07:8f:bb:7c:86:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
        Validity
            Not Before: Jan  1 21:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=36f4ffc0570e69b4d2c078dd927c73e891a767c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:94:18:14:f3:9c:12:6e:12:64:cc:7c:70:
                    f2:77:bd:22:d6:cd:a1:c2:8a:ab:e1:9b:ce:fa:f2:
                    87:12:24:f7:5d:54:2d:a5:aa:48:d3:0a:c5:a5:77:
                    f7:9d:dd:27:fb:76:07:d1:1d:e7:89:67:99:48:9b:
                    e8:b1:dd:73:fb:cb:53:01:8c:ab:64:a5:4e:d8:98:
                    cf:28:22:69:47:ac:9e:30:17:d4:d2:27:fd:11:e2:
                    0a:e4:d0:65:8e:f7:a6:ae:b0:be:42:f3:3a:f8:39:
                    93:7a:d8:1b:d6:2f:3e:6a:ac:37:87:b1:1a:bd:a6:
                    0c:a8:b2:3e:f3:1e:6e:ee:96:59:aa:8f:e3:f9:6f:
                    ae:a2:16:b1:0f:33:6e:89:68:71:db:21:d0:05:89:
                    52:eb:01:ae:dd:47:19:a3:bc:72:b7:c3:a4:ed:9b:
                    88:1a:2e:a4:cc:4c:e0:27:d9:6d:5f:7a:01:b1:bd:
                    89:8b:b8:dc:d6:68:53:6d:e1:f6:93:3d:e8:67:83:
                    f6:5f:04:43:34:4c:19:8f:e8:c0:be:90:73:d8:f7:
                    30:26:eb:4b:a7:23:de:fc:a2:e9:f8:9d:35:42:52:
                    72:03:a4:2b:90:42:c4:f7:90:6c:b9:fb:f6:2e:85:
                    f8:60:09:6a:a1:44:a2:72:63:37:f4:d9:61:a5:ce:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:FF:C0:57:0E:69:B4:D2:C0:78:DD:92:7C:73:E8:91:A7:67:C2
            X509v3 Authority Key Identifier:
                keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/NvT_wFcOabTSwHjdknxz6JGnZ8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:2b:0b:e0:12:d5:48:bb:e4:78:10:ad:06:ed:f7:ba:a2:
         db:a2:f7:14:6a:98:6a:2b:db:0a:1e:37:ed:2a:28:72:ad:ff:
         ff:c5:41:83:ed:e5:ee:28:5e:d3:9b:35:e5:bb:b8:c0:72:58:
         90:a2:7e:de:c3:53:8a:70:cd:c4:19:cc:4f:28:c8:3c:93:5a:
         c8:83:21:ef:9e:e5:02:96:63:4a:d1:9a:8e:2c:08:70:ea:3f:
         ba:6d:16:52:aa:f0:f5:87:80:e5:11:78:c5:b5:21:a5:0b:0b:
         ea:78:4e:e9:ac:d8:00:f8:69:20:e2:ed:cd:1a:b5:02:7a:73:
         83:9c:26:11:19:11:5f:3c:ed:fa:fc:d5:36:c0:a1:33:93:06:
         78:67:83:ed:bb:a5:28:4c:92:42:6c:25:9d:38:10:c9:33:0c:
         fc:e6:47:87:a3:2c:d8:64:95:b5:b5:f7:20:58:cb:cb:ae:08:
         44:1e:f6:ad:33:c1:fa:77:5d:1a:79:6d:bc:de:30:39:f8:80:
         b9:f3:fe:bf:f3:4c:c7:93:42:a3:87:8c:60:b5:fa:1f:07:41:
         1f:e3:f1:eb:19:0a:96:16:79:26:1e:6c:a8:0c:4a:71:3c:03:
         01:30:51:c1:fd:f1:ce:d7:f8:d2:b5:26:f7:24:cd:fe:e4:1c:
         8c:62:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----