Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/yy8ifmrJOdDJ6VZXl3sBOQfhFtw.roa
File:                     yy8ifmrJOdDJ6VZXl3sBOQfhFtw.roa (raw, json)
Hash identifier:          bs5HiC6seRwtGHAcycze3szBMnlnp0WY6NUtBhi6uTQ=
Subject key identifier:   CB:2F:22:7E:6A:C9:39:D0:C9:E9:56:57:97:7B:01:39:07:E1:16:DC
Certificate issuer:       /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial:       019367F156FD65F6355314859A0633798F2E
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/yy8ifmrJOdDJ6VZXl3sBOQfhFtw.roa
Signing time:             Tue 26 Nov 2024 10:08:09 +0000
ROA not before:           Tue 26 Nov 2024 10:08:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215261
IP address blocks:        2001:67c:fac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:f1:56:fd:65:f6:35:53:14:85:9a:06:33:79:8f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
        Validity
            Not Before: Nov 26 10:08:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cb2f227e6ac939d0c9e95657977b013907e116dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:04:0f:b9:61:7f:1e:27:ba:46:71:24:7d:
                    77:13:b4:22:92:41:1d:9e:47:11:9a:e4:d8:3f:8d:
                    26:4f:07:f7:eb:8f:04:34:f1:14:6f:99:74:1d:8f:
                    70:49:43:13:0d:45:8a:6a:5b:1d:a3:ae:dd:22:dd:
                    fc:da:d9:c1:09:c5:34:97:1b:d0:21:32:2c:38:53:
                    21:77:73:2b:c7:58:69:7d:58:92:45:c3:f6:ac:fc:
                    2a:24:91:80:9a:ae:91:86:2b:ea:88:fe:97:2f:2c:
                    fe:7c:8c:c7:f4:af:5f:2b:5f:dc:12:97:9b:39:be:
                    87:bc:11:fc:23:49:76:07:40:d1:f7:f6:62:36:50:
                    4a:d7:f8:44:7b:dc:97:b5:51:8c:6a:d1:d7:34:10:
                    91:13:8e:5e:78:03:5a:9b:cd:0d:4f:4b:4b:cf:79:
                    b5:90:0f:85:a2:10:ab:7f:b7:e5:6a:87:aa:3d:d7:
                    19:12:77:92:d4:11:6e:42:cc:d0:ee:e3:af:83:d1:
                    95:72:25:7e:5f:5d:bc:60:e0:8f:a8:01:f4:fd:af:
                    6d:99:18:12:f0:6e:56:5f:9b:6d:32:8d:ad:bb:0b:
                    28:78:6c:34:41:8b:64:91:4c:a5:41:0e:3e:9e:64:
                    d5:9c:81:b5:a4:6f:7e:52:aa:99:f7:ed:a7:41:bf:
                    28:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2F:22:7E:6A:C9:39:D0:C9:E9:56:57:97:7B:01:39:07:E1:16:DC
            X509v3 Authority Key Identifier:
                keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/yy8ifmrJOdDJ6VZXl3sBOQfhFtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:fac::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:1f:7a:0e:ac:83:a7:6b:1f:e3:ff:eb:ef:54:f5:a6:07:
         8c:83:37:f8:a8:9f:a7:b8:15:4c:ab:a0:63:1f:5b:00:ff:6f:
         30:fc:c9:ba:6c:08:56:87:4a:d6:49:21:10:f9:93:85:f1:79:
         2c:cb:d7:aa:9c:b2:78:e2:d3:2b:9a:d3:60:01:2f:d2:9a:96:
         8c:6e:09:f5:5a:0a:c5:f8:6a:45:a1:a5:a6:e3:ef:d4:06:17:
         df:40:1a:e1:a4:67:1c:d9:17:85:5c:c0:ed:3b:3d:94:4b:b8:
         51:c3:17:29:6e:06:53:f6:69:85:ea:7a:35:72:2a:bc:e1:33:
         41:1d:f7:12:bd:dc:75:cd:1c:bf:27:2a:51:f3:6d:50:bc:db:
         8d:b0:16:2f:b3:86:91:d4:40:e3:11:98:cc:2e:00:86:7e:28:
         6e:6c:03:15:43:76:8f:f4:fc:d4:ef:5f:44:d1:26:b7:fa:5b:
         a4:2a:6c:83:80:ee:53:ec:0b:73:9a:e6:c3:73:b2:51:99:bd:
         bc:5a:53:1d:d7:a3:5a:61:25:5e:e0:4c:84:b0:df:83:78:22:
         2d:2b:45:43:1a:f9:0b:72:d0:d5:ad:10:22:ad:0a:a6:f6:a9:
         e7:7d:64:46:08:59:d4:0f:ee:b7:a9:72:18:63:4c:3c:2c:cb:
         00:e6:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----