Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/1R6LxgC-MSsXC8XcNc55PUWrpnA.roa
File:                     1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (raw, json)
Hash identifier:          eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=
Subject key identifier:   D5:1E:8B:C6:00:BE:31:2B:17:0B:C5:DC:35:CE:79:3D:45:AB:A6:70
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       01942445570ABB06F7FA0E66F6DBFC0D6068
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/1R6LxgC-MSsXC8XcNc55PUWrpnA.roa
Signing time:             Wed 01 Jan 2025 23:48:31 +0000
ROA not before:           Wed 01 Jan 2025 23:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1257
IP address blocks:        159.72.0.0/17 maxlen: 17
                          159.72.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:57:0a:bb:06:f7:fa:0e:66:f6:db:fc:0d:60:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Jan  1 23:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d51e8bc600be312b170bc5dc35ce793d45aba670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:3e:00:f6:5f:97:96:5a:15:6f:e2:8a:5d:
                    e0:0e:61:9d:e9:07:31:74:40:0c:e5:c6:ae:29:d1:
                    26:e2:67:3d:a8:5e:11:46:1c:f1:42:9f:e2:a1:76:
                    8e:90:5b:33:bc:b6:31:d3:2c:4c:23:35:97:90:4c:
                    53:14:79:c3:91:97:21:7a:51:2d:2c:db:d9:f8:96:
                    a2:f4:ab:fa:97:94:2a:5a:3b:32:92:5d:1a:16:36:
                    7a:41:f9:a5:ae:af:8e:14:12:c3:4a:b5:3f:a9:bb:
                    1e:da:3d:cf:cd:ef:d0:a0:1b:f0:d3:e7:fa:59:c1:
                    aa:c6:ab:33:32:cc:90:7e:b1:09:c2:b7:94:ee:59:
                    f9:d9:6b:0c:b8:f4:47:06:33:59:a2:e7:bc:84:3a:
                    15:d5:fa:5d:b9:3f:c2:07:6d:9a:21:81:f2:5b:8f:
                    93:b5:6e:06:8a:67:cf:a1:4c:20:f7:31:85:36:97:
                    b3:b0:2b:0a:b8:cc:56:fc:21:5d:b6:c0:20:0b:89:
                    09:98:73:65:b8:ce:d7:0f:c7:ff:9f:83:0b:74:15:
                    6b:dd:d0:fc:ff:6a:d6:9c:a8:b1:3b:2d:20:ed:6f:
                    b3:b4:57:87:1b:bd:3d:4f:41:55:d9:00:66:80:0a:
                    c4:54:5b:92:f9:0c:61:bc:02:1a:e8:60:a8:9b:58:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:8B:C6:00:BE:31:2B:17:0B:C5:DC:35:CE:79:3D:45:AB:A6:70
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/1R6LxgC-MSsXC8XcNc55PUWrpnA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.72.0.0/17
                  159.72.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:0e:e3:cb:bd:65:79:4d:93:1c:82:fe:e1:b8:16:1b:05:6e:
         5d:ac:60:ed:bd:c0:b6:c7:7d:7b:39:9c:58:1f:73:d2:d7:f0:
         63:5d:2e:8e:06:87:71:7c:f0:e0:6d:84:23:59:91:16:da:d9:
         ba:dc:f1:da:db:4b:d3:5b:fb:94:d9:0e:7a:ce:ee:73:04:83:
         28:2c:75:2c:5c:82:cf:30:e8:bb:4b:84:2a:41:cc:13:99:be:
         8e:9f:ac:30:a7:a6:b3:c6:89:5a:92:6d:c9:5f:80:e2:fd:72:
         40:28:cb:26:55:f0:07:27:8f:a5:35:d4:29:9a:18:ca:86:ec:
         dd:62:2b:89:15:a9:28:32:08:d1:31:14:10:8b:f0:93:a5:0a:
         d4:b0:b6:46:69:b7:3b:cd:41:8d:3b:04:ab:a9:52:12:92:ab:
         f7:be:1c:6c:30:dc:c4:39:4b:d8:1b:65:4f:b4:2a:e9:09:0c:
         04:77:c3:04:24:42:e8:a6:aa:e3:bb:07:34:98:3c:c1:18:72:
         ce:86:dd:8d:0a:20:19:f0:2b:eb:0d:cd:08:ae:5e:5d:e1:df:
         6c:18:f9:1a:d8:79:5b:49:99:64:61:e4:94:5b:a9:d7:ae:fb:
         d4:f9:23:d6:21:62:62:f7:7e:ea:25:6f:cb:68:05:e9:69:f7:
         db:9e:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----