Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/2MgYI85TPEBCwm2elQTNgUHdzmQ.roa
File:                     2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (raw, json)
Hash identifier:          YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=
Subject key identifier:   D8:C8:18:23:CE:53:3C:40:42:C2:6D:9E:95:04:CD:81:41:DD:CE:64
Certificate issuer:       /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial:       0194258F7BCDC75B38EB94F4191453B11D86
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/2MgYI85TPEBCwm2elQTNgUHdzmQ.roa
Signing time:             Thu 02 Jan 2025 05:49:07 +0000
ROA not before:           Thu 02 Jan 2025 05:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215627
IP address blocks:        2001:67c:da8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:7b:cd:c7:5b:38:eb:94:f4:19:14:53:b1:1d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8c81823ce533c4042c26d9e9504cd8141ddce64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:ad:a0:a7:1c:d3:01:b9:5e:09:e6:ec:83:
                    70:b1:90:a4:0b:84:9f:cc:dd:57:59:f2:41:9c:e6:
                    ac:30:6e:17:53:b8:c7:24:79:32:dd:5f:cd:36:74:
                    dc:9e:02:5c:d9:1e:2a:79:85:9c:c6:fa:2d:f0:23:
                    bb:0c:49:e3:7a:c4:d6:0f:5b:f9:7b:cb:bb:f2:f8:
                    b6:f4:54:5a:f4:55:ad:91:e7:8f:bd:08:3e:53:b5:
                    6f:33:76:35:11:30:71:d6:74:ef:a5:dd:79:84:39:
                    1f:07:de:87:81:f4:c0:24:af:e6:71:7d:0a:df:8c:
                    25:8d:3b:e8:78:4c:b5:09:3b:23:3f:78:40:b4:45:
                    c9:cd:35:a9:16:75:f2:d3:4a:53:71:c0:4d:3f:ac:
                    58:4b:e5:03:65:b6:98:3a:f1:9d:a8:98:b6:fb:cc:
                    ab:6d:51:68:5c:dc:e8:ae:d0:78:bb:28:0f:f1:b4:
                    1a:8e:81:11:2d:be:19:79:2f:e1:17:9c:4a:5f:b3:
                    4e:74:9a:cb:ac:3c:36:4e:4f:fd:91:b3:68:77:ab:
                    08:9f:86:0d:d0:4b:00:f8:d6:a5:7e:77:54:07:cd:
                    1f:a4:31:eb:e8:5e:ec:7b:2b:a2:fa:66:ba:5b:9e:
                    27:b3:eb:a8:f9:78:d2:06:97:ef:ca:bd:f5:b8:4a:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:18:23:CE:53:3C:40:42:C2:6D:9E:95:04:CD:81:41:DD:CE:64
            X509v3 Authority Key Identifier:
                keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/2MgYI85TPEBCwm2elQTNgUHdzmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:da8::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:07:fd:4c:d1:46:ab:a5:e7:99:8d:13:71:7a:32:eb:93:5e:
         6c:b5:98:aa:37:0b:be:f9:3d:f1:4b:1b:f2:d4:4c:68:c6:bd:
         bd:39:37:2a:69:75:6c:6b:b6:49:fb:14:ca:1c:b4:15:82:bb:
         76:f5:c4:1a:2f:8e:fa:38:4d:d4:f9:c0:ec:b7:1d:1a:30:d0:
         04:d2:fd:d3:e1:63:06:17:39:9f:9c:2e:39:bd:74:8c:b6:de:
         f6:2c:bb:62:8b:45:e1:b5:6e:c7:ed:d9:9b:2f:8c:6f:a2:84:
         33:45:d6:ae:30:97:9e:d9:96:c1:85:92:34:48:df:70:3a:9a:
         b0:9c:2c:40:07:6e:d9:4e:8b:8d:8e:83:e2:46:92:de:cd:18:
         ae:e2:a2:ae:5a:49:61:13:77:79:28:d4:62:16:21:a3:f1:ec:
         28:33:dc:a9:36:a3:5e:99:53:7d:60:a4:00:66:50:fa:bf:27:
         bb:83:d2:d1:f7:25:30:a6:5c:d9:f3:2f:67:75:3f:76:82:e0:
         9d:0c:62:69:51:ac:ed:e2:a2:78:6e:9f:20:33:ba:fb:6a:65:
         d1:7f:ae:c7:de:89:2c:8e:72:96:d3:38:e3:53:71:f7:9f:49:
         3e:f1:ae:b3:72:68:6f:97:a8:de:0e:26:6e:20:30:ad:8b:98:
         22:ee:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----