Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1gGpVL-C_CESiNkr4DXOqBHW69g.roa
File:                     1gGpVL-C_CESiNkr4DXOqBHW69g.roa (raw, json)
Hash identifier:          hH8+jwW1MFqytskUyZBSVX2NwFrObZEWGzAc/2ExLas=
Subject key identifier:   D6:01:A9:54:BF:82:FC:21:12:88:D9:2B:E0:35:CE:A8:11:D6:EB:D8
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       0193BAF88E84CD8217769DC2F8927CA0EAC1
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1gGpVL-C_CESiNkr4DXOqBHW69g.roa
Signing time:             Thu 12 Dec 2024 13:04:31 +0000
ROA not before:           Thu 12 Dec 2024 13:04:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61992
IP address blocks:        2a0e:eac0:1003::/48 maxlen: 48
                          2a0e:eac0:2030::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ba:f8:8e:84:cd:82:17:76:9d:c2:f8:92:7c:a0:ea:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Dec 12 13:04:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d601a954bf82fc211288d92be035cea811d6ebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:2f:cc:f5:11:f7:95:8a:30:2a:72:dd:ec:
                    86:b8:f1:ef:30:2f:f2:ae:12:bb:e9:f7:6f:74:0f:
                    fe:f4:bd:4f:8b:b3:c9:c6:82:67:58:57:d7:4d:15:
                    d6:f1:bc:19:b5:66:3e:3d:13:06:fa:90:ef:0a:6f:
                    17:8b:2c:24:e1:0a:6a:ba:8f:16:77:b3:8b:cc:08:
                    50:57:71:89:bf:e0:a2:88:c1:22:a1:34:41:f0:c4:
                    bc:da:9c:37:8e:cc:85:65:5c:89:25:de:41:29:45:
                    97:08:a2:2a:43:d2:0b:25:0a:86:11:a7:c7:d8:5a:
                    e7:79:bd:73:61:e4:20:bc:f7:40:71:a4:e9:c9:b6:
                    0d:2c:cb:84:5d:d9:fd:67:c6:a8:c7:70:b7:8a:29:
                    76:f6:0a:ab:74:6b:f3:4e:3e:b4:0c:1c:0f:7d:7c:
                    59:e7:89:ca:ff:dc:d9:ee:d6:cd:32:35:5d:c2:07:
                    a9:98:f9:37:d7:d3:20:48:cc:21:ba:4d:fd:3e:60:
                    5c:b3:7a:53:82:4c:0c:6a:3e:83:62:1d:2e:f2:8a:
                    07:e2:84:90:15:bf:9d:37:96:f2:e7:2b:bd:e6:10:
                    10:79:a4:1b:c6:ef:31:f5:cb:55:f1:3f:70:e3:c0:
                    27:d7:4e:fe:a4:39:e8:94:df:b7:28:26:84:9e:69:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:A9:54:BF:82:FC:21:12:88:D9:2B:E0:35:CE:A8:11:D6:EB:D8
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/1gGpVL-C_CESiNkr4DXOqBHW69g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:eac0:1003::/48
                  2a0e:eac0:2030::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:2a:4f:ee:55:44:85:66:f2:92:96:6f:f0:55:33:77:7f:
         47:2c:68:bd:fd:f5:f1:3e:ef:df:48:36:8f:ac:f1:b3:01:d0:
         ab:ab:81:b9:0b:7d:58:0b:8b:5c:e1:c5:3d:eb:91:e2:0d:27:
         a8:18:ff:76:ab:17:da:0d:98:7c:e5:fb:7c:f0:69:6b:bb:89:
         4a:f4:50:e9:bb:e7:37:2c:6f:b9:fb:e3:5c:02:cd:8b:16:0f:
         82:58:c6:8c:2d:16:27:db:91:30:c3:6b:83:07:4d:7d:c0:e1:
         4f:e3:45:95:92:65:7d:0d:64:26:c7:b9:f9:25:bf:c2:39:c5:
         ed:d8:b7:6a:0c:47:f7:85:9f:b3:84:1c:d3:4c:3d:47:52:2d:
         a0:5d:9e:0f:90:00:64:57:7d:bd:cf:70:3b:c9:31:ba:2a:3c:
         f5:44:df:38:c5:08:a8:ab:00:18:0a:98:3d:b4:d5:e7:bc:29:
         ae:1a:83:e8:a9:4d:96:f6:f3:e9:52:28:0e:33:58:70:f4:35:
         31:49:b5:6c:58:f3:7e:ca:25:fd:e6:cc:d1:89:0a:dc:94:22:
         e4:ca:f1:ba:67:71:3f:b7:67:43:65:15:cb:51:a6:eb:e7:8c:
         2a:a8:16:d4:76:8a:6d:0e:fc:30:c6:64:a7:26:28:e6:bc:6b:
         82:95:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----