Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/vhtd487K9KtxoA7xnWEBFYLk2QU.roa
File:                     vhtd487K9KtxoA7xnWEBFYLk2QU.roa (raw, json)
Hash identifier:          Y/UbGb84qsGcLP+xe/vnLylke84f2JSh4W0/UooZ+uY=
Subject key identifier:   BE:1B:5D:E3:CE:CA:F4:AB:71:A0:0E:F1:9D:61:01:15:82:E4:D9:05
Certificate issuer:       /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial:       0193B792A9FA11C21211E10B64864B325820
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/vhtd487K9KtxoA7xnWEBFYLk2QU.roa
Signing time:             Wed 11 Dec 2024 21:14:22 +0000
ROA not before:           Wed 11 Dec 2024 21:14:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13445
IP address blocks:        2a00:a640:10a0::/44 maxlen: 48
                          2a00:a640:20a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b7:92:a9:fa:11:c2:12:11:e1:0b:64:86:4b:32:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
        Validity
            Not Before: Dec 11 21:14:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=be1b5de3cecaf4ab71a00ef19d61011582e4d905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:b1:ed:1d:ee:7c:e4:8f:0a:b3:f5:e8:4d:
                    25:d4:2d:15:c4:f4:33:ca:62:02:b8:88:d0:1a:22:
                    33:ea:45:38:6d:91:0d:0f:15:b8:8c:49:6d:ec:56:
                    95:b3:29:70:59:c1:e6:92:af:be:76:21:4b:41:64:
                    18:42:a8:a9:d8:99:75:89:9e:e7:5d:43:15:d9:8f:
                    e1:08:ec:fb:c6:ca:df:bf:56:56:db:aa:ab:d6:23:
                    65:a3:6a:de:b9:e8:93:91:9b:c6:ba:83:b0:63:ac:
                    4c:b5:20:6a:dc:c3:16:a5:ff:9b:21:b1:d1:60:8d:
                    82:1e:c8:1d:e1:f6:f2:d5:47:65:71:4e:12:8f:1d:
                    71:5f:20:ae:94:50:e5:9c:c5:ee:0e:07:ff:34:c6:
                    4b:e9:44:53:fc:1c:72:21:30:c9:ec:48:64:21:b1:
                    65:8a:20:09:72:c8:d3:98:b3:f7:09:e0:5b:bf:bf:
                    4e:66:6b:db:95:92:19:6a:7b:ce:07:25:00:d8:89:
                    28:a0:2f:9c:d8:2a:ab:6c:4e:da:ed:c6:01:e7:6b:
                    7b:70:ac:b3:2d:ac:3d:e8:ca:b3:52:43:78:91:95:
                    0c:2c:76:f3:a2:9b:c3:8c:cc:37:cd:c2:81:92:49:
                    7c:f2:cc:d8:65:19:4c:99:5b:ba:e2:38:eb:ea:59:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:5D:E3:CE:CA:F4:AB:71:A0:0E:F1:9D:61:01:15:82:E4:D9:05
            X509v3 Authority Key Identifier:
                keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/vhtd487K9KtxoA7xnWEBFYLk2QU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:a640:10a0::/44
                  2a00:a640:20a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:31:f7:ab:12:54:a5:96:2b:9b:81:33:c0:7b:56:9c:d8:
         fb:93:7d:ab:68:90:ae:e2:0e:c5:30:25:cb:34:4d:33:ac:0f:
         58:4f:75:ff:b4:93:21:12:9e:ff:81:66:9c:ce:5b:d8:86:c1:
         38:26:be:06:bb:e0:93:1d:7b:7a:ca:e5:3a:9a:14:15:09:7f:
         e8:7c:cb:94:9a:ab:fe:52:23:a1:d5:6e:b5:c4:e5:49:b4:44:
         a6:b5:34:72:1c:16:4f:08:c2:ce:27:c8:60:4c:d0:08:2b:d3:
         3c:af:05:46:30:4c:ab:4a:0e:55:9f:dd:0e:ee:73:8b:0a:c3:
         48:84:86:95:70:bd:80:8c:75:0d:c1:59:2b:b0:a1:85:f5:ed:
         45:02:33:11:7a:1d:8e:90:d4:8d:17:7e:17:b1:a6:95:ca:2c:
         73:ad:2b:6c:c3:a8:81:a9:9c:9d:45:92:81:89:a2:29:be:cd:
         79:cf:b8:fc:6b:e4:1d:7b:68:51:1a:70:c6:fd:f1:09:6b:ba:
         0e:31:8d:e6:bd:96:ad:cd:70:26:de:c0:94:19:ff:99:35:38:
         4d:81:26:10:94:7f:e7:55:90:68:77:c9:d1:e8:54:83:49:fa:
         a0:f8:16:20:1d:a9:5b:e6:13:23:e9:98:a0:dd:a0:32:26:00:
         40:be:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----