Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa
File:                     KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (raw, json)
Hash identifier:          zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=
Subject key identifier:   28:C8:80:59:41:57:8F:6C:16:AF:99:17:5F:11:40:D6:1C:02:CC:9B
Certificate issuer:       /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial:       01956750BEFA8839FD619D7E39D24E45BA96
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa
Signing time:             Wed 05 Mar 2025 17:18:19 +0000
ROA not before:           Wed 05 Mar 2025 17:18:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212950
IP address blocks:        2001:678:1040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:67:50:be:fa:88:39:fd:61:9d:7e:39:d2:4e:45:ba:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
        Validity
            Not Before: Mar  5 17:18:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=28c8805941578f6c16af99175f1140d61c02cc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:ab:f6:2e:0b:83:9b:a4:fd:5e:57:e3:ad:
                    cf:a6:c7:22:b9:68:a6:ef:8e:06:8f:63:85:91:6e:
                    25:1c:5e:93:5f:e5:13:7d:14:7b:fb:a3:4f:a6:9b:
                    31:09:ed:b0:96:09:ce:42:85:47:63:cd:de:dc:6a:
                    1c:c5:4e:c7:e2:f1:3a:ff:8c:f7:f7:45:9b:8c:a7:
                    6d:27:6e:2b:bc:70:d8:0e:b2:35:fd:48:2e:d2:06:
                    23:94:79:54:f7:1a:2a:44:b3:60:a8:b6:a5:13:fe:
                    bc:73:fd:9f:6a:9f:ee:bb:00:fe:e8:ac:b3:24:4c:
                    9c:6a:2c:26:43:4f:96:33:43:71:7f:34:29:bd:3e:
                    20:92:5f:1a:1b:df:8c:bf:ed:f9:97:e7:ee:e4:25:
                    23:c9:78:44:f6:75:db:c5:f9:a8:f9:ba:54:ca:5f:
                    ed:5d:d1:68:b5:25:c1:90:ae:32:84:3d:de:ba:be:
                    6f:d7:42:85:02:4b:d5:13:2a:95:8b:db:6a:18:11:
                    03:48:41:e4:dc:46:60:1a:08:ad:32:fb:21:48:cf:
                    4b:46:7f:9f:09:1d:c2:67:9a:23:60:c9:94:63:b0:
                    d8:4b:1e:32:25:6c:00:96:4f:fb:7c:fe:14:f6:36:
                    4f:f9:fb:dd:0b:a2:8b:04:ca:2e:b3:58:fd:46:3e:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:80:59:41:57:8F:6C:16:AF:99:17:5F:11:40:D6:1C:02:CC:9B
            X509v3 Authority Key Identifier:
                keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:32:20:9f:2a:c2:97:a5:99:5d:5f:f9:9d:17:7b:44:f5:
         58:31:29:b4:7f:0d:ca:70:d0:d3:31:78:fd:8e:b9:35:fa:c9:
         fd:e4:cd:be:a3:15:5f:d3:29:a5:df:69:80:b6:fe:cb:8a:d6:
         92:a3:d8:19:74:56:7b:3b:92:f9:ac:17:e5:00:0f:8b:d1:ac:
         27:af:cf:b9:56:cc:4a:b9:89:2b:3b:42:cd:7f:8d:1c:1f:64:
         cb:9c:8d:51:79:ab:29:f7:7a:f6:3e:2d:5d:f5:44:d9:cd:4e:
         42:04:fc:24:06:c5:d8:e1:1d:ea:9c:dd:bf:53:d0:ef:bd:ba:
         b1:66:64:45:6d:f3:79:1f:10:bc:68:f5:d3:7b:cb:08:58:2c:
         a2:68:f4:25:c5:a5:e3:a8:f3:49:82:d1:f6:e8:d7:04:79:73:
         10:71:5b:94:59:5b:0d:fe:0f:1c:56:80:1e:14:45:0f:f1:32:
         3a:e0:d6:32:b2:27:6e:cb:01:24:c2:98:5b:41:4e:4b:02:91:
         90:28:29:d2:47:d9:0e:1b:35:42:0f:e7:a0:99:3b:4e:ae:c3:
         d0:ac:14:2c:f6:bf:98:a0:e0:3e:e4:b7:f7:3c:03:44:0f:7d:
         ca:1f:aa:d1:72:d9:98:93:65:50:06:31:d0:2f:ea:47:63:cb:
         f1:a7:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----