Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa
File:                     vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa (raw, json)
Hash identifier:          TQXfDEJaWBuIVRDifgPe75hUlhqUjg92NoyfFjag6ds=
Subject key identifier:   BC:A2:41:19:28:D6:BC:68:8F:DB:ED:00:73:F8:3C:A4:20:89:A2:AD
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       018CC4930D2186F2CE094FF6535537035B82
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa
Signing time:             Mon 01 Jan 2024 10:30:20 +0000
ROA not before:           Mon 01 Jan 2024 10:30:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207791
IP address blocks:        2a01:190:151e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:0d:21:86:f2:ce:09:4f:f6:53:55:37:03:5b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  1 10:30:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bca2411928d6bc688fdbed0073f83ca42089a2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:47:36:f0:ae:eb:c8:20:25:27:6f:4a:e3:
                    72:9a:50:26:33:8b:65:5b:76:fd:8f:76:a5:41:9d:
                    18:ed:f4:fc:91:60:5e:9e:a4:aa:25:d6:7e:83:e7:
                    ac:2e:f7:8d:d5:6e:61:8c:a1:66:f7:a5:fb:77:c2:
                    4a:75:89:21:6b:8d:7e:f5:12:dd:bf:aa:34:52:72:
                    ba:51:26:92:25:4c:8c:52:ad:58:ca:11:c5:a3:e9:
                    87:e2:c6:6a:ab:2b:bf:ad:a1:2f:d1:d0:6b:91:a8:
                    58:46:08:00:59:1b:ff:2e:ef:3b:61:2c:43:7b:08:
                    ca:09:3d:49:2e:92:24:4f:28:c3:71:d9:33:58:fb:
                    45:ae:6d:c3:3f:35:95:03:12:06:d8:8a:1e:b6:c2:
                    d0:ea:86:5e:7b:f1:2f:c2:f8:91:7b:9a:8e:f9:b7:
                    00:61:0c:b8:61:5a:bb:ee:07:aa:cd:d4:89:93:68:
                    52:57:93:45:0d:77:75:4e:5d:ee:2a:06:87:0d:0c:
                    f0:49:a0:4b:c4:df:81:b1:2a:f6:80:74:b5:63:e6:
                    89:3f:d3:3f:c9:76:83:77:42:ec:7c:5d:dc:4a:af:
                    84:a3:f2:71:5f:4a:2a:54:a9:36:23:77:04:af:3d:
                    6d:e5:74:8a:84:2b:f9:d2:8e:94:47:47:67:17:77:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A2:41:19:28:D6:BC:68:8F:DB:ED:00:73:F8:3C:A4:20:89:A2:AD
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:151e::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:cc:ff:09:f1:c8:44:36:a9:a9:80:34:42:72:0b:04:ec:
         fc:ea:3e:0b:ec:63:11:b6:6a:c1:02:07:3c:e7:b7:77:eb:2a:
         da:83:2e:45:8c:e8:36:d8:2e:7e:d5:ea:0d:95:5e:75:9e:4a:
         be:a9:4c:79:95:37:d6:78:69:08:ef:7e:a9:5d:a4:e4:09:53:
         fa:94:56:14:2f:8a:c4:4c:55:ad:62:c5:7f:12:86:a2:ed:62:
         1a:79:7d:61:df:11:e5:3a:3a:05:0f:20:07:d6:20:87:0a:af:
         75:97:52:fe:e9:8c:3e:01:f8:46:6d:38:37:09:db:d2:06:d4:
         28:2e:a6:bd:f1:d6:52:c1:8a:4a:7b:5d:fe:c1:53:35:f2:d4:
         48:6c:34:65:eb:e2:0c:d6:13:97:31:a6:d7:71:0f:8e:b6:ac:
         cb:6e:3c:0c:ee:63:73:45:d2:43:b3:f0:f1:a8:e5:fc:6c:9c:
         59:ad:37:d4:44:78:de:20:a7:3d:d8:72:3a:2a:cc:63:35:4d:
         76:00:34:9e:f0:d6:c7:a6:98:9d:70:1b:9e:6c:cc:7b:db:53:
         3b:a9:c2:61:ee:1d:b8:0e:1f:d1:be:51:53:44:4c:40:ab:a1:
         80:da:6d:61:e6:d6:ca:c0:79:ad:29:bc:3f:c3:a8:c4:13:81:
         98:f3:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----