Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/XuNfLn47mBlLyvaNeFRd4fbSB_g.roa
File:                     XuNfLn47mBlLyvaNeFRd4fbSB_g.roa (raw, json)
Hash identifier:          6TbcIJ7B8D625p9AfM2AWdmhOJFqv6WLt6XxOAvE+Sg=
Subject key identifier:   5E:E3:5F:2E:7E:3B:98:19:4B:CA:F6:8D:78:54:5D:E1:F6:D2:07:F8
Certificate issuer:       /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial:       018CC56E0A984B49177684CF7A783EDBC10C
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/XuNfLn47mBlLyvaNeFRd4fbSB_g.roa
Signing time:             Mon 01 Jan 2024 14:29:32 +0000
ROA not before:           Mon 01 Jan 2024 14:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210799
IP address blocks:        176.100.45.0/24 maxlen: 24
                          2a11:c780::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:0a:98:4b:49:17:76:84:cf:7a:78:3e:db:c1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
        Validity
            Not Before: Jan  1 14:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ee35f2e7e3b98194bcaf68d78545de1f6d207f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:04:db:16:2e:02:2e:7c:14:d1:44:30:cf:
                    c3:b3:a2:06:a2:9f:9d:b2:4b:d5:1a:38:dd:66:26:
                    f8:58:00:65:15:69:18:d8:30:f4:c1:8e:33:18:f1:
                    0f:80:ed:c4:d0:54:cb:7a:80:88:bc:70:1c:13:37:
                    fb:97:75:10:0c:d2:49:27:c1:01:a1:84:6e:cc:7e:
                    5a:76:ea:ea:23:67:4b:b6:41:e2:2d:87:07:17:35:
                    05:16:ff:cc:e0:f0:3c:3a:31:6d:03:1c:03:8c:5b:
                    d1:04:2a:0c:26:05:c3:92:9a:27:c7:07:4e:ad:e1:
                    96:d1:6c:cf:c8:da:56:ef:cf:ea:36:2f:7a:37:d4:
                    dc:77:c3:49:c3:7e:a1:c9:2a:57:e1:b4:76:09:1d:
                    da:27:9b:8e:63:10:e4:f9:1d:9d:b5:b3:fd:df:d8:
                    4c:0d:9f:17:84:7d:80:21:11:60:52:95:4f:72:07:
                    6a:19:dd:b1:9b:61:6d:72:51:b6:77:cc:f6:d5:ba:
                    34:b8:da:b8:32:04:dd:94:e9:0f:0f:b8:48:87:28:
                    cc:e3:94:d4:e9:2e:57:79:eb:cb:83:66:b0:e0:49:
                    11:2c:3f:b9:05:01:9a:ac:d8:ca:de:25:bb:1e:eb:
                    92:48:a5:04:f7:16:4a:c1:9d:4f:4c:c3:dd:b3:e9:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:5F:2E:7E:3B:98:19:4B:CA:F6:8D:78:54:5D:E1:F6:D2:07:F8
            X509v3 Authority Key Identifier:
                keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/XuNfLn47mBlLyvaNeFRd4fbSB_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.100.45.0/24
                IPv6:
                  2a11:c780::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:5c:ab:a6:6e:d2:b2:cc:3d:05:4d:cd:7f:ef:3d:25:8b:
         ca:52:91:c2:a5:85:6b:84:6d:a8:36:fa:d8:47:3e:db:87:a1:
         25:76:d4:c6:5a:0c:90:48:90:63:8a:86:c6:bf:0b:21:41:c3:
         6d:7c:83:74:e9:a3:2a:19:20:51:fd:4a:55:3f:a1:6c:c7:41:
         52:72:23:92:d7:19:05:02:cd:47:72:b9:cb:7e:f5:28:1f:31:
         a5:79:6e:6f:ba:29:3f:6f:18:2d:47:f2:60:6b:2f:ff:14:56:
         7b:7c:d6:2d:21:80:5b:d9:72:1b:14:71:35:c9:aa:ef:30:26:
         4c:51:b6:03:f8:df:49:67:f0:79:22:4a:4f:ee:7b:d7:16:2d:
         c0:94:45:eb:e2:58:66:2c:8c:3c:04:66:aa:6a:b7:9e:88:3f:
         e0:7f:83:72:54:89:8b:d4:83:e9:37:76:04:25:e0:66:66:6b:
         42:a7:f9:9d:08:7d:9e:28:96:fb:28:68:9e:d6:67:21:06:9e:
         ee:cf:fe:65:79:95:f6:1e:cf:70:f5:f1:27:0d:3a:e1:51:85:
         ca:e0:1a:d7:67:6b:64:d5:d8:2b:a2:20:ad:68:35:f8:9f:3c:
         07:ad:50:e5:65:e8:48:42:ba:1d:cc:fd:bf:52:f0:34:de:95:
         96:3b:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----