Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/IbnJBo1D2RWBkCh5wiMO2f3hbhc.roa
File:                     IbnJBo1D2RWBkCh5wiMO2f3hbhc.roa (raw, json)
Hash identifier:          z0GDb8r4VaoZz5LZvamRVUSpYMIHmFGFpFNnShMOlJ0=
Subject key identifier:   21:B9:C9:06:8D:43:D9:15:81:90:28:79:C2:23:0E:D9:FD:E1:6E:17
Certificate issuer:       /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial:       0193362DC7496E1E410DC87CBEFC0FCA9487
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/IbnJBo1D2RWBkCh5wiMO2f3hbhc.roa
Signing time:             Sat 16 Nov 2024 18:13:09 +0000
ROA not before:           Sat 16 Nov 2024 18:13:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214017
IP address blocks:        2001:67c:f3c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:36:2d:c7:49:6e:1e:41:0d:c8:7c:be:fc:0f:ca:94:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
        Validity
            Not Before: Nov 16 18:13:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=21b9c9068d43d91581902879c2230ed9fde16e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:bc:fb:f6:3a:0c:9c:7e:9c:eb:81:be:cf:
                    7e:44:98:41:5b:28:81:e7:5b:8b:9b:a3:3d:08:e1:
                    72:5a:45:62:69:dd:ab:ec:0c:e3:30:33:47:e9:49:
                    96:de:a9:77:2c:7c:94:a6:8d:57:7a:8d:19:dd:a3:
                    0d:13:f4:8c:70:73:d0:c5:b4:47:9b:2b:d1:b4:7c:
                    76:d2:66:99:1a:16:9a:f3:2a:a8:d5:ae:49:55:cc:
                    34:0b:42:81:94:81:75:cf:79:75:62:96:0a:4e:27:
                    84:81:61:6e:29:ec:59:24:3f:84:1d:ff:7c:62:11:
                    cd:0b:74:92:3e:b9:bc:42:c2:26:eb:f8:3b:b1:52:
                    25:1c:b5:71:de:58:7f:3b:ea:1f:7f:d3:31:a7:0d:
                    8c:6c:d1:47:df:83:1f:78:11:77:d3:83:e1:3e:3c:
                    bf:11:f4:35:be:60:ad:3b:ae:f3:4b:f6:e9:44:51:
                    ef:de:f9:7f:2b:c2:da:24:51:57:3e:1e:02:cd:d3:
                    9d:97:ad:f9:fe:3c:bf:8e:af:ff:bc:12:84:68:af:
                    18:31:64:a7:31:71:7c:b3:e4:7b:bc:80:2e:98:0b:
                    45:5e:e3:99:64:06:42:bb:2d:6c:ee:dd:de:04:83:
                    51:b7:d7:69:48:e9:3f:97:a6:85:13:76:14:31:16:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B9:C9:06:8D:43:D9:15:81:90:28:79:C2:23:0E:D9:FD:E1:6E:17
            X509v3 Authority Key Identifier:
                keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/IbnJBo1D2RWBkCh5wiMO2f3hbhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:80:4f:27:94:81:84:d0:d7:db:fa:c9:2c:39:a4:3e:af:
         a1:ef:2e:b9:88:8d:16:77:ba:49:c1:b2:9a:5e:e1:9c:c0:ff:
         82:85:dc:07:65:aa:c5:bd:74:84:a2:08:fd:a0:f8:6f:f6:c2:
         44:ac:b8:df:37:ef:d0:1a:f8:6b:7e:03:5f:54:c5:5f:58:09:
         37:9f:3e:30:0b:94:a6:ab:fe:80:15:89:63:4e:4e:6e:52:b3:
         29:7e:fc:d3:9a:18:37:0b:7c:fd:67:5f:a3:d1:5d:f2:54:82:
         50:41:5a:18:91:c3:1b:18:c6:6a:57:cc:94:f9:61:8a:5d:9f:
         c1:fe:d4:c6:a0:0e:48:2b:e6:26:b7:c5:6b:44:8a:31:4a:94:
         8a:d5:58:1b:39:5d:31:e4:b0:6a:e0:44:e5:46:58:6a:49:72:
         30:21:bc:db:ae:26:89:cf:29:65:21:57:e0:68:68:8e:3f:73:
         8d:31:c3:a5:76:54:23:c0:11:68:3a:f6:48:1f:9b:38:84:91:
         b7:a7:72:8f:d7:60:56:78:5a:81:8d:e4:c1:5b:1f:7e:52:eb:
         a4:a5:ff:2d:bf:47:13:45:43:03:d5:a5:61:bb:7d:52:94:4a:
         e8:8e:15:87:ea:81:36:04:1f:3d:a6:c8:39:9a:ed:97:22:b0:
         eb:5d:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----