Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/r_Te40zr971NqTKeLE0pqhlkcg4.roa
File:                     r_Te40zr971NqTKeLE0pqhlkcg4.roa (raw, json)
Hash identifier:          PD4QGy/8YNlHayR0wxEWdTEkMu0DHIgRiBWAZ5gIcuo=
Subject key identifier:   AF:F4:DE:E3:4C:EB:F7:BD:4D:A9:32:9E:2C:4D:29:AA:19:64:72:0E
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019421B226E799365737F8AFD78BC0454E10
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/r_Te40zr971NqTKeLE0pqhlkcg4.roa
Signing time:             Wed 01 Jan 2025 11:48:30 +0000
ROA not before:           Wed 01 Jan 2025 11:48:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8672
IP address blocks:        2001:648:2c10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:26:e7:99:36:57:37:f8:af:d7:8b:c0:45:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jan  1 11:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aff4dee34cebf7bd4da9329e2c4d29aa1964720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:ae:6c:77:49:e5:52:e9:64:0a:6b:77:6c:
                    2b:80:4c:ac:e3:23:89:b3:d1:3a:a4:78:a2:1d:64:
                    c7:51:bd:e8:6c:b9:74:0f:65:52:65:2d:2c:3b:51:
                    75:88:be:cd:06:8c:41:a8:7d:f2:72:d8:2e:81:42:
                    24:45:f9:9f:04:09:e4:ad:95:72:cb:d8:55:d9:e8:
                    94:60:a2:89:95:91:2d:d3:ea:f1:02:7e:ae:c4:ec:
                    24:30:f1:74:2d:6d:3d:ef:23:01:aa:f2:69:db:5f:
                    17:45:4b:c4:49:ad:35:64:80:bb:62:59:b2:76:02:
                    ff:f2:29:0d:8e:0b:f7:4a:f7:b2:0c:16:13:c8:a4:
                    cc:b2:eb:d5:c6:67:33:7f:8d:36:55:d7:80:92:ff:
                    0b:3e:d2:7e:f2:93:48:49:0a:99:7b:ff:64:7f:bb:
                    f8:8a:f2:b9:18:6c:20:6f:e4:30:d6:2c:8b:b7:18:
                    a1:d7:69:5b:13:8d:64:ad:de:96:97:54:07:4d:f2:
                    74:eb:11:d8:27:77:7b:a2:95:f1:88:96:25:7b:7b:
                    58:f2:f3:45:08:b1:e3:e5:70:12:53:e2:e8:39:5d:
                    e1:4f:ae:80:53:9e:73:15:d2:b5:15:39:3f:0d:65:
                    41:09:f3:90:98:c9:cd:33:c8:3f:74:b6:4f:01:d9:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F4:DE:E3:4C:EB:F7:BD:4D:A9:32:9E:2C:4D:29:AA:19:64:72:0E
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/r_Te40zr971NqTKeLE0pqhlkcg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:648:2c10::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:47:5d:b8:9c:5a:f8:1d:21:74:ac:13:52:26:19:ec:84:6b:
         b4:93:b6:d0:44:85:e2:1c:f1:f4:7c:92:21:a9:bc:20:8f:83:
         52:d2:92:59:0e:3c:6a:52:9c:04:a9:1f:4a:28:d6:ab:8c:4c:
         e2:c6:bb:de:8f:5a:3c:ae:c7:b3:ab:cc:e7:4d:7f:0d:47:30:
         d1:14:d4:70:d7:51:d4:71:59:dd:27:ec:a7:3a:18:28:28:5a:
         d9:8d:3f:40:8a:7b:90:f1:f0:be:0d:29:be:48:21:50:9c:ec:
         4d:c7:a4:37:3f:86:27:27:49:0e:68:09:3e:67:f3:b7:bc:e3:
         7d:97:98:b0:0c:99:f1:f0:68:c1:2e:b8:2b:b4:85:82:9d:5f:
         c2:61:da:08:48:ab:54:96:30:20:d8:a4:34:97:21:b7:4c:ff:
         fb:19:8e:da:1c:22:8c:43:f2:db:ce:84:f7:fc:a1:ff:72:50:
         75:0a:32:27:dd:27:2d:f6:97:3e:5e:cc:b2:5e:bd:ee:c8:13:
         ee:54:07:d5:fe:f6:56:98:ed:31:6b:62:26:dc:94:3d:6c:86:
         5d:45:b6:66:8d:fa:e5:1c:b3:8b:71:7b:81:01:39:75:c8:59:
         03:19:88:ad:f7:d7:a7:06:f8:5a:cf:88:7a:41:96:03:45:51:
         f7:ef:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----