Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/SBebfO-JEiTLVku7wA-Q7NJY9QI.roa
File:                     SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (raw, json)
Hash identifier:          iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=
Subject key identifier:   48:17:9B:7C:EF:89:12:24:CB:56:4B:BB:C0:0F:90:EC:D2:58:F5:02
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       019425FC2F282DE2B3817DBC35BA06B9A831
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/SBebfO-JEiTLVku7wA-Q7NJY9QI.roa
Signing time:             Thu 02 Jan 2025 07:47:51 +0000
ROA not before:           Thu 02 Jan 2025 07:47:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212354
IP address blocks:        2001:67c:b48::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:2f:28:2d:e2:b3:81:7d:bc:35:ba:06:b9:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Jan  2 07:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48179b7cef891224cb564bbbc00f90ecd258f502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:26:74:16:c3:09:6d:77:45:9c:db:c6:9e:
                    0b:44:c0:82:f8:04:ae:52:86:ba:fe:20:ca:c4:82:
                    4d:a4:03:ef:6b:9a:4e:7c:dd:50:7f:06:df:6d:96:
                    8c:a5:68:9c:4e:8b:64:36:3b:ec:ec:4a:3f:1b:91:
                    c5:22:92:30:60:b5:3c:30:97:38:1e:5f:3c:75:9e:
                    a4:b1:4e:68:f2:56:ad:42:63:51:4e:f6:09:66:fb:
                    3d:0c:07:93:62:05:e3:9e:37:ac:1b:f8:02:52:d1:
                    1d:b0:4b:1c:c2:2a:f6:ed:9f:d7:24:6a:a2:e9:60:
                    84:b1:e9:93:aa:f4:e2:92:de:68:39:d2:27:19:23:
                    2c:21:1a:d0:47:0c:e9:9d:3f:6a:e5:dd:90:55:7c:
                    d3:8f:2a:fc:46:37:b5:26:9c:38:70:77:a3:81:82:
                    f5:2b:26:05:c5:03:93:04:ec:01:81:b5:ee:ee:5d:
                    4a:35:8c:b2:98:2d:1a:e4:ab:5e:99:60:04:ed:6b:
                    03:67:37:b2:95:96:56:64:0f:58:5a:5b:0f:c3:a9:
                    32:21:84:94:2f:0c:79:97:c5:1d:df:d4:7c:4c:f5:
                    ca:96:68:05:fb:cf:6b:27:92:5f:ea:ae:93:18:b7:
                    98:84:4f:6e:82:86:7f:a5:77:f3:ec:26:b2:6c:50:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:17:9B:7C:EF:89:12:24:CB:56:4B:BB:C0:0F:90:EC:D2:58:F5:02
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/SBebfO-JEiTLVku7wA-Q7NJY9QI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b48::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:df:02:09:56:53:1f:84:55:c1:31:f5:d4:51:f8:c2:21:05:
         f3:0d:e8:e4:53:00:61:25:07:50:be:d4:5c:1a:e2:ec:35:aa:
         9f:b5:84:84:4d:f4:0b:03:dc:d1:55:88:96:f7:2b:7c:1e:75:
         f2:be:3f:c8:4b:65:71:ef:5c:5e:fb:31:ba:f9:58:6b:48:28:
         5f:fc:03:69:72:f6:2e:b1:00:33:e8:bf:c6:95:4c:42:53:91:
         f8:90:7b:fb:19:c2:d9:5d:fc:8c:88:76:03:32:1a:42:f8:1d:
         48:2b:59:1f:c4:aa:b4:a8:e0:76:a9:a5:ee:44:8a:21:d6:9e:
         9b:d5:d9:36:de:06:ee:8d:d2:08:e6:82:5f:a4:d8:ac:97:7d:
         2c:52:f2:ff:43:7e:22:b9:6f:a5:d9:b3:ff:ff:ae:6d:59:ea:
         1e:ee:fc:85:7d:f1:41:f6:7b:48:75:99:8f:9c:ec:3c:e9:04:
         f3:77:18:b0:dd:c2:5f:01:7e:92:ce:43:21:eb:8d:53:28:d3:
         8e:4b:60:09:3d:e6:d9:6d:1c:6d:7d:af:ed:cf:28:e6:c1:fe:
         c5:d6:6f:21:f3:31:ed:bd:d8:69:5e:e1:d2:2c:74:74:9d:9d:
         4c:07:93:ea:4b:72:63:12:30:1a:3d:1c:1f:75:a6:bd:40:4b:
         62:3b:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----