Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/1uDmOvMAv-F4AIyJ4yJOUKD5jyY.roa
File:                     1uDmOvMAv-F4AIyJ4yJOUKD5jyY.roa (raw, json)
Hash identifier:          UxRadnUaJz4awJVMXs5zSQmryCUU+9IO5sGbsLrzV6Q=
Subject key identifier:   D6:E0:E6:3A:F3:00:BF:E1:78:00:8C:89:E3:22:4E:50:A0:F9:8F:26
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       019294D7515ACADDEF74215CE2860BACE03F
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/1uDmOvMAv-F4AIyJ4yJOUKD5jyY.roa
Signing time:             Wed 16 Oct 2024 10:19:51 +0000
ROA not before:           Wed 16 Oct 2024 10:19:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214030
IP address blocks:        2001:67c:f34::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:94:d7:51:5a:ca:dd:ef:74:21:5c:e2:86:0b:ac:e0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Oct 16 10:19:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d6e0e63af300bfe178008c89e3224e50a0f98f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:98:10:eb:e7:be:1a:4c:47:3f:06:7e:97:
                    9c:2d:e6:d7:9a:1f:3a:e1:91:10:c8:97:ff:8e:33:
                    b8:9d:b5:d9:49:e4:55:fc:b6:7f:2c:69:32:96:b3:
                    64:29:2f:39:01:30:49:04:90:5f:66:02:3d:2e:48:
                    dc:3c:43:01:67:a0:2e:a1:e3:df:46:b7:7c:75:3e:
                    79:d6:23:da:25:4c:7e:fa:76:fd:e6:8f:f5:11:6e:
                    99:56:fa:7c:fd:ce:6c:74:95:8c:4b:2c:5a:35:9b:
                    ba:7f:6d:ce:54:7a:49:3b:55:15:f0:e6:e7:da:8c:
                    c1:a5:0d:ca:53:cd:29:f8:2f:fb:ba:45:23:ab:6b:
                    3a:81:fb:08:0d:b7:87:f1:0f:11:0f:65:fe:9e:be:
                    e3:07:f8:0c:77:15:d4:22:18:d6:a3:82:8c:5b:fd:
                    23:d9:5b:20:0d:d6:17:b1:06:ef:7f:20:85:ba:be:
                    7d:32:44:d3:91:91:68:47:d9:42:25:ed:91:1f:5a:
                    95:bc:ef:5c:1c:d6:47:0f:af:87:cb:5e:e7:59:30:
                    b8:b0:a6:be:dd:30:99:8a:08:60:f6:ab:bb:a1:45:
                    44:28:9c:72:98:81:1b:0f:1d:ef:98:c4:29:88:eb:
                    cb:15:09:52:fe:f6:4d:74:71:0c:61:cc:96:2c:83:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:E6:3A:F3:00:BF:E1:78:00:8C:89:E3:22:4E:50:A0:F9:8F:26
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/1uDmOvMAv-F4AIyJ4yJOUKD5jyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f34::/48

    Signature Algorithm: sha256WithRSAEncryption
         e5:d4:0f:a7:86:b4:56:c3:b7:b4:18:c1:d9:74:97:12:a8:ea:
         cc:0b:dd:0a:ef:57:a1:4f:e5:8f:71:bb:93:b1:75:28:5d:b1:
         7b:82:8e:7f:71:8d:05:06:a0:72:87:d5:fe:65:b0:e3:0a:f1:
         b1:48:10:54:a7:d4:55:d8:73:82:78:ee:26:fc:d7:a7:a7:a7:
         89:fd:4e:43:64:42:44:ff:eb:a4:5b:ef:93:1a:42:c9:ba:30:
         ac:10:79:d3:25:e6:6a:81:04:4e:d1:bf:b1:a1:e3:5e:02:32:
         5d:01:7a:a3:54:ff:78:ff:95:76:60:d2:62:3a:fb:22:25:06:
         6c:32:80:e8:4c:49:ad:58:ca:0c:00:10:7b:a2:94:7e:1c:2e:
         87:c8:5e:bf:b6:0b:9e:a5:8d:dd:d5:29:42:4d:7c:af:5a:f1:
         db:a1:b5:ae:23:26:8b:8f:3f:85:d4:a2:6f:68:2a:ae:5a:23:
         62:7c:21:cd:20:68:a1:b4:33:d1:97:2a:7e:6f:21:63:b9:41:
         51:ba:39:94:7a:15:eb:9a:7d:bc:c5:31:1e:2c:3b:9f:10:db:
         10:f3:9b:cc:e3:c3:73:6d:8e:24:c1:a9:2e:8a:f6:c3:13:68:
         11:2e:74:c9:19:cf:89:7b:f6:3c:84:f9:b9:15:f0:7b:41:0c:
         10:ac:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----