Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/w-1zMbc9fSVVQQhGydFD8XrHnGg.roa
File:                     w-1zMbc9fSVVQQhGydFD8XrHnGg.roa (raw, json)
Hash identifier:          2dYJVen0mOZhk8iHs1ljj0nfQhsjWVxn7a9kKF8KMns=
Subject key identifier:   C3:ED:73:31:B7:3D:7D:25:55:41:08:46:C9:D1:43:F1:7A:C7:9C:68
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       019594B513E578FB23E27C803AEF8BEB8428
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/w-1zMbc9fSVVQQhGydFD8XrHnGg.roa
Signing time:             Fri 14 Mar 2025 12:50:49 +0000
ROA not before:           Fri 14 Mar 2025 12:50:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39067
IP address blocks:        2a0d:1580:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:94:b5:13:e5:78:fb:23:e2:7c:80:3a:ef:8b:eb:84:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Mar 14 12:50:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3ed7331b73d7d2555410846c9d143f17ac79c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:3d:ea:9b:41:f3:0a:07:c8:be:aa:54:db:
                    28:3b:15:81:a6:e2:36:e2:19:fe:e1:bd:36:b2:40:
                    56:f9:73:88:5a:b7:bd:16:57:4b:79:c7:43:07:33:
                    fe:43:8b:41:fc:73:73:6f:6c:e4:a0:0f:d7:e1:c4:
                    eb:5a:f8:70:69:f1:a7:d5:1c:5b:46:b6:24:3d:9f:
                    7c:69:48:05:cf:61:f8:88:36:bb:63:83:1d:3a:f4:
                    9b:8e:d1:d8:bb:42:c4:e6:6e:37:ee:8d:f4:56:1c:
                    93:72:7c:b4:ef:7d:e9:fc:dc:25:65:b9:02:f4:2a:
                    b6:ba:1b:1b:c5:31:59:f4:68:84:4d:15:fb:3c:9a:
                    20:08:aa:88:89:9d:29:71:3c:df:d3:41:6e:d0:aa:
                    1e:5f:63:4a:a7:4e:95:df:2e:06:6b:bb:c9:32:e2:
                    d8:6f:22:a6:dd:aa:c4:18:6a:ff:ea:02:46:e7:06:
                    cc:f5:2b:67:b8:25:a4:d7:85:e6:bf:47:73:51:d5:
                    ab:e3:b9:3a:6f:6d:8d:a5:ce:1a:83:9c:3d:0d:df:
                    9b:16:94:eb:da:06:5c:26:fa:69:d5:39:5e:79:d5:
                    f3:4f:99:1c:cf:60:04:f5:83:18:42:9f:70:9d:22:
                    78:82:5b:18:e3:78:c9:93:d4:eb:36:1e:c0:50:8b:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:73:31:B7:3D:7D:25:55:41:08:46:C9:D1:43:F1:7A:C7:9C:68
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/w-1zMbc9fSVVQQhGydFD8XrHnGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:1580:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:5a:3a:4f:87:3b:57:71:09:75:d8:b8:95:ae:bb:f7:cb:f8:
         0d:2b:f6:4e:49:f1:17:a4:2a:3b:43:2b:ea:b1:e6:9e:ec:1c:
         57:8e:5f:ac:c2:45:67:3a:4a:fe:70:66:02:cd:2c:c6:a2:1d:
         8b:ab:cd:ae:75:2f:1b:69:a6:12:a9:13:63:ec:ac:6b:2e:3c:
         ac:ae:5e:14:26:05:88:93:9b:66:b1:e4:cf:6d:01:54:d4:57:
         13:c6:a4:2c:4f:cd:69:17:c7:79:b1:5c:95:36:12:61:01:f3:
         08:2e:d2:90:26:bc:b0:fd:6b:e0:ae:88:78:70:ad:67:50:39:
         30:71:79:2c:54:91:3f:b2:18:cd:fe:1a:ee:58:7e:ee:a2:84:
         59:17:4f:c3:03:11:e4:67:9f:e7:5f:4a:25:cf:cf:94:75:af:
         59:3b:9f:82:21:cc:52:5f:57:85:75:10:49:2f:80:08:44:5c:
         8f:22:bc:ac:1d:c0:3a:ca:17:6c:83:25:47:d8:c9:af:9c:34:
         70:bc:06:65:45:f1:ca:70:29:da:60:9f:ba:a3:ea:1d:8c:0e:
         56:a0:93:a1:92:d6:fe:c2:9c:81:20:f9:32:39:7c:c1:c6:09:
         92:2f:95:28:1c:f4:69:36:5c:31:f6:2e:11:e5:4b:8f:88:9c:
         45:18:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----