Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/GuOxTYiAbL6uGDYCaf5Rg1M9UUc.roa
File:                     GuOxTYiAbL6uGDYCaf5Rg1M9UUc.roa (raw, json)
Hash identifier:          ML3ORdVwQ9tCwPfNtudxCbHBVvOveAoe3GVf1RIM+Vs=
Subject key identifier:   1A:E3:B1:4D:88:80:6C:BE:AE:18:36:02:69:FE:51:83:53:3D:51:47
Certificate issuer:       /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial:       0193969DE301F400519C8ACFDE49B5F9CB60
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/GuOxTYiAbL6uGDYCaf5Rg1M9UUc.roa
Signing time:             Thu 05 Dec 2024 11:39:09 +0000
ROA not before:           Thu 05 Dec 2024 11:39:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200694
IP address blocks:        2001:67c:1344::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:96:9d:e3:01:f4:00:51:9c:8a:cf:de:49:b5:f9:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
        Validity
            Not Before: Dec  5 11:39:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1ae3b14d88806cbeae18360269fe5183533d5147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:74:b3:b6:06:fa:82:28:3d:86:02:ac:f2:
                    fb:48:cc:ef:9a:4f:6c:7e:da:6c:4b:c4:c2:2d:e2:
                    ec:a2:08:2e:72:3a:48:8e:74:a5:28:f7:57:df:30:
                    b1:bd:63:bf:b3:4e:ee:6f:99:1a:c7:d4:38:81:c8:
                    6e:d9:83:83:4b:cc:ce:f0:8c:20:6e:2c:92:12:c6:
                    91:fa:20:06:0a:16:23:93:d1:9c:e0:38:0e:89:74:
                    ef:0c:f3:6b:c2:eb:de:ae:ab:7c:42:b7:50:09:15:
                    e5:f8:9a:9d:93:65:2a:81:44:23:24:c2:85:65:d8:
                    10:1d:69:a9:f3:b1:73:3e:78:27:b8:d2:aa:13:ff:
                    eb:49:2e:19:cb:b7:0e:5f:03:b0:55:2f:22:cb:0e:
                    4c:f4:7a:fe:ef:3f:5b:b1:b3:88:e1:28:38:3c:eb:
                    a5:7a:5d:63:76:b1:95:99:68:18:7b:30:bb:2a:47:
                    61:6b:cd:e2:ba:da:a6:04:5b:c6:4f:91:4e:78:02:
                    ba:7b:70:c4:22:0d:7d:ff:79:fc:2f:10:d5:8c:cc:
                    cb:f4:4a:fe:2a:4e:a8:88:1a:f2:6d:3d:64:80:16:
                    03:c3:25:ba:78:fb:3f:7b:f6:44:e4:b9:2e:5c:65:
                    65:49:3d:8b:e3:5f:f6:3f:23:53:08:bf:11:2b:c7:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:B1:4D:88:80:6C:BE:AE:18:36:02:69:FE:51:83:53:3D:51:47
            X509v3 Authority Key Identifier:
                keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/GuOxTYiAbL6uGDYCaf5Rg1M9UUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1344::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:83:c1:db:00:f5:24:6c:6f:6d:13:4f:df:12:59:ca:f3:41:
         1b:e7:6c:2d:a8:82:96:69:de:63:00:63:4c:9b:39:7a:9b:d0:
         b5:3c:d7:3d:d6:e5:3c:a8:25:fd:00:19:4d:49:a6:1f:3e:ea:
         a6:a5:99:4b:c3:58:18:72:a0:1f:24:ce:d0:12:6f:fd:f8:30:
         90:5e:0b:f1:d1:38:e5:dc:06:72:71:0f:97:bf:60:e7:27:b2:
         b0:f2:cf:d0:ba:3c:b9:eb:6d:d4:3c:21:fa:b2:65:b5:11:3a:
         8d:4b:6e:22:01:93:9d:20:f5:69:f1:9a:b6:14:fb:31:9b:15:
         2f:20:91:2c:b1:2a:98:71:e4:b7:ab:3e:25:a2:f3:7c:65:7c:
         25:27:20:88:09:11:ef:0c:06:ee:80:c7:fb:2b:4e:17:9b:51:
         09:b1:2a:91:aa:31:99:25:ec:0d:43:cc:91:92:6f:17:49:8e:
         a1:ed:72:2c:8f:1e:0d:8c:0f:d1:cd:95:9f:e1:75:07:17:a4:
         6c:2e:26:d3:a9:30:5e:b7:31:27:c0:bb:33:cd:c1:72:60:3b:
         19:13:55:c9:d2:5f:b3:48:01:06:ba:87:4c:29:dc:e6:16:f5:
         f4:3a:05:43:3c:84:df:41:df:c9:7b:84:b4:72:c0:a4:09:2a:
         20:76:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----