Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa
File:                     VpccTipW0lNr-K9sqrEpGYv-Kv8.roa (raw, json)
Hash identifier:          zrRywVhDOEX8ppVFjwMkfY6qiZ8PRXRoZXgmGI39CI4=
Subject key identifier:   56:97:1C:4E:2A:56:D2:53:6B:F8:AF:6C:AA:B1:29:19:8B:FE:2A:FF
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       0194F044603D3A711CD740A61B1AB25F4F3C
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa
Signing time:             Mon 10 Feb 2025 14:30:00 +0000
ROA not before:           Mon 10 Feb 2025 14:30:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58051
IP address blocks:        193.105.207.0/24 maxlen: 24
                          2a01:fdc1::/32 maxlen: 32
                          2a01:fdc2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f0:44:60:3d:3a:71:1c:d7:40:a6:1b:1a:b2:5f:4f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Feb 10 14:30:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=56971c4e2a56d2536bf8af6caab129198bfe2aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:fe:61:3d:22:9c:39:cc:90:c2:67:7e:89:
                    67:29:42:6d:7d:34:fc:5c:83:46:34:20:ad:c6:45:
                    14:61:d9:29:28:b6:0c:8a:8a:c3:dc:52:14:3e:c5:
                    8c:a5:df:08:76:24:22:8f:32:b0:64:a0:68:9c:12:
                    0f:c4:6f:19:bc:5f:b7:92:9c:c9:da:5c:80:d1:a4:
                    5f:f4:8f:d4:fc:d7:5d:36:e5:6b:22:f0:5a:4a:8b:
                    f3:f8:9f:6b:ee:13:87:44:f5:29:87:7a:63:cf:c2:
                    09:33:cb:61:db:fb:1f:9c:8d:6f:ed:a5:7a:ec:04:
                    dd:79:23:cc:fe:7c:af:b9:2f:d9:c2:dc:f6:30:64:
                    3b:9e:52:a8:55:a5:1f:2e:3e:e2:e7:7e:6e:ba:6b:
                    49:16:53:25:cc:df:d4:fd:22:35:cc:4d:75:58:07:
                    14:c8:78:76:5a:27:44:8d:11:82:b0:52:c6:11:04:
                    d9:c1:6a:74:37:8c:9f:5c:2b:d0:22:6f:3a:b0:a2:
                    9a:b5:1e:b6:94:06:c2:59:35:52:f3:e9:b8:61:20:
                    16:e0:29:c7:9e:3e:53:53:cc:0d:e0:2e:b9:b7:35:
                    b0:10:ff:8b:e8:85:c3:47:ce:4c:84:86:c5:bb:ae:
                    d0:ae:cc:2b:67:f4:41:25:ed:08:b8:f3:90:ed:e7:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:97:1C:4E:2A:56:D2:53:6B:F8:AF:6C:AA:B1:29:19:8B:FE:2A:FF
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.207.0/24
                IPv6:
                  2a01:fdc1::-2a01:fdc2:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:17:b9:dc:94:c1:5d:97:f9:ef:24:f8:1f:1d:35:23:f3:
         c4:e6:66:84:2a:e8:6d:07:5b:06:3d:49:9f:78:3b:f0:e5:1b:
         3e:cc:97:81:92:d7:01:77:23:34:2d:ba:1f:30:fc:c0:da:64:
         af:6f:c6:1f:f5:6b:87:2e:c4:c6:8f:22:c0:3d:db:1b:e6:98:
         5b:9c:ea:ed:f1:0d:79:0a:68:43:c1:79:62:26:bf:f1:c2:61:
         7e:49:1a:81:f8:de:d6:0e:75:62:83:3f:49:e2:36:90:26:fd:
         3c:df:55:cb:5d:fa:12:ac:21:56:17:9c:cc:e2:6a:fa:61:71:
         fc:36:ff:ca:a8:ce:fd:0b:52:5f:59:82:d2:21:3d:73:66:f2:
         eb:da:c6:3c:f9:aa:5a:55:56:eb:69:a7:99:49:83:5e:75:6c:
         49:e7:79:84:98:c7:61:57:1c:b2:7c:4e:e9:d4:58:dc:a5:31:
         a2:17:e0:5f:19:99:ac:a9:5e:cc:5d:47:54:31:1d:e7:76:ce:
         37:96:34:33:45:cf:29:8e:00:8f:66:21:cf:46:c9:e7:ed:1c:
         5c:47:10:c8:06:80:70:1a:ed:e6:d4:1f:7e:f6:79:e3:e3:1c:
         1b:7a:de:c4:f2:2d:92:51:90:84:bf:17:db:e0:76:73:0b:67:
         39:bd:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----