Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa
File:                     4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (raw, json)
Hash identifier:          sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=
Subject key identifier:   E0:9D:57:E8:F0:85:DF:DB:47:D0:7A:38:FD:26:C9:EC:0B:71:0D:B8
Certificate issuer:       /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial:       019426D91FFAFFF42FA268008F81DCEA48C5
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa
Signing time:             Thu 02 Jan 2025 11:49:11 +0000
ROA not before:           Thu 02 Jan 2025 11:49:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212515
IP address blocks:        2001:678:e34::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:1f:fa:ff:f4:2f:a2:68:00:8f:81:dc:ea:48:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
        Validity
            Not Before: Jan  2 11:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e09d57e8f085dfdb47d07a38fd26c9ec0b710db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:a1:91:d0:7f:44:e3:c3:c9:06:0f:71:d9:
                    fa:28:15:92:3b:87:e3:7a:0f:d6:7c:b5:19:a7:92:
                    87:8d:1a:c7:5c:57:14:15:1b:11:eb:d2:f2:7f:69:
                    76:d0:71:1b:f3:7d:23:c9:04:17:e3:17:a1:d0:58:
                    ee:8d:b9:01:fd:b2:71:64:dd:c6:cb:68:0b:1e:f2:
                    99:88:89:89:9b:80:e0:ac:fd:19:ea:f0:c7:8b:6d:
                    44:42:3c:e9:fb:7a:d7:be:16:f7:76:c4:e3:bc:9a:
                    36:f6:ee:bf:cd:7f:7f:b7:4c:d5:f3:3d:43:e3:2a:
                    21:ab:1f:72:74:53:5b:2d:f1:09:21:86:06:01:c9:
                    2b:95:38:75:84:ee:82:54:8c:fc:10:1d:13:94:de:
                    0a:2b:50:38:46:63:7c:b5:91:9d:a6:94:e5:a3:1e:
                    d8:23:44:53:a2:03:23:10:f2:55:81:6e:22:06:69:
                    27:df:19:b3:de:a1:94:19:5f:a1:e5:fc:76:bc:89:
                    55:e7:43:3a:67:02:5a:13:87:b3:9a:e7:7e:28:47:
                    63:d8:08:44:23:f5:4c:b4:73:10:36:12:2b:bf:66:
                    d1:3c:17:75:a4:6e:23:f2:c0:a2:1c:83:8b:2c:aa:
                    2a:78:9b:b1:1e:81:e1:ca:a9:a0:55:b0:a7:77:8b:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:57:E8:F0:85:DF:DB:47:D0:7A:38:FD:26:C9:EC:0B:71:0D:B8
            X509v3 Authority Key Identifier:
                keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e34::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:a5:30:58:b9:06:82:65:28:0e:08:9f:83:d2:3a:b7:38:
         b5:bc:5d:a1:da:b0:bd:ac:92:7e:cb:7a:db:f2:4a:98:3b:bb:
         22:02:27:be:d1:7c:39:6c:52:0c:45:72:26:76:32:c0:5e:f3:
         09:07:84:f5:97:03:0e:cd:68:4d:89:da:87:1d:8f:82:5c:07:
         16:10:dc:da:b3:94:95:98:ca:31:90:75:2f:d8:9b:69:62:6e:
         b3:7d:32:24:fb:b6:f2:ff:7f:7e:37:5e:63:57:ba:e7:aa:90:
         e4:42:e9:2f:b6:0b:4b:72:6d:a8:94:a7:00:bc:b0:62:43:21:
         3b:7c:38:20:08:51:eb:85:15:73:b5:aa:da:01:be:72:2a:5c:
         ba:b7:5e:1a:cb:da:21:81:62:08:5f:3e:22:05:8c:2c:cb:9d:
         a9:1b:fb:56:07:8c:81:b2:b0:39:4e:d7:7e:3a:80:74:11:b0:
         c7:02:e9:78:4f:16:31:5a:a8:74:38:9f:b4:38:9d:38:2e:1f:
         4e:35:e0:bb:ec:a9:81:98:5e:52:54:d9:89:89:a6:39:42:7d:
         cf:de:ed:8c:66:87:1c:d1:7c:c5:94:07:e3:fb:0f:11:f1:2a:
         c6:bb:0f:cd:c5:7c:51:64:81:e7:3b:1e:fa:32:01:ad:59:02:
         ee:d1:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----