Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/uXWEOT5kLicjM9eRqYG2MPSav7U.roa
File:                     uXWEOT5kLicjM9eRqYG2MPSav7U.roa (raw, json)
Hash identifier:          WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=
Subject key identifier:   B9:75:84:39:3E:64:2E:27:23:33:D7:91:A9:81:B6:30:F4:9A:BF:B5
Certificate issuer:       /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial:       019425FDBFFE6C44E5791A96308DCF104FB3
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/uXWEOT5kLicjM9eRqYG2MPSav7U.roa
Signing time:             Thu 02 Jan 2025 07:49:34 +0000
ROA not before:           Thu 02 Jan 2025 07:49:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200605
IP address blocks:        2001:67c:dac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:bf:fe:6c:44:e5:79:1a:96:30:8d:cf:10:4f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
        Validity
            Not Before: Jan  2 07:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b97584393e642e272333d791a981b630f49abfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:fe:41:dd:69:11:3c:b4:41:42:65:69:a3:
                    4a:9b:c4:10:d2:96:d3:6e:93:0f:37:8d:52:9b:43:
                    d7:8e:17:66:96:9e:a1:84:bf:e2:0c:25:6b:5f:49:
                    79:9c:90:8a:2c:d7:12:6e:01:c1:e8:5c:5b:6b:87:
                    96:4f:23:e8:ca:59:4b:ec:19:92:79:32:59:68:9c:
                    40:fb:bf:ac:bd:7f:74:72:a7:cc:2a:7b:92:f6:b5:
                    35:de:1f:e5:77:8b:07:78:69:6a:04:75:c4:55:b3:
                    7c:39:e4:1c:2d:df:97:29:63:aa:7b:12:04:3b:93:
                    60:c9:f9:07:97:39:af:26:3a:59:78:05:85:18:97:
                    eb:06:d0:5b:dc:64:84:c2:5d:94:71:bd:58:39:fd:
                    b4:95:97:48:27:e2:46:86:a1:d3:c7:4c:c5:50:f1:
                    97:1d:4f:83:2c:f2:99:ee:74:d8:df:d3:9c:55:b8:
                    b0:4a:ca:4b:e2:5d:51:30:32:c4:9c:c2:6a:b3:50:
                    c7:12:ff:ca:50:e6:9c:87:6b:02:85:ff:cf:32:f6:
                    3d:b8:b8:34:db:46:04:9a:10:7e:1b:7f:18:27:c8:
                    14:77:97:42:47:6b:ef:76:39:ca:26:44:a6:86:22:
                    cc:67:14:be:3e:25:0c:74:50:7b:96:91:c8:1b:d2:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:75:84:39:3E:64:2E:27:23:33:D7:91:A9:81:B6:30:F4:9A:BF:B5
            X509v3 Authority Key Identifier:
                keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/uXWEOT5kLicjM9eRqYG2MPSav7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:dac::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:82:b1:c0:36:0a:ac:5b:9c:ee:8c:5d:21:d3:75:fb:da:60:
         d4:2b:6f:61:6b:69:27:39:f7:76:0f:08:67:77:e3:df:08:98:
         36:4a:43:57:8e:84:f4:2a:35:a1:40:e2:cc:51:1e:bb:7e:74:
         5a:72:e2:f1:83:f3:05:46:c3:ff:93:8f:d1:9d:4d:72:e5:9b:
         ce:56:d3:a8:27:20:ca:87:97:0b:d2:4b:22:0f:5d:98:24:3f:
         fd:31:9d:6c:2c:bf:33:2b:41:89:14:9c:a0:2e:5a:94:eb:cd:
         f0:e3:23:32:88:a8:5b:b1:31:88:9f:8e:3e:3c:f1:05:bb:49:
         c5:d9:d3:41:19:a9:98:e9:29:fe:20:94:6b:6a:d8:de:1b:a0:
         99:60:96:d4:00:89:62:11:c6:53:82:89:4d:10:8f:8e:a9:a1:
         11:d7:c7:bd:aa:26:02:44:86:37:46:26:65:ef:0a:f9:b6:59:
         19:2e:a3:ec:51:9d:f3:f1:2b:a7:93:01:7d:07:b1:8a:19:ce:
         de:7b:ba:57:6f:d6:bf:76:76:03:0f:4b:a6:93:aa:0c:28:82:
         08:cf:b2:f3:9c:07:35:b5:a5:67:f2:a7:b9:d7:74:39:8b:18:
         21:57:01:7d:f7:bf:46:62:5e:d1:2c:6b:f5:0b:07:85:71:5b:
         3b:cb:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----