Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/cMnqdtCxCnyUSWOfUxTVBWPspak.roa
File:                     cMnqdtCxCnyUSWOfUxTVBWPspak.roa (raw, json)
Hash identifier:          OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=
Subject key identifier:   70:C9:EA:76:D0:B1:0A:7C:94:49:63:9F:53:14:D5:05:63:EC:A5:A9
Certificate issuer:       /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial:       019421B1B6B590B0C30CB688C7F291BAC993
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/cMnqdtCxCnyUSWOfUxTVBWPspak.roa
Signing time:             Wed 01 Jan 2025 11:48:02 +0000
ROA not before:           Wed 01 Jan 2025 11:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213204
IP address blocks:        2001:678:d50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:b6:b5:90:b0:c3:0c:b6:88:c7:f2:91:ba:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
        Validity
            Not Before: Jan  1 11:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=70c9ea76d0b10a7c9449639f5314d50563eca5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:d2:0a:07:12:da:9f:76:1c:72:08:1e:d3:
                    23:8b:1c:e8:6f:1f:fd:f2:bc:0a:8f:7a:b1:1d:80:
                    a0:e7:d3:b9:64:42:7f:b5:6f:96:6b:67:c3:be:5a:
                    be:c7:ca:85:fe:ef:ad:5f:1f:bd:55:9d:91:15:1c:
                    eb:25:e2:82:ce:b5:9f:63:2a:6f:6f:1f:a4:52:0d:
                    39:14:9a:76:1e:f7:d8:56:74:34:d7:d3:f3:61:27:
                    6c:36:02:ba:74:4e:92:ae:12:d9:41:01:fa:84:81:
                    7d:fe:2d:59:eb:e7:34:ac:13:ec:dd:68:58:7a:1c:
                    aa:cc:05:2e:68:64:b9:4a:56:bd:c2:dd:11:5f:38:
                    3f:62:12:85:1e:07:75:c3:f2:1f:10:12:bf:8b:f4:
                    fb:9e:af:14:53:2f:af:c2:26:1f:0c:60:4c:75:8a:
                    6f:c0:ed:70:b2:84:5e:ca:d7:40:18:1b:2e:d0:5c:
                    10:05:bd:59:a4:58:00:5a:80:c1:12:24:55:d2:4c:
                    6d:e1:a8:29:e6:b8:9e:71:52:9b:40:e2:82:27:86:
                    16:19:d9:46:e7:f6:76:ec:ea:80:09:f5:80:5d:b2:
                    12:62:22:95:ac:fa:5c:af:e8:5c:f5:39:7d:d1:02:
                    ce:8c:e1:57:c0:8d:d6:a5:64:ae:56:76:eb:f3:fc:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:EA:76:D0:B1:0A:7C:94:49:63:9F:53:14:D5:05:63:EC:A5:A9
            X509v3 Authority Key Identifier:
                keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/cMnqdtCxCnyUSWOfUxTVBWPspak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d50::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:5f:77:08:db:b1:f2:7e:fd:14:d2:35:a3:a1:9d:17:bc:
         20:a0:45:0e:19:d7:ca:e6:6d:ca:15:7d:9a:f5:b2:a2:40:b0:
         a9:89:ca:77:98:77:db:b4:34:24:1d:dd:4c:90:1b:10:1c:6a:
         34:22:71:e7:cf:f6:62:a3:d8:bd:10:f8:f4:88:87:4d:8c:7c:
         c2:e3:49:ef:0f:81:f4:2c:cf:8b:02:91:da:d0:70:03:08:5b:
         57:3d:c5:b4:c4:ce:a4:94:b8:58:9f:af:bf:d1:ff:2e:f8:ed:
         c8:50:e1:92:99:60:b8:78:b1:fe:14:2b:c3:52:90:3f:27:d6:
         d1:f4:d3:f5:cc:6a:62:95:de:e8:9d:0e:22:e6:cd:a5:51:8d:
         39:3c:cc:ac:c5:a3:a1:d0:71:0c:d5:b9:58:d3:16:5a:9b:49:
         d1:84:1a:4a:5d:a0:4b:2a:ba:40:2b:67:40:50:d0:be:34:8e:
         11:82:f3:ae:5b:6c:84:28:f1:75:52:7d:19:60:4f:21:6c:1a:
         c2:a1:f6:d7:2a:30:af:8a:28:c0:fc:6d:1e:9f:9f:98:89:0d:
         23:53:10:24:67:76:b4:1c:a6:9f:d9:77:e6:94:cb:d4:a8:d8:
         0f:f7:9f:91:0b:e9:a7:f4:af:9d:a4:0f:fc:c5:c5:3f:d1:50:
         fb:34:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----