Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KF1AwfTRB1fo5M5GCUQnMY5Od4Y.roa
File:                     KF1AwfTRB1fo5M5GCUQnMY5Od4Y.roa (raw, json)
Hash identifier:          +x6PySHFH8jlq6xCyHxS3vwF0VjLvTUhTBapvJjps1s=
Subject key identifier:   28:5D:40:C1:F4:D1:07:57:E8:E4:CE:46:09:44:27:31:8E:4E:77:86
Certificate issuer:       /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial:       0193878D60998CCF933D55F349EA75859EA1
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KF1AwfTRB1fo5M5GCUQnMY5Od4Y.roa
Signing time:             Mon 02 Dec 2024 13:26:49 +0000
ROA not before:           Mon 02 Dec 2024 13:26:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44922
IP address blocks:        2a03:400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:87:8d:60:99:8c:cf:93:3d:55:f3:49:ea:75:85:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
        Validity
            Not Before: Dec  2 13:26:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=285d40c1f4d10757e8e4ce46094427318e4e7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:b8:1c:6e:41:93:01:b2:14:f2:bd:64:78:
                    5b:8d:30:df:50:bf:8d:ed:d7:8b:8d:ad:fa:07:da:
                    4a:bd:b0:18:c1:2a:89:c8:58:7a:2d:d8:3f:50:77:
                    c5:31:66:a2:dc:35:53:76:0a:62:3e:69:2f:1e:77:
                    80:0d:89:f1:ae:20:ae:42:ff:c8:94:b7:bd:e3:a8:
                    08:a6:ac:8c:40:ed:b8:6e:47:33:29:b0:4f:75:18:
                    28:41:1f:c8:8c:65:5a:d2:c8:97:12:64:c2:66:65:
                    68:b3:e1:ec:2d:a1:53:57:56:02:85:78:bc:83:6e:
                    b5:e9:4e:92:c8:d1:b4:2a:8a:6f:70:b0:b6:7f:c1:
                    31:d1:87:2b:6b:a8:43:bc:6a:90:0c:70:3b:dd:70:
                    62:4a:f5:68:86:95:f9:e4:4f:5a:13:4f:28:b7:63:
                    04:d4:bf:0a:3c:a9:52:18:d8:23:59:95:60:9d:de:
                    03:09:a2:8c:17:08:2a:b2:23:c3:22:a9:62:ef:82:
                    ea:b0:c1:01:88:dc:dd:ef:df:c6:da:14:f2:b2:bc:
                    a3:8f:fe:67:9a:da:89:47:01:0e:9f:20:58:0b:f0:
                    e4:04:99:6a:06:14:fd:73:f8:8f:ea:dd:e4:27:60:
                    b8:44:20:cd:5e:23:22:e0:1a:80:9b:d6:f7:8b:b5:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5D:40:C1:F4:D1:07:57:E8:E4:CE:46:09:44:27:31:8E:4E:77:86
            X509v3 Authority Key Identifier:
                keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KF1AwfTRB1fo5M5GCUQnMY5Od4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:9b:1b:9c:99:73:bd:cd:e2:d9:fa:b0:5c:0b:6c:be:72:
         52:c7:37:e4:2c:2d:08:e7:37:07:99:6f:a9:d7:08:77:5a:45:
         61:1f:6b:ad:b7:f2:6e:b0:ee:3b:7f:8a:06:70:fc:5a:8b:ec:
         72:17:61:22:83:4f:e9:f3:60:da:6e:af:d3:60:64:3b:32:dd:
         2d:74:8e:3c:5e:f9:44:a7:58:d6:56:9a:fc:ec:81:83:30:b9:
         cd:4c:9d:3e:d9:25:9d:6b:ad:c0:58:7e:48:2d:75:bf:d0:bf:
         27:4e:3e:5f:78:0f:3d:54:4d:e1:5d:17:fb:97:60:a2:9b:ab:
         c7:51:51:8c:53:b1:cd:8f:7e:48:86:ec:f2:60:f7:31:3b:85:
         93:de:64:78:23:4f:1f:46:b6:75:56:11:c4:6d:cd:ea:e3:9f:
         fd:3e:de:13:4a:99:0b:15:bb:27:9c:b7:ec:93:fe:d0:fd:95:
         33:7e:63:61:2b:6f:7e:c9:cd:04:41:d5:10:44:bd:76:c6:98:
         79:85:fe:e0:be:c2:4e:13:bb:e7:54:30:6b:bc:86:25:12:17:
         b5:27:95:c5:63:2c:35:22:7e:4c:d2:78:39:40:db:23:57:95:
         94:6b:df:6d:61:7c:9e:ce:08:c6:fb:e8:1a:cb:95:42:8e:7c:
         62:af:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----