Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/B_XO2rdKyCHiDod7eMs-_KV5GZs.roa
File:                     B_XO2rdKyCHiDod7eMs-_KV5GZs.roa (raw, json)
Hash identifier:          TRkc6HwUTvHzy/tq7UUy8J/sZSEZ9NyPKZv7s143slM=
Subject key identifier:   07:F5:CE:DA:B7:4A:C8:21:E2:0E:87:7B:78:CB:3E:FC:A5:79:19:9B
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       0193DFA3F326DF3CBFC7284CD99DD7B92C4C
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/B_XO2rdKyCHiDod7eMs-_KV5GZs.roa
Signing time:             Thu 19 Dec 2024 15:58:03 +0000
ROA not before:           Thu 19 Dec 2024 15:58:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50955
IP address blocks:        2a12:b2c0::/48 maxlen: 48
                          2a12:b2c0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:df:a3:f3:26:df:3c:bf:c7:28:4c:d9:9d:d7:b9:2c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: Dec 19 15:58:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=07f5cedab74ac821e20e877b78cb3efca579199b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:08:78:79:cd:3d:bf:be:e0:83:c4:45:64:
                    6d:be:5c:4d:56:27:f5:5a:f8:e6:1f:5c:33:2b:00:
                    0b:ac:17:bb:22:76:f4:78:bc:20:72:04:1c:53:6c:
                    34:6c:24:c1:92:98:99:b6:0b:c1:04:ad:0b:6e:68:
                    0a:47:8e:89:5b:66:74:0c:5d:1a:fb:e8:12:21:67:
                    61:34:9c:e1:c2:85:89:2b:f5:93:79:50:28:93:5e:
                    0b:33:89:b0:71:16:a2:62:ac:0f:03:c4:2b:7c:55:
                    82:d0:37:38:bf:af:b7:ce:ee:5a:76:87:84:e2:77:
                    09:1c:c0:a8:68:90:af:a6:67:4a:44:45:04:97:53:
                    95:29:31:06:bf:6b:bd:46:f8:a9:47:9e:e6:fc:39:
                    b6:a2:d4:ef:b4:14:be:7c:ff:9b:72:44:27:30:8f:
                    e4:0b:e0:87:cc:28:e6:c4:9c:81:66:d3:a8:8f:20:
                    20:70:c7:29:73:0b:8a:75:cb:f2:8d:ad:fe:3a:4e:
                    fe:05:4c:66:5d:81:a1:6d:8a:8c:b9:fe:11:00:a3:
                    3e:a0:bb:25:bc:85:2d:8e:75:51:aa:1c:60:18:61:
                    23:46:44:34:eb:c9:b4:ed:69:a9:21:aa:5a:69:ab:
                    f4:c7:94:87:15:cf:a5:cc:03:b4:fb:eb:ee:35:6d:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:CE:DA:B7:4A:C8:21:E2:0E:87:7B:78:CB:3E:FC:A5:79:19:9B
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/B_XO2rdKyCHiDod7eMs-_KV5GZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:b2c0::/48
                  2a12:b2c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:72:80:de:35:22:3b:5f:f0:b7:bc:24:26:3c:11:11:25:
         1c:03:61:05:5b:59:d0:03:8e:3b:d5:5e:77:c3:d4:65:b5:7f:
         97:e7:bd:e4:31:63:d7:8a:3f:a2:b3:0e:56:81:1c:df:a1:a8:
         c2:01:e4:2e:15:fd:39:aa:99:c4:4b:c2:97:65:43:9b:77:d6:
         d2:74:b0:ec:6f:67:3c:80:de:16:8c:40:31:e9:2e:dc:a6:1c:
         26:0f:f7:22:2a:3d:ae:a0:c2:e9:b3:4a:52:57:b5:99:0b:52:
         14:d2:f9:99:d0:80:70:07:97:82:8b:93:73:7c:40:b4:62:b7:
         17:7b:b9:9b:dc:7d:9b:cc:9c:d3:2d:89:b4:ed:24:fe:60:a9:
         67:c3:94:77:00:7e:78:30:5c:6d:e6:6a:3d:c2:1d:1a:05:35:
         3d:f6:27:8a:cd:25:bb:32:1c:b9:c2:84:68:af:7f:fb:15:2b:
         db:bd:d3:cf:38:ee:4a:ba:cf:03:6c:5a:a2:25:fd:de:22:d6:
         2b:0f:15:24:aa:10:e4:40:6c:2b:91:4b:d4:ab:e1:7e:5e:59:
         c6:a4:b1:92:d8:ec:7e:81:3e:21:40:e6:52:95:18:c3:92:66:
         ee:05:f4:90:13:ba:1c:08:db:55:24:fd:3b:b0:cb:d6:f5:2a:
         28:ae:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----