Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa
File:                     Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (raw, json)
Hash identifier:          WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=
Subject key identifier:   43:D5:9B:B1:4E:56:2C:40:61:D9:FD:FC:3F:63:C6:90:F5:8F:FC:75
Certificate issuer:       /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial:       0194228E16B25214B83C30228B8E2D456D65
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa
Signing time:             Wed 01 Jan 2025 15:48:44 +0000
ROA not before:           Wed 01 Jan 2025 15:48:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24603
IP address blocks:        2001:67c:ef4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:16:b2:52:14:b8:3c:30:22:8b:8e:2d:45:6d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
        Validity
            Not Before: Jan  1 15:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=43d59bb14e562c4061d9fdfc3f63c690f58ffc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:32:b9:eb:60:8c:cb:e1:50:c9:cf:ef:ef:
                    3c:a7:35:6e:03:26:39:d8:05:62:74:e8:ff:7a:03:
                    12:23:d5:8c:b7:8d:e8:95:5b:5a:27:ab:14:9c:ef:
                    ec:92:c3:b1:5a:c8:db:b9:d9:4b:6c:0e:9a:29:95:
                    ec:b6:6f:9e:82:2d:fa:81:a7:08:ef:9a:ec:77:3a:
                    66:78:6a:8c:25:49:4a:a4:b6:cd:aa:6d:12:24:ca:
                    b9:ba:61:ec:1e:1d:0d:5c:71:05:c2:44:66:ff:7e:
                    f7:9e:9a:28:e5:c0:e1:1a:dd:ac:52:9b:75:63:4d:
                    7f:54:70:46:63:4d:e9:a3:cd:e2:fa:02:4b:55:ab:
                    76:97:3d:bc:46:4e:3d:90:b8:68:06:c8:39:b3:ea:
                    f1:0c:18:ce:36:24:c8:f1:cd:71:00:0a:b5:a6:d6:
                    21:4c:50:cc:59:81:16:1e:d2:de:08:2e:73:0a:4d:
                    92:f5:c6:84:91:5d:ae:a2:2b:03:82:af:6c:7a:40:
                    8d:d8:8f:eb:ba:99:8c:f9:da:d5:96:b4:ae:8a:90:
                    1c:a9:52:e1:97:39:63:05:02:7c:fa:bd:c6:46:87:
                    52:72:61:18:f0:96:c5:30:09:57:95:e2:03:35:62:
                    fb:41:be:c6:b4:e8:b9:64:79:60:3e:d2:ef:4f:41:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D5:9B:B1:4E:56:2C:40:61:D9:FD:FC:3F:63:C6:90:F5:8F:FC:75
            X509v3 Authority Key Identifier:
                keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:ef4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:f2:84:59:ce:77:34:df:b1:94:3d:85:38:8d:82:17:58:
         d8:49:20:ea:3f:88:c1:e7:b7:21:84:12:db:28:f0:da:95:e2:
         e1:1d:0d:51:80:8c:2d:01:17:18:83:2e:29:e0:03:45:46:ce:
         00:44:fb:c8:67:5d:4c:40:21:c4:f1:98:08:48:2b:db:29:5c:
         02:2d:1c:cc:16:fd:a2:0a:aa:fa:93:40:ee:d7:99:aa:14:3e:
         bc:38:da:c3:26:96:83:4e:53:a3:6f:fe:e3:b8:b7:20:31:dc:
         96:28:0c:1c:1d:4d:10:ee:8e:94:f4:09:4f:1c:6c:91:b5:38:
         47:f1:b7:c6:b6:09:58:6a:81:e3:ad:8e:ad:a8:5e:dd:67:c3:
         02:ae:65:d0:92:2d:80:a6:4a:09:86:1d:2a:52:50:84:7d:63:
         d2:5b:9c:c9:6f:c4:0b:46:6e:ff:82:cc:52:b6:e2:a9:5b:bf:
         fe:73:77:ac:16:6b:c6:eb:1b:31:13:02:8b:f0:2c:c7:27:4f:
         0e:22:eb:9d:15:17:e7:ee:07:d9:ea:ba:35:22:6c:b2:1b:72:
         22:c5:ca:95:70:c9:88:4e:99:0f:16:4d:fb:e6:85:c9:6a:a5:
         88:a3:34:f0:7c:31:20:4d:94:8e:5f:dd:0b:55:d6:66:1a:ed:
         df:4c:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----