Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kj7kinsfLRhL_IoV619KJi8FFL8.roa
File:                     kj7kinsfLRhL_IoV619KJi8FFL8.roa (raw, json)
Hash identifier:          PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=
Subject key identifier:   92:3E:E4:8A:7B:1F:2D:18:4B:FC:8A:15:EB:5F:4A:26:2F:05:14:BF
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019422FC384BA47254DE9FAD3F89B30821E9
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kj7kinsfLRhL_IoV619KJi8FFL8.roa
Signing time:             Wed 01 Jan 2025 17:49:02 +0000
ROA not before:           Wed 01 Jan 2025 17:49:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214431
IP address blocks:        2a03:9382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:38:4b:a4:72:54:de:9f:ad:3f:89:b3:08:21:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jan  1 17:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=923ee48a7b1f2d184bfc8a15eb5f4a262f0514bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:c4:1d:28:44:9c:a2:18:f4:8b:03:44:1a:
                    96:c8:45:d7:5f:a3:00:22:e6:a6:29:84:3c:16:c1:
                    a1:16:4f:1f:ce:3e:40:e9:6f:64:fd:47:b1:13:95:
                    f4:ad:0b:ee:e9:be:27:46:9b:bb:e5:1f:30:d1:cd:
                    a1:f5:e6:86:46:89:44:24:e0:20:a3:77:91:bc:01:
                    60:35:5a:75:d8:62:f2:b8:72:af:c3:0e:ac:c0:9a:
                    8c:83:9f:b3:cb:a2:9f:ef:ae:9b:9d:25:7f:19:e4:
                    7a:7b:9b:77:78:4a:25:33:b1:3a:a4:a5:a8:82:1d:
                    d3:0f:de:bc:40:50:da:d0:09:09:e9:d0:f5:d7:37:
                    b0:f4:02:ca:a5:4f:a9:bb:20:e9:e5:80:a1:83:b9:
                    50:0a:ba:16:dc:c1:73:da:44:74:64:24:91:db:93:
                    c9:1b:fd:5d:25:71:2a:1d:87:7a:5b:ae:60:5b:fb:
                    eb:ee:cc:44:ab:75:23:4b:db:28:32:09:44:cd:a7:
                    78:ac:5b:de:8b:d8:c4:52:de:95:d7:fc:75:e1:74:
                    42:9d:56:58:4e:97:84:c2:68:5e:24:1b:3a:fa:ae:
                    e9:77:8d:79:6c:76:29:06:86:05:04:6f:6b:38:fc:
                    3c:51:9e:a4:1e:1c:98:aa:b4:1f:35:8e:2a:2d:dc:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:E4:8A:7B:1F:2D:18:4B:FC:8A:15:EB:5F:4A:26:2F:05:14:BF
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kj7kinsfLRhL_IoV619KJi8FFL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:9382::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:fb:c4:0b:ae:bb:b3:a1:ce:59:f7:b5:46:ac:f5:46:fa:3c:
         a0:92:60:cd:10:57:3f:46:a4:86:2a:b6:d3:39:3a:65:f4:b2:
         a1:e1:d0:0c:e3:39:21:4e:52:bb:0f:81:36:fc:d9:da:1a:d5:
         ae:91:44:f4:88:c6:98:e8:33:81:c9:a3:c5:35:54:5d:f3:fb:
         fa:6c:13:4a:82:dc:c5:4d:7e:cf:c8:75:68:98:4d:62:2c:cd:
         82:cc:44:6e:10:4a:e7:bf:12:4d:94:57:c4:b7:32:b0:db:33:
         d3:0a:cb:dc:93:dd:cd:e1:c6:05:62:ac:e9:44:97:58:3a:a6:
         a5:49:21:69:8b:d3:f4:8d:fb:f7:8b:1a:9c:4e:e4:b3:2d:bb:
         42:a0:c5:5a:c9:bf:96:54:9e:84:d9:53:96:0b:6e:76:93:ad:
         1c:fc:c8:2e:58:18:4c:d0:2c:5c:48:ec:73:79:b0:81:7d:e0:
         78:c1:a0:e3:51:e8:74:b9:18:36:fc:f1:e7:85:4c:9e:58:b7:
         d7:fc:ca:1a:c9:3d:6b:5b:d0:c2:33:57:7f:88:40:8b:50:17:
         f7:ec:b0:e4:3f:7a:cc:32:00:25:c3:07:95:c8:0e:06:b3:67:
         53:ab:18:76:06:d5:43:c8:28:80:ae:71:23:c8:40:6f:d8:41:
         8c:23:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----