Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/M1kVheswqf8ij0x2nrQ-DKJ80bw.roa
File:                     M1kVheswqf8ij0x2nrQ-DKJ80bw.roa (raw, json)
Hash identifier:          yMSCzGCO+yw4klt7Sg0l/zNTUp3KJulcSXgC+xqFL10=
Subject key identifier:   33:59:15:85:EB:30:A9:FF:22:8F:4C:76:9E:B4:3E:0C:A2:7C:D1:BC
Certificate issuer:       /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial:       019427474BF5F57D96ECE0363231EE2EEDAD
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/M1kVheswqf8ij0x2nrQ-DKJ80bw.roa
Signing time:             Thu 02 Jan 2025 13:49:31 +0000
ROA not before:           Thu 02 Jan 2025 13:49:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201929
IP address blocks:        2a02:65a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:4b:f5:f5:7d:96:ec:e0:36:32:31:ee:2e:ed:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
        Validity
            Not Before: Jan  2 13:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=33591585eb30a9ff228f4c769eb43e0ca27cd1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:8c:d1:8a:29:ea:23:c5:2d:e6:2b:2e:37:
                    99:55:13:af:3c:af:51:45:82:37:95:e3:07:79:f6:
                    2b:3c:02:20:b0:10:4e:b2:51:64:da:2a:90:0d:e0:
                    c1:5c:e0:ca:11:cc:6e:a0:54:86:f4:0a:58:06:00:
                    37:01:07:db:47:c7:7e:e4:1b:cd:19:56:db:09:6a:
                    f1:66:ab:95:32:78:e5:65:8d:64:c7:14:16:38:cb:
                    05:ab:a0:04:e1:c5:72:0c:08:c0:e4:75:4e:51:dc:
                    cf:20:5c:95:15:a1:bc:7c:68:6d:ba:1c:d2:e7:59:
                    b8:f2:4b:13:1e:67:be:14:41:f7:ca:74:c2:52:1a:
                    41:65:89:fc:d4:9b:c2:0b:57:67:20:38:8f:fd:e5:
                    43:b3:72:30:a4:8f:70:c3:e1:46:1b:4b:fa:d4:57:
                    0f:d0:dc:cf:4f:39:3a:96:cd:cf:22:7b:45:a0:c5:
                    d3:b5:79:ac:97:16:dc:20:8e:3f:fa:73:60:77:a4:
                    96:c5:b0:06:2c:b8:4c:82:e7:8d:bc:63:64:52:f0:
                    67:5e:87:37:18:1b:43:eb:69:21:06:c4:11:ea:d6:
                    34:16:8f:a8:96:87:dc:fc:67:19:04:f3:7c:c6:ca:
                    2f:cc:9d:4c:76:3f:71:7c:97:34:be:60:b5:5f:15:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:15:85:EB:30:A9:FF:22:8F:4C:76:9E:B4:3E:0C:A2:7C:D1:BC
            X509v3 Authority Key Identifier:
                keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/M1kVheswqf8ij0x2nrQ-DKJ80bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:65a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:ce:5d:93:b9:cd:1e:6b:cc:64:ff:e3:44:96:83:24:5a:a2:
         9e:b2:11:11:17:a7:1e:03:7a:2b:00:3c:5d:cf:9d:2f:ca:d2:
         e6:d8:7a:44:70:c3:2c:36:33:21:ce:c9:20:eb:a2:ff:15:ec:
         e1:b7:e8:61:c1:98:40:b4:33:6d:05:04:94:73:bc:fb:0c:f6:
         8e:fe:9a:3d:93:fe:4b:d6:27:c0:1b:9b:d0:30:51:6b:75:cf:
         d8:8b:c5:3b:6c:d5:41:1e:64:67:31:f4:44:49:7e:b3:fe:d2:
         b3:b8:67:93:20:07:8d:cd:1b:ad:f2:ac:56:4a:31:f5:38:06:
         48:db:c7:cf:ec:15:42:d7:2e:e2:a1:07:c1:48:ec:4f:05:e3:
         08:f2:ef:c2:03:a0:2c:9f:d8:73:16:ca:50:76:27:91:f1:a2:
         45:52:9e:7f:62:70:e2:b9:b7:5d:da:32:ef:8f:bd:f8:f6:05:
         88:1d:a9:63:9c:af:77:23:88:d5:04:78:09:78:e1:f8:ee:ef:
         61:ea:46:e7:09:c3:35:9f:e7:1a:82:37:c5:91:5d:a8:4b:12:
         80:51:ec:c9:30:b4:b8:33:37:6f:c0:24:6c:18:a5:65:9b:1c:
         22:4d:bf:e8:a3:90:3b:2f:d7:66:7d:56:bc:90:26:0d:c0:93:
         36:bf:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----