Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/at6S757SKotKGNoPPh4lgezt49Q.roa
File:                     at6S757SKotKGNoPPh4lgezt49Q.roa (raw, json)
Hash identifier:          Ch4QWKs8zeNNw7/HJyM4ubATp0yrKPDVxwzQXT6Xw84=
Subject key identifier:   6A:DE:92:EF:9E:D2:2A:8B:4A:18:DA:0F:3E:1E:25:81:EC:ED:E3:D4
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01942369EE79ECB9B3DFBEE9F49538112334
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/at6S757SKotKGNoPPh4lgezt49Q.roa
Signing time:             Wed 01 Jan 2025 19:48:52 +0000
ROA not before:           Wed 01 Jan 2025 19:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201386
IP address blocks:        2a0f:7803:f850::/44 maxlen: 48
                          2a0f:7803:f8a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:ee:79:ec:b9:b3:df:be:e9:f4:95:38:11:23:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jan  1 19:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ade92ef9ed22a8b4a18da0f3e1e2581ecede3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:a4:2a:aa:68:63:68:56:b9:17:c6:28:70:
                    38:ff:26:04:7a:ca:d7:c5:f3:bd:79:a3:87:5c:99:
                    25:b8:97:c5:3d:7e:57:e0:4d:c5:b2:70:45:e2:aa:
                    4e:52:72:ef:6e:b6:d0:9e:e4:55:00:e7:d7:c0:0a:
                    19:51:67:90:e4:28:5a:3e:81:3e:02:9f:cc:9c:94:
                    61:9e:d3:ca:52:ae:fb:15:67:30:21:f2:da:b1:4e:
                    bd:14:17:28:b7:ef:3a:e5:4c:8a:f7:c3:4d:06:9d:
                    39:6f:00:58:3a:86:9f:94:15:49:79:11:2b:19:bb:
                    53:c2:01:f8:d6:f7:3b:85:5d:a9:83:43:02:d6:b6:
                    0c:69:90:d4:fc:bc:3e:ab:01:af:f1:ac:4a:83:8e:
                    ea:8a:8e:fb:6e:5d:d6:a0:ff:3f:05:21:90:28:d0:
                    16:01:1b:58:35:32:45:df:4b:86:65:6e:74:1f:17:
                    a2:32:4e:8e:77:b0:40:ee:22:28:1f:f4:7c:d0:c0:
                    7d:62:c4:fa:a2:81:56:6d:25:85:29:15:37:e8:cc:
                    f1:2b:6f:5e:d8:20:81:2f:78:12:95:14:45:73:b4:
                    16:b8:c3:66:a3:c1:77:10:98:4e:e0:85:f4:e5:8a:
                    5a:a7:e1:2a:cf:32:b1:e1:8f:87:05:09:42:50:97:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:92:EF:9E:D2:2A:8B:4A:18:DA:0F:3E:1E:25:81:EC:ED:E3:D4
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/at6S757SKotKGNoPPh4lgezt49Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:f850::/44
                  2a0f:7803:f8a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:d6:c0:73:43:08:ee:24:69:43:ba:77:22:97:18:11:89:
         89:1c:1b:5c:68:1e:7e:ba:49:25:92:e3:39:86:6b:dc:e6:96:
         a0:01:73:9d:d1:ab:39:03:e7:aa:18:13:ef:df:e6:ee:8e:0b:
         1a:18:05:50:a6:01:d1:e6:30:ce:00:0c:1a:3f:bc:61:d8:53:
         7a:e1:88:ed:18:51:24:78:be:4b:cb:15:67:94:bc:b6:6b:9c:
         bd:d3:37:81:aa:73:89:c7:23:ec:71:73:57:2a:45:cb:a4:f9:
         50:82:ed:ab:2e:6d:ea:64:29:ef:75:90:c2:09:f3:05:fc:ce:
         09:0f:04:0c:38:ae:ef:ef:23:65:f4:af:8c:b0:64:25:0c:0b:
         34:b6:d1:de:e9:b5:19:31:88:ea:fc:37:33:8b:fb:8f:21:43:
         f5:c5:40:75:f3:3f:4f:6a:19:89:ec:30:02:d1:a7:c4:88:7c:
         39:22:d7:4a:48:bb:00:28:38:08:a9:5d:08:83:1c:db:a0:89:
         3c:e9:09:bf:7f:15:01:09:f7:b3:08:a7:74:91:29:80:16:1a:
         36:10:50:33:c7:ee:27:3e:26:bd:1f:99:5a:23:36:7f:fd:8c:
         d0:73:15:ac:0d:2a:51:f9:fd:ac:30:bb:66:77:a2:d1:73:da:
         29:9c:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----