Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/k2Uppl8G01BcsH3g3-MinVDILtU.roa
File:                     k2Uppl8G01BcsH3g3-MinVDILtU.roa (raw, json)
Hash identifier:          lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=
Subject key identifier:   93:65:29:A6:5F:06:D3:50:5C:B0:7D:E0:DF:E3:22:9D:50:C8:2E:D5
Certificate issuer:       /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial:       01941F8C4F9F0F13BB45C6EB0F79C72C7378
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/k2Uppl8G01BcsH3g3-MinVDILtU.roa
Signing time:             Wed 01 Jan 2025 01:47:56 +0000
ROA not before:           Wed 01 Jan 2025 01:47:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12360
IP address blocks:        195.160.160.0/23 maxlen: 24
                          2001:67c:19ec::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:4f:9f:0f:13:bb:45:c6:eb:0f:79:c7:2c:73:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
        Validity
            Not Before: Jan  1 01:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=936529a65f06d3505cb07de0dfe3229d50c82ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:f9:7f:0c:b5:22:83:9c:a4:24:94:e6:c0:
                    b0:5a:38:b8:1a:b0:5a:a9:b0:c8:24:39:3d:d7:74:
                    1c:9c:6c:f1:f2:8b:29:b5:7e:eb:80:da:7b:31:10:
                    9d:cd:ee:ac:4d:9f:b3:9a:35:10:b0:05:ad:28:d1:
                    cd:99:67:68:97:ff:88:94:a9:79:74:cd:cd:68:14:
                    17:98:20:03:95:50:b1:52:0d:2c:50:6d:80:02:7a:
                    fd:56:48:79:01:31:56:3e:00:6d:af:b5:ab:53:32:
                    b3:8c:00:f0:59:40:a7:60:4b:58:7a:ae:f3:08:19:
                    ed:e8:c7:20:ec:14:94:6d:4e:88:5e:8c:59:67:64:
                    4b:70:ff:8c:b7:5b:51:b3:53:9f:f7:82:96:f1:1e:
                    76:f2:9a:26:62:5f:f1:87:4a:af:90:e2:d0:b4:11:
                    2c:3f:c3:06:32:19:6b:fa:3f:97:8c:b0:9c:35:60:
                    7f:cd:b2:02:6f:ac:05:a6:9f:e4:b3:c2:30:4c:84:
                    13:d3:2c:71:e7:88:a8:b7:3c:02:40:34:7e:0f:c3:
                    b3:a0:e0:bf:e6:30:3d:49:fc:77:d6:5a:ef:18:c0:
                    88:ba:59:05:4b:34:5d:d8:4f:98:9a:ae:c9:21:b5:
                    f5:50:c3:12:34:1c:33:19:48:7e:08:6c:13:48:a8:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:29:A6:5F:06:D3:50:5C:B0:7D:E0:DF:E3:22:9D:50:C8:2E:D5
            X509v3 Authority Key Identifier:
                keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/k2Uppl8G01BcsH3g3-MinVDILtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.160.160.0/23
                IPv6:
                  2001:67c:19ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:75:a7:df:0f:62:26:4b:b1:34:9e:56:0c:96:ef:f0:66:
         4e:03:11:85:48:9d:66:ba:83:bb:45:32:25:85:18:2f:7c:5c:
         a8:9c:0f:e5:94:78:4d:97:3d:22:6e:fb:8c:47:e5:55:79:12:
         1c:58:e4:8b:b0:d2:f2:22:d4:59:de:a6:42:56:bb:bb:fd:9f:
         71:1f:2b:23:3a:3e:96:73:2d:6a:4a:46:5a:e1:c5:93:bc:99:
         05:79:8b:a5:bc:31:56:7f:bd:e1:e6:40:3b:d5:60:47:38:9f:
         c2:bb:ab:cb:0e:0c:76:38:8e:d9:b6:ee:86:04:b1:1a:e8:be:
         27:c1:ae:45:7a:ef:d1:01:96:76:18:a1:75:21:a3:ab:20:2e:
         d9:88:bb:9c:50:b7:77:a0:ed:65:74:ea:70:27:ff:ae:d0:26:
         e9:ae:5c:f1:7c:f1:a2:83:96:c7:5c:d9:52:96:c9:45:fa:22:
         55:0d:82:53:4c:7b:1b:1e:83:26:0b:6e:19:e2:6f:d8:cf:b7:
         09:bc:38:1a:66:3e:44:9b:de:27:bd:06:df:8b:3e:9e:b8:11:
         d6:fc:0d:ec:c6:e4:52:d7:79:e8:d9:30:4d:79:2f:c7:56:49:
         d4:54:6a:71:bf:0d:3e:e0:57:00:5e:cd:84:13:56:1c:9d:a9:
         61:54:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----