Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/alfL1bRTQjOY-E2KjHP8N4Ulue0.roa
File:                     alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (raw, json)
Hash identifier:          ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=
Subject key identifier:   6A:57:CB:D5:B4:53:42:33:98:F8:4D:8A:8C:73:FC:37:85:25:B9:ED
Certificate issuer:       /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial:       019427B5549EDEF492EA079EE9E812EDCEBA
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/alfL1bRTQjOY-E2KjHP8N4Ulue0.roa
Signing time:             Thu 02 Jan 2025 15:49:42 +0000
ROA not before:           Thu 02 Jan 2025 15:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204302
IP address blocks:        2001:678:640::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:54:9e:de:f4:92:ea:07:9e:e9:e8:12:ed:ce:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
        Validity
            Not Before: Jan  2 15:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a57cbd5b453423398f84d8a8c73fc378525b9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:56:0b:26:12:83:2c:fb:48:38:00:5e:9d:
                    54:03:30:aa:1f:0a:96:79:0a:7f:b6:32:94:94:b2:
                    ee:9c:e4:5d:0a:71:cc:75:9d:76:4f:2b:37:77:51:
                    7b:e6:c0:bb:a2:2c:a3:45:64:0c:0c:e0:2d:88:ca:
                    c4:58:88:30:26:ba:59:e7:3a:7f:60:04:6c:61:52:
                    48:48:63:b2:d7:8b:86:0b:a6:9f:ca:e0:9a:85:ba:
                    e2:ad:a1:f7:3c:a8:72:39:63:7d:66:0b:e8:35:b0:
                    51:7f:dd:a1:38:98:ed:b7:c1:c4:40:b7:c9:70:fe:
                    83:d9:c6:e8:bb:a1:82:26:89:64:85:29:8f:7f:d4:
                    39:ee:c1:58:00:18:eb:38:2d:b7:21:82:52:4a:ea:
                    0c:cf:51:68:fc:dc:42:c5:fd:c1:63:e9:13:b0:3e:
                    e4:dc:95:dd:6a:dc:b6:a7:53:79:a8:e2:46:99:20:
                    b7:25:ab:8d:c5:34:c9:4e:f9:29:4a:8e:dc:70:51:
                    1f:cc:52:73:27:74:ca:01:0e:db:41:53:d9:dd:a6:
                    da:5b:19:99:bd:02:7f:08:33:16:19:de:0b:d5:ae:
                    4a:d1:af:db:4d:bf:f0:64:7c:f5:3d:4a:1a:48:01:
                    f4:bb:2f:56:59:db:cd:ae:d8:38:c6:6b:39:03:a5:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:CB:D5:B4:53:42:33:98:F8:4D:8A:8C:73:FC:37:85:25:B9:ED
            X509v3 Authority Key Identifier:
                keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/alfL1bRTQjOY-E2KjHP8N4Ulue0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:41:aa:bd:68:6b:02:79:58:a6:3e:d7:d3:a5:1b:f5:23:05:
         ee:55:27:ee:42:76:58:c2:47:3a:a9:7d:7f:0b:12:b7:4c:ef:
         c9:29:3d:fa:d7:2f:45:17:d4:4b:a3:87:1c:ea:ec:f1:ac:4c:
         9c:b9:9e:5d:a9:d7:10:86:bf:22:93:99:64:8d:4e:03:bc:87:
         bc:65:83:63:89:28:1e:cc:b5:87:e1:31:4a:6a:33:6c:9c:70:
         df:02:35:16:a4:69:35:f5:f2:db:2f:41:a1:66:44:cd:db:ab:
         87:7e:0a:5e:e0:fd:41:ec:bd:6f:67:06:6f:fa:7f:65:e6:9b:
         0e:7d:1e:e5:e5:e3:96:92:2d:55:33:83:fd:be:3c:82:db:aa:
         31:70:8e:c1:69:28:dc:0f:32:ac:b9:f5:e3:c9:81:1b:49:6c:
         65:94:4f:f9:a9:d2:18:7e:c0:d4:5e:fb:d1:38:e8:01:f2:2e:
         c3:f6:69:b2:21:d1:d9:4c:28:89:1c:49:38:a1:4e:2a:9f:ea:
         c2:98:31:cc:c7:80:ee:33:3b:63:43:41:6c:1b:16:89:c3:c0:
         cc:f4:75:5d:65:81:a1:67:e5:cb:d6:77:37:e3:72:e8:fd:07:
         3f:46:3f:60:5d:cb:6b:d4:6f:d4:f5:91:92:cf:92:a7:2b:fc:
         53:cf:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----