Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-4s9nH9u19kjeRHIRHp2Qc2gTUM.roa
File:                     1-4s9nH9u19kjeRHIRHp2Qc2gTUM.roa (raw, json)
Hash identifier:          ufskJ5xyGdoGMDznGurYi6HWbvi/qFlweG5vBsOVMvg=
Subject key identifier:   FB:8B:3D:9C:7F:6E:D7:D9:23:79:11:C8:44:7A:76:41:CD:A0:4D:43
Certificate issuer:       /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial:       0193B792AAFBD9F557463A4D652DAB3A1B9D
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-4s9nH9u19kjeRHIRHp2Qc2gTUM.roa
Signing time:             Wed 11 Dec 2024 21:14:22 +0000
ROA not before:           Wed 11 Dec 2024 21:14:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        2a00:a640:10a0::/44 maxlen: 48
                          2a00:a640:20a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b7:92:aa:fb:d9:f5:57:46:3a:4d:65:2d:ab:3a:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
        Validity
            Not Before: Dec 11 21:14:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fb8b3d9c7f6ed7d9237911c8447a7641cda04d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:6e:55:63:95:e9:12:fe:55:1d:3e:68:9a:
                    06:bf:c8:55:bd:3b:dd:6f:da:6c:02:fe:5a:2f:df:
                    7d:f6:c6:17:db:0d:bc:fd:0b:41:cd:e7:7d:45:3b:
                    64:9f:0b:7c:93:2a:d3:02:41:7a:0e:dc:95:c3:cc:
                    a7:ed:f3:ae:60:72:17:44:33:03:10:ae:a7:fb:d8:
                    43:6b:e8:13:4d:8f:f8:45:0c:a3:b5:a5:67:48:e5:
                    b8:5e:cf:c7:ed:6e:42:cf:cd:c1:a5:c0:85:54:95:
                    02:92:92:13:8c:0c:dc:d8:5c:35:e6:90:69:f7:fe:
                    db:73:c5:04:a3:d6:9f:1a:82:49:71:31:d9:e0:e9:
                    b5:0c:97:dd:06:a7:22:65:0f:35:71:66:eb:64:58:
                    36:27:fa:0b:93:2c:60:31:a6:43:9b:5d:66:3b:78:
                    48:2e:55:c0:28:32:c5:d8:1f:9c:b9:f1:b0:db:01:
                    53:ef:ab:f3:5f:ca:d0:ee:17:9a:29:43:f8:3e:7a:
                    f9:0c:f2:f0:54:95:0b:66:e2:9d:00:ce:7f:f3:cd:
                    f3:23:4b:d9:97:08:a3:f8:ce:04:e5:bf:b6:36:3c:
                    87:01:e4:03:52:6e:34:87:36:e7:7e:77:e7:f7:03:
                    91:ca:c5:6d:36:a3:f6:31:44:bd:fe:9e:76:53:6d:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:3D:9C:7F:6E:D7:D9:23:79:11:C8:44:7A:76:41:CD:A0:4D:43
            X509v3 Authority Key Identifier:
                keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-4s9nH9u19kjeRHIRHp2Qc2gTUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:a640:10a0::/44
                  2a00:a640:20a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:44:d4:f0:cb:90:49:9e:cf:4c:aa:5b:f5:cb:6b:63:bc:81:
         34:d8:bf:f2:50:d4:8f:44:36:e7:8a:07:36:3f:07:2c:92:8d:
         1b:b3:83:1e:db:d2:95:c4:5a:20:12:02:4b:e9:0f:c6:7d:15:
         1d:c7:fe:24:a9:98:86:89:26:a9:a3:97:e0:1e:e8:aa:30:2d:
         d3:2c:ae:e9:82:be:c5:8e:10:5c:16:20:d6:c6:c7:38:f0:62:
         68:75:b4:0c:58:97:60:4c:d5:a9:1b:a5:46:35:80:94:76:c0:
         29:df:e8:03:0b:80:a3:48:ad:98:00:5f:19:df:a5:71:22:03:
         40:1b:b9:ae:3f:58:60:eb:d9:60:03:21:ab:cf:ba:64:03:ca:
         dd:8b:40:9d:59:ab:fd:16:3f:ca:6a:95:85:d0:57:c4:f3:ca:
         1a:c7:71:6d:dc:98:5b:2a:1a:ee:73:6e:8f:5f:1d:e7:9d:d4:
         c4:0b:09:5e:a2:a2:9e:31:e0:fb:18:c4:c6:aa:40:17:b6:bf:
         5b:19:85:8b:4a:bd:a6:6e:71:1e:56:67:e7:7e:30:b9:e1:37:
         1d:7d:0e:28:70:2f:93:c0:48:ef:86:b0:a1:52:9c:e8:b6:d7:
         4c:eb:e9:14:92:5c:63:59:2a:73:3a:91:8d:a1:08:7f:f3:bf:
         72:c9:f4:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----