Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3GxmvZTX5bXx2syVE4KlL2ENjsA.roa
File:                     3GxmvZTX5bXx2syVE4KlL2ENjsA.roa (raw, json)
Hash identifier:          rO4CEWhhcAOnIDjuEFvRHEKeLElQyNRnI9wavXCBz48=
Subject key identifier:   DC:6C:66:BD:94:D7:E5:B5:F1:DA:CC:95:13:82:A5:2F:61:0D:8E:C0
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01962E3BE6E7C6758A0ABD57E11E64ADCDFC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3GxmvZTX5bXx2syVE4KlL2ENjsA.roa
Signing time:             Sun 13 Apr 2025 08:19:59 +0000
ROA not before:           Sun 13 Apr 2025 08:19:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     54852
IP address blocks:        2a09:b700::/29 maxlen: 29
                          2a0f:1540::/29 maxlen: 29
                          2a0f:dec0::/29 maxlen: 29
                          2a0f:e540::/29 maxlen: 29
                          2a11:4e80::/29 maxlen: 29
                          2a13:1940::/29 maxlen: 29
                          2a13:2ec0::/29 maxlen: 29
                          2a13:3040::/29 maxlen: 29
                          2a13:a100::/29 maxlen: 29
                          2a13:c500::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:3b:e6:e7:c6:75:8a:0a:bd:57:e1:1e:64:ad:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 13 08:19:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc6c66bd94d7e5b5f1dacc951382a52f610d8ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:55:34:29:34:39:97:e2:cb:a9:5d:61:d2:
                    70:cd:3e:48:5a:b2:b9:03:a2:29:a1:2b:ec:2c:c8:
                    cc:41:8b:cd:73:1d:09:27:3a:12:17:dd:c9:a4:29:
                    a0:95:5d:52:61:a0:0b:db:c1:5c:f4:10:ea:26:59:
                    af:8e:ec:3c:90:bf:f7:bc:68:71:7d:a1:b8:68:7d:
                    5f:0c:ec:14:b6:0a:6c:33:8c:f7:e3:fb:f8:01:f8:
                    30:7c:2b:87:04:1d:8c:c7:7a:6c:6b:70:16:da:b6:
                    c3:e5:fb:30:de:a5:9f:ed:b3:d0:4f:c4:92:b3:b6:
                    21:ad:98:a0:e7:ad:0c:48:e0:07:d5:4a:d8:96:f3:
                    b7:5e:42:ba:7a:09:23:0a:9d:3a:0d:0e:ea:d0:ce:
                    19:0d:09:be:3a:ba:68:52:9f:b7:f8:6f:55:d6:7e:
                    63:bf:ed:bc:ff:29:fa:d1:ae:8e:96:2b:af:51:92:
                    37:0b:11:0c:45:4c:46:5d:0a:55:71:df:94:8a:04:
                    e3:f7:59:ad:9b:7c:7a:06:e8:26:09:79:76:12:dc:
                    0c:6f:6b:23:6d:25:e0:1d:aa:45:a6:de:a8:e5:cd:
                    e1:35:0e:f4:ae:ef:58:28:47:ef:4a:24:17:f0:e1:
                    aa:a2:15:cb:15:03:ca:a4:96:5e:7c:ab:2c:03:99:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:66:BD:94:D7:E5:B5:F1:DA:CC:95:13:82:A5:2F:61:0D:8E:C0
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3GxmvZTX5bXx2syVE4KlL2ENjsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:b700::/29
                  2a0f:1540::/29
                  2a0f:dec0::/29
                  2a0f:e540::/29
                  2a11:4e80::/29
                  2a13:1940::/29
                  2a13:2ec0::/29
                  2a13:3040::/29
                  2a13:a100::/29
                  2a13:c500::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:08:f2:5c:00:c0:ff:40:f3:ae:4a:2e:ae:2c:9d:ab:4c:
         b2:e8:45:a4:c3:33:95:67:4b:1c:92:84:02:b6:05:4f:60:42:
         b9:05:ce:5e:dd:38:e0:6c:80:09:46:92:5c:24:b4:69:96:e9:
         77:53:bc:99:d6:ab:4f:d8:80:7c:76:ea:e3:b4:c5:5b:a0:9f:
         6c:37:cd:10:9b:12:a9:52:4e:57:5b:5b:5c:bb:68:cf:10:e7:
         c9:eb:19:b8:af:7b:de:5f:1e:34:6b:63:89:8b:e3:21:b7:d6:
         9a:dd:9c:b9:98:0b:dd:3f:c3:a2:f3:3d:ce:e7:20:70:e9:64:
         5a:bd:b0:94:78:93:55:04:26:f1:b2:6a:02:85:c6:34:e0:df:
         58:2c:cd:1e:d8:5f:73:ab:71:c1:06:a5:9e:9f:96:37:3f:02:
         1f:7e:c0:19:44:ba:a9:69:cb:cc:65:be:53:48:09:f2:57:20:
         89:43:5b:bc:c1:65:e5:f5:ef:df:63:c2:84:b8:e1:12:45:d9:
         8a:b7:1c:2b:79:3c:73:a1:fc:38:16:95:42:02:e8:71:a8:cb:
         67:8e:21:ea:6c:30:b6:41:55:73:d8:89:2d:cd:8f:d5:80:39:
         51:a8:21:80:53:19:52:c5:44:47:d3:42:66:e3:e7:ac:87:49:
         69:c5:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----