Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/vzK0GcfKIhsh5S1UL0NdOS-MO04.roa
File:                     vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (raw, json)
Hash identifier:          tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=
Subject key identifier:   BF:32:B4:19:C7:CA:22:1B:21:E5:2D:54:2F:43:5D:39:2F:8C:3B:4E
Certificate issuer:       /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial:       0194258F79A249A2D21B6B4C47A56063A240
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/vzK0GcfKIhsh5S1UL0NdOS-MO04.roa
Signing time:             Thu 02 Jan 2025 05:49:07 +0000
ROA not before:           Thu 02 Jan 2025 05:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212702
IP address blocks:        2a0d:ca00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:79:a2:49:a2:d2:1b:6b:4c:47:a5:60:63:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf32b419c7ca221b21e52d542f435d392f8c3b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:22:76:6c:2f:12:5f:36:18:06:30:aa:2d:
                    83:3b:fa:a4:b7:bd:d7:1c:ec:35:cf:2d:60:b7:ee:
                    9c:5c:7f:5e:4a:e1:e0:5a:bb:30:34:20:87:41:47:
                    65:a6:b6:58:56:65:b7:62:9b:05:1b:4c:4d:f8:b7:
                    c5:92:e1:1c:11:1d:9c:d5:e1:9e:55:37:1b:b3:da:
                    5c:88:3d:65:a7:d6:07:a8:ed:ee:12:1d:74:8d:30:
                    f1:d5:9c:45:7e:55:37:9c:05:3b:b5:d1:b1:40:87:
                    1c:8c:37:31:99:e0:91:80:63:19:6b:79:60:f2:68:
                    78:18:5b:76:07:70:34:00:03:d2:4e:91:aa:df:e1:
                    82:6c:7b:04:0e:24:00:d0:4a:ec:65:fc:f3:d7:d0:
                    3b:85:47:4d:d0:58:3c:69:44:7b:e9:47:bc:6f:73:
                    e6:65:b0:9c:46:95:d7:2b:15:fe:4a:66:28:93:1d:
                    f9:37:cb:34:22:fe:ef:4a:48:88:12:05:3a:ce:60:
                    de:da:0a:28:9f:26:3d:1a:b0:29:8d:7e:ef:8c:b1:
                    06:9d:b3:e2:22:f5:27:65:bd:2d:b5:5a:62:4d:7c:
                    5f:ca:7e:e1:04:60:f1:11:a2:f5:fc:65:a5:8e:e7:
                    9e:bf:01:a6:1d:79:cf:4d:e4:ec:da:2c:a2:97:47:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:B4:19:C7:CA:22:1B:21:E5:2D:54:2F:43:5D:39:2F:8C:3B:4E
            X509v3 Authority Key Identifier:
                keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/vzK0GcfKIhsh5S1UL0NdOS-MO04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:0f:d6:2d:66:a8:fa:3c:8e:21:ac:de:c6:05:2e:90:07:
         37:43:f5:8e:de:b2:cf:fa:7c:e9:81:d8:fe:fe:7c:0d:18:5a:
         fd:81:38:c1:12:4e:a5:79:79:c4:e7:65:20:8e:fc:2d:45:56:
         39:51:3e:d3:b2:88:5a:34:b8:0a:8b:f1:24:4c:f9:06:7b:ef:
         4b:88:af:80:cb:33:62:ed:8a:1b:4a:9d:e7:06:bd:af:02:43:
         eb:1b:a3:8f:a6:f2:8c:58:0d:e9:8e:80:5a:43:88:90:2e:b1:
         d4:72:93:18:c2:7a:7f:18:e9:db:ef:e3:09:35:50:37:3b:13:
         a9:36:1b:0c:66:3d:d5:32:2a:f9:4a:ff:58:fe:6a:7e:ab:33:
         ef:2f:9c:80:2b:af:52:5b:8d:06:7e:57:f4:c2:34:42:e5:f6:
         f3:9c:00:27:f0:4e:d3:f2:b4:44:43:28:5d:e7:6a:ed:ac:d7:
         bb:a0:9e:01:d9:44:37:51:df:db:35:dd:11:c2:ab:0e:35:c2:
         b9:55:80:25:47:3d:5b:6f:f8:d7:4d:d3:04:a8:77:b1:03:d3:
         a4:ee:70:24:98:da:6a:ad:1c:c0:ea:95:44:16:59:ee:df:38:
         f8:8f:59:39:b8:95:53:9e:fa:6e:56:75:3a:86:a4:83:bc:e4:
         59:97:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----