Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/SXPqMjJIqIiiKMiICnz-R2huK7A.roa
File:                     SXPqMjJIqIiiKMiICnz-R2huK7A.roa (raw, json)
Hash identifier:          VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=
Subject key identifier:   49:73:EA:32:32:48:A8:88:A2:28:C8:88:0A:7C:FE:47:68:6E:2B:B0
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       0195FFAD6AE3042D7B41133DD543FD2702F0
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/SXPqMjJIqIiiKMiICnz-R2huK7A.roa
Signing time:             Fri 04 Apr 2025 07:21:49 +0000
ROA not before:           Fri 04 Apr 2025 07:21:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49697
IP address blocks:        2001:678:964::/48 maxlen: 48
                          2001:678:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ff:ad:6a:e3:04:2d:7b:41:13:3d:d5:43:fd:27:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Apr  4 07:21:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4973ea323248a888a228c8880a7cfe47686e2bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:51:55:19:7d:10:b7:e0:f9:77:02:7c:84:
                    3b:c3:9a:78:69:5f:99:45:7b:e9:44:0a:e1:18:27:
                    fa:30:20:20:4b:9f:c6:69:e2:68:7a:74:d3:a0:d9:
                    7b:da:48:4f:bd:13:a9:23:32:68:d3:ad:c8:a3:97:
                    ca:20:67:e7:78:e1:46:d5:58:ee:bf:49:d4:ab:ef:
                    50:15:46:a8:f0:a0:1d:7e:16:5c:f2:a7:e7:39:3e:
                    8b:6f:81:72:a7:10:7d:b6:89:10:5d:d5:50:d9:3e:
                    c0:32:52:81:74:bc:e1:86:1e:69:6a:06:c8:2c:06:
                    bd:24:6d:3f:31:f9:6e:ac:fd:2f:25:6f:77:d3:23:
                    b3:9d:56:a5:91:54:f5:6b:6f:dd:22:12:6d:07:74:
                    3f:23:9d:8b:79:71:b4:03:db:aa:e5:06:11:3a:e9:
                    14:a9:d7:08:f1:27:76:ac:e6:45:e2:e0:8e:14:31:
                    0a:aa:84:bb:b6:fa:8e:a1:99:35:50:d0:49:c0:53:
                    63:e4:3a:84:1c:ad:8c:4c:77:a4:09:06:6d:97:08:
                    3b:4f:69:fd:a2:05:13:00:99:ab:eb:99:92:c1:49:
                    9c:a1:6b:b2:e5:15:e7:ea:ea:d7:46:92:75:e2:0e:
                    7e:3f:7a:b7:a2:77:0c:57:a7:00:e2:27:ac:0e:b0:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:73:EA:32:32:48:A8:88:A2:28:C8:88:0A:7C:FE:47:68:6E:2B:B0
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/SXPqMjJIqIiiKMiICnz-R2huK7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:964::/48
                  2001:678:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:88:6a:13:c5:58:31:ec:2e:ab:24:00:70:c3:e3:80:25:
         7a:aa:43:c4:5a:ef:26:a7:a5:f9:4f:86:9f:ec:16:92:76:a8:
         92:79:e1:49:cb:74:49:7a:39:de:c8:e0:7a:6e:4b:1a:8e:4c:
         f9:30:2e:b2:10:18:8e:72:40:ad:9b:2b:1e:e5:ef:a1:74:bb:
         d5:f2:79:66:79:1a:cf:52:97:02:9f:98:37:30:0e:4f:a6:88:
         76:c5:1e:0b:7f:52:de:76:9d:5c:7f:5b:2e:a7:aa:19:b5:e9:
         30:0d:96:24:63:b3:f6:db:d4:3e:88:44:30:8f:84:95:57:c9:
         19:ef:81:2a:9b:de:9f:21:20:22:06:17:d8:9a:ab:65:80:97:
         57:5b:a1:ac:2a:24:66:76:69:c8:5a:c9:9e:46:30:b9:9e:9b:
         8f:01:28:da:b7:fa:33:17:66:f3:78:e0:5e:71:ee:aa:19:20:
         0b:b7:f6:48:d4:79:26:c7:dd:10:2b:6d:05:43:82:9b:b0:56:
         b8:76:b2:83:2b:be:d7:36:b3:5a:fa:bf:0d:1e:d4:8a:98:96:
         91:35:7b:10:bf:20:eb:75:ce:b9:4c:f9:47:09:0d:e3:36:20:
         9c:45:49:f7:71:fe:90:5b:bc:cd:f3:90:14:4d:3a:61:6f:3f:
         05:4a:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----