Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/OZJbCxA6K7C-r6l9RlfALAWRqx4.roa
File:                     OZJbCxA6K7C-r6l9RlfALAWRqx4.roa (raw, json)
Hash identifier:          th+R+lZ90fa3fU16YOhnyqxjpi3zzqaMB14zx93u4DU=
Subject key identifier:   39:92:5B:0B:10:3A:2B:B0:BE:AF:A9:7D:46:57:C0:2C:05:91:AB:1E
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01942369F7EFF50DE90B501DE8FBA77C5C47
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/OZJbCxA6K7C-r6l9RlfALAWRqx4.roa
Signing time:             Wed 01 Jan 2025 19:48:54 +0000
ROA not before:           Wed 01 Jan 2025 19:48:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215276
IP address blocks:        2a0f:7803:fad0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:f7:ef:f5:0d:e9:0b:50:1d:e8:fb:a7:7c:5c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jan  1 19:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=39925b0b103a2bb0beafa97d4657c02c0591ab1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:a4:af:32:80:98:3f:d9:ee:87:b8:c7:f6:
                    f5:5a:63:17:08:5d:34:cd:70:a8:d7:2e:5b:0a:58:
                    ba:a1:f1:b3:a7:45:7a:7a:c2:13:7e:83:bf:bf:bd:
                    b3:9e:54:c7:14:03:b9:5e:ea:7f:fc:da:42:b5:43:
                    af:2f:7b:c3:46:60:67:ce:fd:05:17:61:38:56:38:
                    f4:48:54:ab:86:1c:3a:17:6b:a8:0e:59:a6:ed:e5:
                    9f:a9:7f:d5:47:76:50:d1:b7:0b:79:b6:f9:43:ea:
                    9d:17:40:a0:0f:87:c3:4e:ab:5d:35:34:4d:8b:87:
                    66:4d:ce:54:c7:c2:99:89:c9:d8:21:e5:23:ce:fb:
                    3f:f7:ee:3a:eb:90:01:95:38:ca:a1:fe:22:0c:8e:
                    54:90:b5:80:b1:ab:0a:cf:8b:bd:fe:01:f6:98:c3:
                    4a:53:9e:3a:8f:ee:7c:6b:3d:4c:fd:6c:7f:0c:af:
                    2b:b3:87:2b:45:36:fb:d1:0e:40:ba:e2:49:31:d1:
                    88:ff:4f:e9:96:0c:15:26:3f:b6:22:2e:aa:ed:bb:
                    e6:34:59:83:a1:05:f2:60:cc:cb:e1:f7:fb:34:6c:
                    e2:30:3a:d4:73:04:c7:38:7b:29:1a:19:16:f1:3f:
                    94:a0:41:55:12:de:46:72:7b:26:77:a6:81:9a:a7:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:92:5B:0B:10:3A:2B:B0:BE:AF:A9:7D:46:57:C0:2C:05:91:AB:1E
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/OZJbCxA6K7C-r6l9RlfALAWRqx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:fad0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:5c:ce:94:2c:d0:bc:2e:c6:c0:a7:c1:d3:14:14:fb:61:
         16:f5:14:fa:f5:6a:27:13:f7:d9:38:1e:43:59:ea:90:3d:9a:
         55:e6:b2:c2:3c:ab:e5:f1:c6:89:9c:84:89:7c:bf:fd:87:4b:
         47:9b:bf:c9:cd:21:bd:e2:c0:61:89:8f:33:4e:cc:fb:c8:51:
         3e:91:95:b4:16:a0:3b:f5:44:ac:b0:66:aa:0c:de:2f:0a:11:
         a1:63:bc:84:5b:84:ae:eb:c7:bc:bc:29:cc:09:66:16:1b:86:
         2c:e1:a3:c1:21:4b:e3:eb:a4:66:ae:c0:52:45:70:9c:bc:45:
         24:93:e3:29:8e:70:2c:70:6d:12:16:0d:81:54:fe:15:0a:3c:
         eb:30:ff:72:a8:ae:10:06:ba:bf:1d:83:36:1b:22:a1:e2:29:
         cd:f1:00:3d:74:88:43:47:86:4c:d4:8a:4c:29:32:54:94:27:
         e5:22:d1:9b:f7:9b:79:8a:87:3c:b3:e1:d4:a8:dd:a8:a7:7d:
         2d:1c:73:a8:07:d9:c5:cc:ea:1d:7b:27:ce:11:fe:f8:41:8e:
         8b:ab:84:ab:5d:bc:b4:08:28:0b:3f:d6:0e:e7:95:d0:3f:c5:
         b6:28:4c:ae:c3:d0:45:dc:7c:33:7e:4f:c4:d7:3b:ec:d4:5a:
         c8:85:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----