Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa
File:                     4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa (raw, json)
Hash identifier:          P8qHKjktwY0LMJk2kNSxIkV5VZfMxq6978hedImOnLo=
Subject key identifier:   E2:78:BF:CC:EA:E0:29:6F:99:4A:4D:C2:F2:00:11:34:09:A4:7F:98
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       018CC802A40DDAA548858AE3932521884C80
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa
Signing time:             Tue 02 Jan 2024 02:31:05 +0000
ROA not before:           Tue 02 Jan 2024 02:31:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208562
IP address blocks:        2001:678:ad8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:a4:0d:da:a5:48:85:8a:e3:93:25:21:88:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Jan  2 02:31:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e278bfcceae0296f994a4dc2f200113409a47f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:2a:1d:73:b2:ce:42:cc:62:c9:79:d4:00:
                    29:16:59:7a:e3:dc:ca:21:fc:cd:ad:3c:68:77:27:
                    e7:c2:4b:15:0a:74:a0:a8:7c:16:4a:c1:20:24:80:
                    c0:1b:04:72:3f:d9:d4:56:a5:bd:02:cb:9d:ed:81:
                    31:69:e6:f5:e2:46:82:6f:2e:b3:57:52:e2:e2:e5:
                    f9:bc:ca:dd:8b:75:e1:12:02:fc:ee:4d:44:47:fe:
                    9d:4e:ba:1c:fc:1f:40:aa:f8:f3:fd:a6:bf:ca:11:
                    c5:8d:fd:01:28:40:c4:aa:3e:b8:8e:54:24:92:7e:
                    f7:88:48:98:1c:86:2f:01:35:a0:48:34:13:c9:64:
                    34:1c:3e:ff:82:12:d5:1f:5c:64:62:7d:60:8c:a4:
                    dc:ce:43:dc:d0:fc:ad:37:5c:7c:62:41:2d:e5:9d:
                    eb:74:80:bb:4b:b0:3a:4f:b8:45:8d:95:c9:a9:87:
                    3e:ec:21:ca:21:1e:b2:7a:9f:a1:13:8e:1b:0e:db:
                    16:bf:43:06:2c:24:9f:0e:4d:10:43:22:e6:61:25:
                    b7:ba:0e:ce:f9:16:52:f1:83:96:4e:8f:dc:47:1b:
                    6c:8c:fe:67:f9:0b:4d:88:43:f2:94:c7:03:10:fd:
                    a3:2c:3d:ca:e6:e5:d9:ed:77:00:18:15:c0:32:db:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:BF:CC:EA:E0:29:6F:99:4A:4D:C2:F2:00:11:34:09:A4:7F:98
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ad8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:10:ed:2e:db:60:ac:3e:80:ec:3c:e5:68:ee:c5:15:b8:
         72:cf:66:c0:02:4e:69:d6:3d:37:ea:f5:f4:54:5b:23:fd:4c:
         f7:60:85:1a:2b:9b:88:4e:85:9a:96:95:95:30:4e:8b:2e:d2:
         95:51:55:10:ab:bf:22:ac:17:a6:58:58:b7:02:4f:b1:46:85:
         49:e1:7e:df:c0:f1:43:87:5e:06:71:fe:f7:f2:92:33:8d:70:
         a1:4c:7a:bc:6f:37:c1:43:0d:3a:37:5a:13:35:74:37:22:17:
         03:44:45:de:69:ff:e6:2c:3d:1d:47:a8:df:46:0a:80:4c:dd:
         6a:b3:5b:e4:ad:70:b5:e0:fd:60:29:90:3a:6e:f3:42:d6:f6:
         63:6a:09:32:1b:3b:b6:e4:6a:f3:9b:49:98:c1:4f:8f:8d:be:
         59:d1:6f:65:60:58:26:16:b4:a4:b4:52:e7:57:34:c2:4e:d4:
         72:0b:5f:36:b5:2f:69:f0:e1:47:c4:88:a2:ec:df:7f:41:84:
         4f:20:36:84:be:a8:47:20:d8:e1:b0:81:c3:ae:b7:a6:9f:1d:
         35:2c:83:53:37:eb:88:f6:66:c9:30:00:57:43:f6:d4:f6:ee:
         f9:67:c5:78:96:8e:96:ec:14:e6:a0:53:f4:7b:6b:c3:0c:5a:
         95:dd:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----