Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa
File:                     LW11wESbT2hocwdKYSbs6P71AKA.roa (raw, json)
Hash identifier:          GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=
Subject key identifier:   2D:6D:75:C0:44:9B:4F:68:68:73:07:4A:61:26:EC:E8:FE:F5:00:A0
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       01941FFA7B426C68A9DEF46EA895883ED8F3
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa
Signing time:             Wed 01 Jan 2025 03:48:16 +0000
ROA not before:           Wed 01 Jan 2025 03:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39513
IP address blocks:        2a0c:d540:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:7b:42:6c:68:a9:de:f4:6e:a8:95:88:3e:d8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Jan  1 03:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d6d75c0449b4f686873074a6126ece8fef500a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:fc:11:ea:91:df:b3:f0:c5:54:24:e1:68:
                    0f:05:47:19:ba:04:b9:81:71:ae:11:ec:a7:5f:35:
                    79:8c:c6:ff:97:b2:9d:ad:3a:c3:6e:d6:f7:04:31:
                    35:b6:36:d5:fe:3a:de:76:da:e3:0a:52:3f:14:db:
                    4f:d1:78:bd:97:61:04:1b:e9:cd:27:f7:d4:92:ec:
                    6e:10:7a:4f:1e:72:54:46:6b:39:dc:c6:79:ca:35:
                    54:37:55:bb:16:60:6f:95:1d:ca:07:f8:e8:65:1d:
                    3e:8c:f5:de:7e:21:54:23:62:9f:d1:b4:13:2d:00:
                    9b:99:d2:47:11:42:c9:79:81:e3:7a:f7:97:87:8f:
                    2c:c9:c9:8b:73:5c:0c:c4:1f:c6:17:0e:67:2c:95:
                    3c:f0:29:ca:46:1f:fe:f0:57:e6:0e:5a:53:48:22:
                    f6:3c:8b:0d:74:23:95:e5:0b:f8:6e:c3:19:55:c2:
                    3a:80:75:b6:b6:d3:76:7a:2d:ab:88:19:82:bd:02:
                    8a:98:fa:31:8c:15:88:67:af:74:ed:c7:7a:23:2e:
                    0b:55:45:bb:bb:73:82:70:a4:d2:da:c5:53:05:70:
                    0d:b2:ec:52:d7:ec:44:32:12:c8:4f:4e:ed:61:46:
                    b9:10:01:57:d3:f5:d4:c7:e9:8c:ef:2e:7c:8e:49:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:75:C0:44:9B:4F:68:68:73:07:4A:61:26:EC:E8:FE:F5:00:A0
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:d540:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:dc:76:e4:2b:c3:12:62:94:63:f5:15:cf:ec:7c:37:47:7e:
         2d:76:ad:a3:f6:7a:3e:8f:bd:21:fa:5b:a0:c8:45:ec:2a:9f:
         e6:9e:32:03:0a:53:b7:0f:2f:ba:68:cf:d3:32:00:5e:9c:51:
         86:0e:84:4c:4b:35:9a:6b:d2:99:f5:a1:ae:63:c0:65:63:4b:
         b0:81:30:72:98:f1:f9:d4:b6:b8:09:79:44:98:a3:ee:11:e7:
         ba:10:93:9f:74:69:db:1d:47:57:2d:12:2c:aa:41:6c:9a:51:
         c4:df:41:bd:82:75:82:70:13:5d:6a:b1:c5:30:ac:84:b8:77:
         56:aa:e6:07:81:9c:0c:07:88:f4:32:8f:86:a8:4e:ca:96:4a:
         b2:c3:71:d3:ba:7d:20:34:f0:f0:44:0a:8d:3d:9a:9e:1a:71:
         ab:fb:c1:c2:7e:91:45:1f:c4:f4:66:22:96:c4:6c:8b:ff:80:
         8f:fb:8b:03:c1:b1:48:39:30:58:71:5c:a4:75:78:23:38:03:
         c0:3b:78:ec:92:d8:71:c1:3f:8f:be:f4:a2:c1:82:2f:91:98:
         2a:b2:bb:4a:23:1f:63:6a:5f:d8:e3:b7:3a:3f:d8:f3:4e:03:
         52:83:86:bc:bc:63:df:49:18:b7:cd:f6:3a:6a:3f:32:a0:19:
         c0:9f:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----