Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/BofSOCqR9lVaW3XPh8s-hTi0YA4.roa
File:                     BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (raw, json)
Hash identifier:          GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=
Subject key identifier:   06:87:D2:38:2A:91:F6:55:5A:5B:75:CF:87:CB:3E:85:38:B4:60:0E
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       01949A29518AA49DB07ABD10D40F3A16B683
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/BofSOCqR9lVaW3XPh8s-hTi0YA4.roa
Signing time:             Fri 24 Jan 2025 21:13:06 +0000
ROA not before:           Fri 24 Jan 2025 21:13:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44947
IP address blocks:        2a13:9600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:9a:29:51:8a:a4:9d:b0:7a:bd:10:d4:0f:3a:16:b6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Jan 24 21:13:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0687d2382a91f6555a5b75cf87cb3e8538b4600e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:8d:78:57:05:0b:bb:fc:bf:a2:4d:5f:15:
                    0a:af:53:cb:0d:95:e3:d9:14:ba:a3:8d:02:09:b3:
                    61:9c:a9:bb:53:86:64:1f:76:50:ea:98:9a:25:2f:
                    8d:cd:84:12:83:f1:4f:03:30:85:20:66:fd:fc:af:
                    25:ab:a5:ab:f0:f8:25:f9:65:77:65:ac:15:a6:93:
                    31:ea:3b:c7:9a:c6:f6:82:03:88:d2:cb:13:f4:5b:
                    d4:c9:46:20:5f:22:7c:06:41:d5:a9:cf:58:d5:cd:
                    a0:9c:5d:0f:86:2f:0d:21:15:e8:09:dc:cc:56:6d:
                    6c:55:0a:12:1a:c3:19:37:65:cd:fd:d6:7c:8b:4b:
                    0e:9d:bc:92:e8:15:26:28:12:d3:80:9d:16:4c:39:
                    27:0c:a9:8a:99:6f:4c:9d:9e:f8:4f:25:26:c1:b2:
                    58:b9:19:75:1e:b3:97:3a:63:f3:db:08:3b:73:1b:
                    cc:7f:d1:7d:5c:5a:69:db:a8:a4:1d:ff:40:7b:05:
                    8a:4f:d9:d7:88:65:b1:9b:2f:d2:e8:ef:1e:ee:de:
                    8c:2e:04:98:f9:d8:a5:9d:11:0f:ff:01:f8:60:bd:
                    38:d4:36:d4:15:e5:4e:92:47:8a:cd:7a:95:78:b6:
                    5e:dc:0c:4d:55:de:90:22:62:c0:76:73:b5:e3:41:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:87:D2:38:2A:91:F6:55:5A:5B:75:CF:87:CB:3E:85:38:B4:60:0E
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/BofSOCqR9lVaW3XPh8s-hTi0YA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9600::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:90:9f:1a:8f:4f:75:70:f9:09:da:fb:59:61:03:61:04:6b:
         5d:ae:c8:48:33:58:e4:4c:a6:a9:21:ad:15:64:03:ac:c5:94:
         72:87:f1:ad:55:d9:76:98:0b:16:5c:27:76:c6:32:9a:45:10:
         90:26:44:14:5e:a5:18:7e:52:23:cc:0a:72:8d:78:94:3c:c8:
         55:fd:e7:69:36:4a:9a:d5:a3:5b:92:4f:5a:48:35:37:fe:db:
         de:71:7d:46:6d:27:f1:ea:cc:6b:cf:9b:48:a9:13:e9:e4:06:
         dd:64:d2:34:c9:86:4b:42:ea:48:31:75:14:88:3e:7e:d2:b0:
         ea:0b:7b:a2:ac:85:b5:df:74:7f:c7:4b:80:f7:bc:4c:df:7e:
         31:29:49:bd:22:a7:6c:8d:27:58:46:27:10:93:d1:a5:cb:e0:
         a7:7c:9e:d0:8d:fc:3c:40:71:f8:54:e6:ff:8b:73:36:26:cd:
         8c:6d:54:27:2e:80:1d:59:f0:7a:4e:55:4e:fc:4e:6c:8c:b6:
         a7:f6:d5:34:26:d1:7e:1f:23:3e:20:19:c2:05:e7:80:32:6b:
         3d:e1:17:72:3d:33:db:b8:a2:e6:fc:5e:f9:fa:98:93:e3:14:
         ae:e4:3a:bb:c1:8b:5a:f6:c8:99:d5:dc:50:c7:20:56:08:19:
         b2:5c:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----