Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/jDVkyBiMy_wS7uuT7gJm-Adjujs.roa
File:                     jDVkyBiMy_wS7uuT7gJm-Adjujs.roa (raw, json)
Hash identifier:          EB3eY2DbzGQXtFYTivd9InheAMXSnzGFEr2+zEc8wPw=
Subject key identifier:   8C:35:64:C8:18:8C:CB:FC:12:EE:EB:93:EE:02:66:F8:07:63:BA:3B
Certificate issuer:       /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial:       01942444B906A1757FEDAF37BFA0F77FAC32
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/jDVkyBiMy_wS7uuT7gJm-Adjujs.roa
Signing time:             Wed 01 Jan 2025 23:47:51 +0000
ROA not before:           Wed 01 Jan 2025 23:47:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210941
IP address blocks:        2001:67c:810::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:b9:06:a1:75:7f:ed:af:37:bf:a0:f7:7f:ac:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
        Validity
            Not Before: Jan  1 23:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c3564c8188ccbfc12eeeb93ee0266f80763ba3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c3:8f:6e:8c:87:c2:9f:22:ad:15:9c:e6:35:
                    90:29:f2:65:d5:01:ae:fa:23:4e:6a:9d:fe:0a:a1:
                    47:70:71:7f:51:a4:fe:5a:36:84:22:b2:65:a0:da:
                    55:d6:39:f8:e4:f0:97:95:12:86:69:7e:05:3a:2e:
                    d1:53:5d:38:17:4b:86:ef:94:c5:aa:52:f6:d2:89:
                    4b:ed:ca:7e:3c:51:cf:97:9c:da:70:90:cd:11:df:
                    35:30:03:28:70:53:2f:9c:6a:b2:56:12:75:83:c0:
                    f5:80:0f:84:7a:cb:65:b0:4c:44:0f:38:b1:55:76:
                    c5:8d:bc:dc:30:71:06:88:27:12:b0:a0:5d:0d:31:
                    b1:18:b9:00:48:78:82:ce:4f:d7:31:a7:93:1f:4d:
                    f9:4f:cd:33:d2:c8:8f:8b:fb:8e:fd:a9:a7:f8:fd:
                    ec:6a:8a:fb:20:b9:ec:33:6d:82:a5:31:9f:ac:80:
                    a0:18:33:0c:50:df:de:0a:e8:a7:9d:f9:5b:0f:70:
                    fe:7b:27:12:27:e2:42:fb:04:36:49:5d:3f:8d:85:
                    f2:59:ea:3e:62:96:0a:58:f3:01:07:b9:6f:ad:0c:
                    9d:c5:af:1f:32:24:59:55:05:31:18:52:0c:35:73:
                    ba:06:56:16:db:db:48:4e:7a:58:9b:9e:3b:c5:82:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:64:C8:18:8C:CB:FC:12:EE:EB:93:EE:02:66:F8:07:63:BA:3B
            X509v3 Authority Key Identifier:
                keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/jDVkyBiMy_wS7uuT7gJm-Adjujs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:810::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:54:9d:2d:47:e6:d8:9c:07:b8:e8:7f:cb:44:65:3d:48:06:
         ea:38:ed:95:9b:51:48:8a:dd:01:49:9a:0e:8a:86:26:d9:5b:
         7d:e6:56:09:e5:af:3f:2e:54:b8:5d:af:d8:b8:9b:35:f0:41:
         49:d0:14:d7:78:3b:5d:d6:69:6d:85:f8:76:7c:43:37:c9:af:
         b6:9b:fc:75:fa:cd:e4:39:af:53:64:f4:2b:3a:56:82:d4:1a:
         d4:6f:8a:59:3c:e9:16:a8:9c:65:43:13:c8:93:d7:94:b1:de:
         55:92:e3:1e:ab:d8:d2:2c:e2:52:4c:f9:34:55:16:44:27:4f:
         b9:cc:e8:7a:26:b3:28:d6:58:cd:38:b4:e4:2e:c3:0f:80:f9:
         98:c9:5e:34:0f:d8:7f:39:a0:80:36:a1:f0:40:a6:86:29:ee:
         71:46:d0:0a:2e:3d:84:f8:90:e2:a6:dc:d2:dd:4a:5e:5a:68:
         60:96:38:92:d4:93:62:2e:8c:04:8d:15:e8:68:53:1e:bd:85:
         52:db:8e:3e:1a:8f:04:ac:6b:36:cd:1e:a3:f0:7e:67:e7:ae:
         34:07:33:e2:1c:8c:78:a9:e3:4d:7a:c0:ee:6b:08:0d:08:ea:
         ac:4c:72:71:83:f9:ed:cb:48:ca:49:5a:e4:68:56:b1:bf:8d:
         9b:5f:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----