Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa
File:                     Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (raw, json)
Hash identifier:          5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=
Subject key identifier:   66:BD:69:2C:AE:C0:BC:4C:7B:0A:CE:FA:A8:D8:E1:25:B4:C5:44:1E
Certificate issuer:       /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial:       0194221F77D47301FC6BDB6972EFB73608E1
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa
Signing time:             Wed 01 Jan 2025 13:47:55 +0000
ROA not before:           Wed 01 Jan 2025 13:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202878
IP address blocks:        2001:678:1a8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:77:d4:73:01:fc:6b:db:69:72:ef:b7:36:08:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
        Validity
            Not Before: Jan  1 13:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66bd692caec0bc4c7b0acefaa8d8e125b4c5441e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a5:4f:76:88:71:2c:ed:5f:eb:57:e5:80:09:
                    82:3d:49:f4:4f:4a:9b:b3:8d:4e:bd:6a:65:62:a4:
                    e8:97:ce:a2:f9:27:03:a0:6c:4c:5b:80:b6:50:c9:
                    d4:d9:9e:8b:e6:9a:00:a0:a4:45:90:72:36:44:77:
                    8e:22:05:40:88:6e:e0:d1:4b:2b:10:eb:d3:b5:2b:
                    11:94:ce:0f:ac:47:c4:3b:3d:7f:3f:64:fa:ba:1b:
                    59:7f:a5:87:0e:e7:16:3a:87:86:71:41:4c:b9:90:
                    09:a9:19:8a:2e:52:c5:a2:b4:7c:8c:24:8d:d7:aa:
                    e6:28:bf:24:2e:ea:c3:c0:c4:cf:51:64:39:59:c2:
                    f5:3b:1c:e1:92:83:75:3a:25:25:25:b1:5f:95:89:
                    b1:8e:41:06:12:f8:09:78:00:21:b8:48:12:32:5e:
                    40:58:bb:fb:bf:6f:b5:00:04:09:37:9c:79:8d:ca:
                    89:49:d1:20:13:c0:3c:02:21:21:ac:f0:58:76:9f:
                    d5:58:8b:63:f6:a9:6d:16:59:05:f8:2a:4c:88:fb:
                    56:13:c0:1a:34:13:41:8e:e8:f5:39:99:a6:a3:10:
                    21:27:4b:4b:d1:f3:58:60:14:9c:8e:17:9e:a1:ac:
                    86:64:b0:3d:06:4d:a9:d9:35:15:e7:e3:a5:d1:ce:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:69:2C:AE:C0:BC:4C:7B:0A:CE:FA:A8:D8:E1:25:B4:C5:44:1E
            X509v3 Authority Key Identifier:
                keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         dd:bb:a1:8e:82:3e:9c:3f:1e:65:67:bd:f0:20:3a:1e:c8:4e:
         fb:6d:79:7e:1e:91:3d:f8:39:30:e1:37:7c:ca:68:22:7e:85:
         cf:fe:7a:60:37:24:1e:46:ae:f2:36:f4:91:70:a7:39:16:b7:
         20:2f:4d:b3:e5:2f:7b:34:30:2e:c3:93:b6:c5:e2:3e:cf:be:
         48:33:8b:90:b8:b6:76:29:fb:3a:f8:75:5d:f7:b8:f8:0e:2c:
         71:a4:38:85:df:16:15:f1:a7:ff:1f:b5:0f:4e:5b:9d:2a:ff:
         27:21:53:e5:ef:5b:67:f7:11:5c:4c:79:80:4a:d4:a9:a6:e6:
         cb:63:f4:20:65:34:90:1b:73:c9:c3:18:a0:07:31:68:06:f6:
         cc:fb:00:ab:31:d6:b8:91:6e:a6:22:ab:c0:b6:cb:f5:8b:fb:
         c3:49:b7:76:dc:ba:dd:0e:2e:ee:a4:40:eb:68:3f:c7:eb:91:
         b1:dc:8a:f7:54:12:aa:2e:93:6c:5f:6e:e6:e3:db:32:27:c6:
         49:db:76:f8:09:51:d6:89:03:67:01:93:d6:92:93:5a:db:fb:
         6d:aa:05:36:ad:fe:ec:18:95:b6:79:01:93:3f:14:9c:60:4a:
         43:17:83:ac:02:e3:81:1b:25:c3:8e:aa:20:94:02:74:4c:74:
         00:7a:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----