Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b265izicxEbM52pmQlqlk-ZuTfI.roa
File:                     b265izicxEbM52pmQlqlk-ZuTfI.roa (raw, json)
Hash identifier:          IYIXsMMFGL8UvMKPyzWpBlzB+A8soietHkUzLmyl46c=
Subject key identifier:   6F:6E:B9:8B:38:9C:C4:46:CC:E7:6A:66:42:5A:A5:93:E6:6E:4D:F2
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019600E946984570449A37BD0B8EBC583FA5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b265izicxEbM52pmQlqlk-ZuTfI.roa
Signing time:             Fri 04 Apr 2025 13:06:50 +0000
ROA not before:           Fri 04 Apr 2025 13:06:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62553
IP address blocks:        2a13:4900::/29 maxlen: 29
                          2a13:9f00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:e9:46:98:45:70:44:9a:37:bd:0b:8e:bc:58:3f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr  4 13:06:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f6eb98b389cc446cce76a66425aa593e66e4df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:87:fb:e6:d3:8f:52:54:c7:51:fd:a5:97:
                    e0:35:eb:3e:cf:d1:be:57:75:82:81:8f:f7:05:98:
                    bb:a3:2a:41:82:7a:13:cf:76:e6:93:eb:f7:e4:9d:
                    a6:2a:d4:ae:30:57:50:60:a5:a3:84:d2:e3:0b:79:
                    17:84:b0:c4:75:27:ae:56:e8:d1:91:ef:93:9f:65:
                    fc:14:63:b8:b4:0c:ec:81:aa:e3:fa:fa:43:38:38:
                    7e:f2:da:6e:d6:05:a8:5a:1e:f7:ee:01:cb:10:83:
                    77:b9:ff:f0:e6:67:af:14:43:9c:88:12:f1:f4:16:
                    5f:92:19:62:2b:51:49:2f:94:ad:f5:28:74:21:9e:
                    be:8a:64:d4:d7:85:7f:06:d9:97:ff:0b:8a:1d:ba:
                    81:93:45:83:fb:5d:f7:d4:a9:a0:6b:2e:cc:4c:1e:
                    f2:92:25:84:96:31:84:46:03:79:7e:e9:20:c3:2f:
                    6e:d7:74:d4:50:50:3b:fe:53:63:87:d0:6f:16:ef:
                    6c:06:1a:5b:17:c5:55:9a:c4:05:57:fb:c7:86:29:
                    2d:11:56:db:d2:12:1d:22:0e:16:6d:56:5c:5e:0a:
                    32:eb:59:30:18:54:f7:c9:55:95:c5:35:64:be:c6:
                    e2:97:28:b0:f7:60:6b:25:77:b0:e8:9a:8e:5b:2f:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6E:B9:8B:38:9C:C4:46:CC:E7:6A:66:42:5A:A5:93:E6:6E:4D:F2
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b265izicxEbM52pmQlqlk-ZuTfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:4900::/29
                  2a13:9f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         bd:15:9d:2b:68:6a:c0:69:87:57:76:2e:bb:4f:d8:44:78:cd:
         39:75:41:59:2e:70:40:76:2e:4e:a0:43:17:1e:6a:dc:0c:ac:
         2c:02:56:5d:5c:b7:dd:ac:4b:e7:04:7f:14:72:3a:af:d7:d2:
         40:52:83:34:54:d3:93:28:b0:ae:1c:8c:0c:5a:bd:fb:56:be:
         21:47:2b:a9:41:0f:d6:95:5b:af:e4:cc:a6:e7:99:50:4b:09:
         08:95:61:16:a4:0b:52:e6:ac:0c:32:71:8f:6f:ba:6c:ab:88:
         63:4a:cb:c7:8f:db:d1:dd:e4:56:22:a0:da:c9:ad:8b:6a:b5:
         d9:01:81:2a:2b:6e:da:ef:ef:b0:b8:82:58:d5:3b:67:84:f1:
         09:ff:09:8b:7a:e5:1e:44:5e:d0:98:62:b3:17:ba:3b:44:c6:
         b5:3f:0c:03:73:04:3a:04:69:44:c4:92:53:89:90:85:48:d5:
         90:bc:a2:6a:a8:85:e5:01:56:11:94:1c:df:5e:08:8f:d6:0e:
         da:e0:cc:3f:32:8c:eb:c4:2e:23:2d:92:dd:64:2c:60:77:05:
         b2:88:e4:81:d6:ab:94:9b:57:da:73:82:1a:da:a9:40:8a:4a:
         ff:e2:bd:07:1c:ac:79:e5:3f:12:77:8c:d4:74:52:6f:bc:69:
         3a:23:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----