Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/7IckCYkn3xrhrSiCs_6GSuvUs0U.roa
File:                     7IckCYkn3xrhrSiCs_6GSuvUs0U.roa (raw, json)
Hash identifier:          UExXEdmy2hs6CEBzfqQONSJkqZS4FRlg5tF1BLR/qT4=
Subject key identifier:   EC:87:24:09:89:27:DF:1A:E1:AD:28:82:B3:FE:86:4A:EB:D4:B3:45
Certificate issuer:       /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial:       0193DEB99275F648A3879D2E0A16843967B9
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/7IckCYkn3xrhrSiCs_6GSuvUs0U.roa
Signing time:             Thu 19 Dec 2024 11:42:03 +0000
ROA not before:           Thu 19 Dec 2024 11:42:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213767
IP address blocks:        2001:67c:fc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:de:b9:92:75:f6:48:a3:87:9d:2e:0a:16:84:39:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
        Validity
            Not Before: Dec 19 11:42:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec8724098927df1ae1ad2882b3fe864aebd4b345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:c5:b5:fc:ee:14:b6:73:d3:37:84:04:e1:
                    98:f7:85:98:7c:a8:7b:47:2f:7a:74:dd:5a:f1:db:
                    46:2b:0c:06:8b:5b:e9:82:15:37:d4:de:db:96:ca:
                    ce:76:01:10:a3:10:6d:c4:de:ed:db:39:15:fe:d7:
                    fa:17:b8:f2:e6:19:49:86:f9:7f:a6:08:ef:14:21:
                    8a:93:51:a1:15:dd:88:7d:b6:64:83:51:03:04:3b:
                    90:bc:16:d4:73:23:65:c1:f9:90:f3:5d:e9:25:45:
                    66:2b:15:95:6c:44:07:f1:8a:83:99:44:4a:47:65:
                    20:dc:09:29:88:78:11:c7:35:54:d0:5d:1a:9b:7a:
                    3b:d2:bc:bd:cb:01:6c:5c:68:1a:b0:b9:32:80:a9:
                    6a:7c:97:aa:ae:85:cb:5c:6e:d2:d1:4e:10:53:85:
                    e2:4a:a9:b9:9b:98:1f:c5:c7:20:4b:28:1f:8a:e6:
                    5a:02:8f:f6:e6:a0:fe:bd:19:91:70:a0:b7:de:b3:
                    87:94:24:7c:96:3a:68:47:a9:e7:9a:c7:c4:63:d9:
                    43:88:9c:c9:5b:b9:12:f5:89:56:69:91:df:84:40:
                    54:23:05:06:43:f5:d7:30:c1:3c:18:f3:eb:e2:fa:
                    5a:90:4f:a7:bc:54:ad:4d:0d:91:cf:9f:2d:f4:c9:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:24:09:89:27:DF:1A:E1:AD:28:82:B3:FE:86:4A:EB:D4:B3:45
            X509v3 Authority Key Identifier:
                keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/7IckCYkn3xrhrSiCs_6GSuvUs0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:8d:b8:83:f0:c2:6d:0d:73:c5:f0:24:e2:c6:fe:39:80:
         3c:09:bd:df:47:36:54:1c:96:fb:cd:af:81:2b:3c:23:51:82:
         cd:67:3f:66:18:6e:9a:f9:62:5e:69:4f:02:b3:fc:1b:7e:13:
         e8:19:7b:b2:9f:46:27:47:89:cc:af:d6:5b:81:1d:59:d7:0f:
         9b:9f:0d:73:14:c1:07:40:47:48:85:a7:39:8e:b0:67:a5:cb:
         f5:89:6a:50:1a:3d:2c:ba:e5:78:90:80:76:3d:9e:7d:67:54:
         20:cb:48:57:d7:7f:a9:06:f0:e4:3d:f3:d5:8f:2a:9d:8b:47:
         26:8d:c1:32:ad:84:16:f9:cf:e6:07:60:5b:a3:09:31:bb:06:
         b9:2a:30:89:63:76:4e:33:41:1d:26:25:7f:b6:4c:ad:56:72:
         26:b3:1c:11:31:9e:2a:1c:24:67:76:a8:dc:d8:fa:b9:51:ac:
         cf:a1:b8:5c:60:1a:ef:b7:f8:84:ae:19:e6:7f:27:fb:d5:d4:
         b9:0b:65:78:5a:a9:84:95:53:fd:87:51:de:68:59:f2:5d:83:
         f3:e7:64:29:0d:8c:4b:4a:03:41:86:6f:2c:f1:83:c5:33:e8:
         71:85:e7:75:22:e4:6c:72:17:29:40:72:c3:09:78:97:93:c8:
         35:e4:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----