Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa
File:                     DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (raw, json)
Hash identifier:          Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=
Subject key identifier:   0C:19:36:EA:78:B7:AD:60:16:AD:C1:C2:9C:20:0F:67:6C:64:2B:84
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       01941FFA0892A1E4C3265DCC2472D8260B26
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa
Signing time:             Wed 01 Jan 2025 03:47:47 +0000
ROA not before:           Wed 01 Jan 2025 03:47:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213366
IP address blocks:        2001:67c:a50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:08:92:a1:e4:c3:26:5d:cc:24:72:d8:26:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Jan  1 03:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0c1936ea78b7ad6016adc1c29c200f676c642b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:fa:48:3c:90:48:ae:b2:c5:49:52:33:bb:
                    1e:76:f5:51:4b:91:fb:79:91:3f:0d:c1:0c:8d:26:
                    d7:df:51:6f:44:14:25:0d:52:71:a4:8c:83:93:b7:
                    fc:21:87:8b:81:f8:15:f6:a5:dd:72:da:b7:7f:da:
                    aa:2b:f9:48:fa:92:c8:23:96:b3:8a:41:8e:8c:50:
                    b4:39:ed:c1:b9:ce:1b:d7:ff:a5:06:69:ed:47:05:
                    a9:e3:d5:72:d4:ab:0f:56:b0:93:4b:9f:75:c3:22:
                    a2:b9:ba:cb:87:68:20:f9:2d:fc:3a:42:ba:ce:ae:
                    fb:ec:8a:85:9e:81:c2:58:f4:4d:49:3e:9e:4b:ca:
                    36:66:6f:41:bc:4a:91:be:c1:c3:2e:75:88:5c:05:
                    dd:7b:3d:db:7a:40:99:47:6a:b7:cb:5c:50:10:31:
                    9b:5e:25:cb:4b:a4:9b:5c:db:e8:ba:7b:87:3f:18:
                    74:39:a5:db:ff:97:8a:64:78:3e:8a:68:dd:38:7a:
                    c2:63:df:92:10:9b:dd:a0:46:d7:6c:10:0d:19:e6:
                    75:df:8d:83:59:11:46:b9:fc:2f:ef:f8:81:e5:2c:
                    48:2d:c5:ec:e1:af:7e:53:e2:4f:a3:c5:f4:0e:87:
                    5a:f8:ac:2b:e6:86:60:af:7f:4b:75:48:eb:13:5e:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:36:EA:78:B7:AD:60:16:AD:C1:C2:9C:20:0F:67:6C:64:2B:84
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a50::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:0b:7d:64:35:05:8c:4a:32:b4:5f:f8:fc:8c:80:66:f5:
         7a:c4:2b:47:77:5c:49:83:62:b2:21:9d:43:2d:f7:f5:9e:4f:
         62:07:dd:65:03:73:55:f9:41:14:4c:38:e3:cb:64:52:93:9a:
         8d:35:80:b1:df:61:05:5a:66:f3:a5:89:f7:c5:f4:35:fc:c3:
         a9:88:81:e2:17:c8:b5:e0:89:b6:fd:da:36:fa:43:93:aa:9e:
         42:38:fe:52:92:4a:fd:de:d8:45:c8:9c:3a:26:bd:4f:19:1e:
         ac:d2:e5:f6:6b:50:bd:ef:08:a1:d6:b9:c8:51:da:a8:1f:55:
         cb:75:01:76:37:0f:da:4a:9c:61:ed:5b:6a:14:6f:08:84:2f:
         c6:db:2e:bc:a3:3c:64:29:29:04:63:2a:d4:ca:63:5b:ae:40:
         85:05:4e:0d:b9:a9:d7:02:d0:7b:cb:f8:00:a4:12:dd:21:ff:
         b5:ca:4d:9b:e2:9b:ba:e7:af:87:c8:32:2f:44:d6:14:d8:57:
         2e:43:bc:c8:e6:84:f2:88:ea:e8:34:82:83:2b:ab:ce:4c:6c:
         19:61:ac:71:5f:33:f0:64:39:2e:6d:21:cc:8d:83:dd:f6:fa:
         ac:ec:f9:6e:eb:dc:e4:a9:7d:65:f3:4e:3b:f3:28:33:e2:56:
         6b:a5:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----