Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jz8QVtmJRrriV72-7g93MN3QC1A.roa
File:                     jz8QVtmJRrriV72-7g93MN3QC1A.roa (raw, json)
Hash identifier:          MGHzyEeVG4jeNcsd7rUyC1wd9RuWJcOznE7sfSi6JLc=
Subject key identifier:   8F:3F:10:56:D9:89:46:BA:E2:57:BD:BE:EE:0F:77:30:DD:D0:0B:50
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       0193539F51E01A93C513E1197543C0FD15A2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jz8QVtmJRrriV72-7g93MN3QC1A.roa
Signing time:             Fri 22 Nov 2024 11:26:10 +0000
ROA not before:           Fri 22 Nov 2024 11:26:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0f:f42::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:9f:51:e0:1a:93:c5:13:e1:19:75:43:c0:fd:15:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Nov 22 11:26:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8f3f1056d98946bae257bdbeee0f7730ddd00b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:07:9a:f3:8e:79:64:d8:ac:2e:71:51:dc:
                    c0:2a:31:89:40:e6:0d:ce:21:f3:29:15:68:45:1c:
                    22:58:0c:af:6a:bc:5d:c7:6c:d3:e6:2b:96:ab:c5:
                    da:f3:38:34:0a:69:10:82:a9:6b:f8:d9:21:39:51:
                    f9:89:8e:e7:4d:3d:6e:55:8e:92:dd:be:2b:6a:27:
                    1c:c0:0b:3e:62:80:62:22:f8:d6:a3:ae:8f:75:c0:
                    fb:f5:a2:78:56:9f:09:b4:3b:d7:7d:9a:8f:aa:af:
                    cd:72:e4:c6:8c:3e:16:0e:9f:70:1b:39:9f:76:e6:
                    7f:7b:40:37:2e:c6:a6:72:75:19:32:c4:53:73:36:
                    a5:84:d4:a9:06:59:eb:3c:79:67:67:a1:57:fa:8a:
                    ee:68:4e:dc:1f:f0:15:95:26:9c:d9:ad:56:11:29:
                    3d:26:02:82:54:b8:0e:dd:28:8a:2b:27:7c:90:85:
                    93:43:1a:9f:38:84:86:47:7a:04:0e:f7:b9:82:ac:
                    7c:33:ff:08:18:9f:ce:f9:56:58:50:21:7a:7e:bc:
                    21:8e:db:9f:2c:fd:dd:50:c7:8a:c1:de:65:4f:59:
                    39:86:ab:8d:11:23:83:34:b0:c1:d0:ba:b1:5d:57:
                    3f:7d:83:78:db:09:65:af:1c:37:f8:98:98:47:a2:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3F:10:56:D9:89:46:BA:E2:57:BD:BE:EE:0F:77:30:DD:D0:0B:50
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jz8QVtmJRrriV72-7g93MN3QC1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:f42::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:54:0e:91:e6:7d:d1:b6:93:b6:59:16:f7:4b:22:90:cc:
         3c:0d:31:3b:f1:72:ee:65:8c:b0:df:42:38:f3:47:49:a1:db:
         81:ab:02:e8:72:bf:74:c2:20:3b:d1:56:cf:68:2b:69:c0:a3:
         2f:65:62:c7:13:27:ae:65:6d:a1:a9:79:81:11:23:65:77:51:
         04:9f:d0:01:a6:07:16:10:ba:21:ec:c9:0d:af:3e:e8:25:74:
         e0:a6:4e:eb:be:cc:13:6d:e0:c7:48:bc:ea:67:45:c6:a1:86:
         ac:4c:02:d8:08:b7:f3:8b:19:6c:ca:94:4c:1e:f0:56:5d:13:
         51:d5:d5:9c:d6:73:ad:4f:b0:cf:41:07:35:18:79:f9:ab:8a:
         f5:e1:9d:01:e9:79:23:1c:ba:bd:76:d4:18:58:22:67:c3:9f:
         94:58:90:52:7c:65:e6:3b:a3:cf:b8:50:8c:5a:9d:c5:94:23:
         13:4b:21:72:ef:3e:7a:f1:e7:86:6e:3a:76:39:cf:b2:33:7d:
         27:5e:98:82:50:2e:55:5a:1a:15:43:b6:41:22:5e:b5:42:2f:
         7d:88:3e:d0:33:85:7b:17:19:3d:30:9c:8e:2c:7d:e8:bb:cc:
         8b:6d:b2:b8:25:b6:d3:bd:27:76:9c:10:03:80:22:ee:33:95:
         4d:fb:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----