Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa
File:                     Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (raw, json)
Hash identifier:          +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=
Subject key identifier:   43:A1:0B:20:61:8C:C8:05:8B:3F:6F:BC:02:29:E9:37:B7:42:3F:E2
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       019423698B974823B5E02CADEA64A58B2F59
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa
Signing time:             Wed 01 Jan 2025 19:48:27 +0000
ROA not before:           Wed 01 Jan 2025 19:48:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212379
IP address blocks:        2a01:190:1802::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:8b:97:48:23:b5:e0:2c:ad:ea:64:a5:8b:2f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  1 19:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=43a10b20618cc8058b3f6fbc0229e937b7423fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:94:04:bb:8b:0c:45:7a:1d:c3:e2:e1:eb:
                    68:31:db:13:62:4c:8f:2d:6b:7a:5e:f2:9e:76:5e:
                    d7:04:0f:e8:ed:b1:25:0a:35:a7:a4:83:71:14:78:
                    55:cd:67:46:29:f4:9d:77:97:bd:98:ee:a0:c8:6f:
                    b9:2b:a8:8c:dd:f2:c4:f5:16:d7:2e:b1:03:7f:c7:
                    cb:24:8d:0f:9a:da:57:99:5f:b8:92:de:04:23:ec:
                    be:fc:58:68:d4:ec:ff:32:62:86:39:50:fb:89:1f:
                    b8:d9:99:e3:b2:fa:0f:d9:28:da:96:93:d2:cc:29:
                    22:0a:9b:d5:b4:b7:36:9f:50:6c:63:64:60:55:6f:
                    ae:a1:03:a6:f9:93:33:06:31:b0:c5:ab:4a:17:8f:
                    9c:99:41:6e:c3:33:fc:07:6f:70:ce:31:2c:6f:3c:
                    a0:a1:43:16:7e:12:01:34:8b:a0:54:04:e3:2f:6b:
                    33:ee:a5:16:0e:71:65:32:1d:7f:37:85:45:b6:da:
                    25:09:43:fb:6b:a2:36:5a:ba:f2:d5:a6:d5:e4:2a:
                    a4:a2:8d:4a:e4:18:e2:9e:03:76:06:a0:3e:2c:8e:
                    a8:06:01:73:6a:c1:75:b5:6f:42:18:20:29:90:19:
                    40:d1:02:bf:4c:49:33:c7:37:da:eb:a5:d4:d9:04:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A1:0B:20:61:8C:C8:05:8B:3F:6F:BC:02:29:E9:37:B7:42:3F:E2
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:1802::/48

    Signature Algorithm: sha256WithRSAEncryption
         ea:aa:fd:1e:8f:19:14:cc:33:59:fa:cf:ba:1e:3d:77:7d:04:
         68:a1:88:88:13:d3:50:bb:6c:40:ff:3f:85:c5:42:33:c2:a7:
         80:fc:c8:dd:24:2b:3d:9a:69:f2:3c:42:ec:75:a4:95:9e:f8:
         32:7b:75:ff:f3:e1:ea:10:8f:86:22:40:d4:39:ab:ce:eb:64:
         04:7d:4c:99:64:44:23:53:37:56:73:72:15:7a:6d:5e:a7:c9:
         16:a1:0e:8c:e2:3e:55:00:2d:c2:67:62:4e:fe:7a:8d:88:58:
         45:f9:6e:16:76:fa:e5:8d:0d:1d:07:1f:58:57:df:5c:82:22:
         3d:2b:e9:8e:98:23:be:d6:94:a1:33:58:bf:05:78:b6:e6:fa:
         33:b5:a8:a4:04:a7:c1:ee:ea:1b:7d:fa:47:9f:2e:24:65:c9:
         52:a0:2f:da:34:7b:e5:69:bd:3e:49:cc:8a:0e:90:02:68:84:
         9e:67:e7:13:8e:26:e9:ca:e8:6a:63:31:64:e6:8b:f1:21:a9:
         88:ec:bc:4b:73:aa:27:c5:9a:b8:b1:cb:85:37:e1:e9:c3:28:
         25:bb:b7:5d:11:90:72:dc:2e:6f:c8:16:3f:6b:0b:cb:54:0e:
         3b:c1:e6:d4:7c:f6:8a:dd:1b:54:5a:31:2b:0e:5b:82:8e:61:
         f9:b5:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----