Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/0W7cVS1HiSvOdpkPQZw47A5p5sE.roa
File:                     0W7cVS1HiSvOdpkPQZw47A5p5sE.roa (raw, json)
Hash identifier:          TjjwxQWyGybBptI6rG8CJXFRb8d3ee7al/uOr2lJCr4=
Subject key identifier:   D1:6E:DC:55:2D:47:89:2B:CE:76:99:0F:41:9C:38:EC:0E:69:E6:C1
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       018CC2DB02AB31E08FE3B41FEE56C0E7A961
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/0W7cVS1HiSvOdpkPQZw47A5p5sE.roa
Signing time:             Mon 01 Jan 2024 02:29:42 +0000
ROA not before:           Mon 01 Jan 2024 02:29:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197424
IP address blocks:        2a0f:e580::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:02:ab:31:e0:8f:e3:b4:1f:ee:56:c0:e7:a9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Jan  1 02:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d16edc552d47892bce76990f419c38ec0e69e6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:2a:8a:a5:8f:a8:4c:f3:00:81:84:f6:57:
                    9a:8b:15:65:c8:23:d3:d7:b0:2c:7b:66:24:b0:e1:
                    4c:b4:4f:d9:fe:f0:69:ad:be:b3:e0:6b:38:22:f2:
                    52:08:51:92:ee:eb:a6:a2:71:f8:ce:79:80:50:d7:
                    14:da:d3:ba:18:a8:f5:ff:68:e5:17:3d:88:31:28:
                    b1:88:5d:ee:65:6c:d2:a5:14:be:9d:b1:eb:04:6e:
                    40:a1:e8:0b:90:72:58:32:bd:60:b1:87:ec:d9:34:
                    22:ec:af:b1:78:b8:4f:62:01:de:cf:8e:a0:8e:78:
                    0a:98:73:3b:b6:4f:7f:7f:78:3f:05:19:da:6b:36:
                    2a:ef:72:90:c6:0e:b3:47:20:fd:3c:d3:5d:82:10:
                    4f:42:cc:1f:ac:20:33:33:87:60:72:95:f3:ec:79:
                    c2:e9:61:ef:42:0f:30:65:ad:6f:b3:49:61:49:da:
                    67:9e:ba:37:6f:23:ca:8d:2f:0c:b9:55:02:ff:34:
                    e1:fa:de:97:a5:d4:ef:ce:d4:ce:50:bd:9e:02:2c:
                    d9:9f:52:16:f5:99:d7:14:07:09:e1:e7:b6:cd:5d:
                    12:87:ec:81:84:f5:1b:45:0a:3e:d2:3a:fe:dd:4c:
                    c7:5f:a2:2c:eb:2b:df:52:c6:cf:a9:c0:40:af:a4:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6E:DC:55:2D:47:89:2B:CE:76:99:0F:41:9C:38:EC:0E:69:E6:C1
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/0W7cVS1HiSvOdpkPQZw47A5p5sE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:e580::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:83:7e:81:1c:d0:44:91:87:a6:db:64:d2:40:1e:a0:b1:
         ba:00:0a:a5:f2:0b:ac:ce:16:0b:2d:fa:a4:d2:b5:f5:53:59:
         53:2b:d7:f8:da:c4:e8:e6:e3:18:2a:2e:53:3e:24:56:d8:a6:
         6e:65:48:96:dc:fe:df:ca:d8:22:4c:e8:d2:83:90:0d:42:5a:
         70:02:a2:62:11:70:72:af:bc:f2:b9:0c:e4:e9:ff:c0:e9:ed:
         46:e6:04:39:0d:66:d6:59:26:8f:28:5f:92:a8:e7:94:22:a9:
         61:ea:56:22:df:8c:32:c4:e6:24:d7:73:74:91:c5:26:a6:72:
         15:13:d2:75:02:a3:5e:92:c9:99:4b:a5:0a:c9:e8:2c:c0:cf:
         21:48:af:bd:b7:40:b4:52:26:e2:48:6b:11:41:93:b6:40:10:
         bb:7b:ab:40:f7:72:68:28:d5:2e:7e:5f:82:c7:35:cd:b7:eb:
         a8:35:13:2c:fe:35:61:cc:9a:5f:69:8d:22:9e:a2:86:71:99:
         22:8f:82:67:6b:53:50:bf:c0:80:49:cf:99:7a:cd:83:3c:14:
         81:4a:8b:7e:3e:c5:dc:7f:16:e6:33:29:31:e7:72:84:ae:62:
         33:de:c7:24:0f:7c:3b:38:fa:70:24:42:a7:a2:93:65:27:4c:
         0f:4d:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----