Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/RZ8C7kJw0WnSALfkl5thd-tNGAc.roa
File:                     RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (raw, json)
Hash identifier:          siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=
Subject key identifier:   45:9F:02:EE:42:70:D1:69:D2:00:B7:E4:97:9B:61:77:EB:4D:18:07
Certificate issuer:       /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial:       019426D97D7F68D9A5A063D2AD6AB69B2D9E
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/RZ8C7kJw0WnSALfkl5thd-tNGAc.roa
Signing time:             Thu 02 Jan 2025 11:49:35 +0000
ROA not before:           Thu 02 Jan 2025 11:49:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64398
IP address blocks:        2a0c:b0c6::/31 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:7d:7f:68:d9:a5:a0:63:d2:ad:6a:b6:9b:2d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
        Validity
            Not Before: Jan  2 11:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=459f02ee4270d169d200b7e4979b6177eb4d1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:5e:b6:1b:12:60:c2:d4:bb:ad:f5:47:0b:
                    81:2d:84:df:e2:55:42:75:27:25:e4:f4:b3:aa:63:
                    a3:11:0a:2b:10:d4:3c:04:3b:24:16:e4:77:42:92:
                    bf:2f:d3:a3:61:e1:9b:6e:21:7f:0d:6e:e0:98:cd:
                    7d:7a:db:ab:bb:79:78:03:df:a9:d6:a7:a1:ef:78:
                    84:f0:ae:39:5b:5f:9d:1f:34:d0:76:c7:86:95:6d:
                    1a:46:00:8b:08:61:dd:a8:dd:c1:e3:7f:0d:5b:05:
                    de:8d:85:4c:96:dd:1c:e6:44:b1:a4:27:f1:1d:a0:
                    8d:49:6f:20:ae:a8:16:76:67:ba:28:5d:fd:35:27:
                    15:73:8e:8b:68:3b:8a:91:51:fa:82:3c:38:4d:63:
                    c2:c3:5d:99:cc:84:b8:41:1f:3d:21:3c:13:15:05:
                    59:2d:d1:4c:fd:84:82:e5:05:45:3e:86:b7:71:46:
                    ca:7f:81:79:f6:dd:2d:57:a5:0a:3f:be:a4:08:db:
                    dd:e1:6e:0c:66:cc:d9:22:2f:95:1a:52:c1:20:d0:
                    e7:93:6d:cd:13:e1:47:2f:8e:71:64:f2:c4:0f:19:
                    dc:8a:03:c6:04:76:5f:cf:e8:f9:b2:b5:2c:3e:6f:
                    9f:e3:94:49:0c:25:4b:40:f7:5e:1c:ad:3b:d8:fc:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9F:02:EE:42:70:D1:69:D2:00:B7:E4:97:9B:61:77:EB:4D:18:07
            X509v3 Authority Key Identifier:
                keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/RZ8C7kJw0WnSALfkl5thd-tNGAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b0c6::/31

    Signature Algorithm: sha256WithRSAEncryption
         45:60:cb:8f:8d:f9:88:a8:e6:f1:bb:b1:ff:66:5e:62:8d:f7:
         95:5c:52:64:89:b8:a5:48:10:56:c4:3c:3d:04:8c:e1:37:24:
         7d:45:99:89:a8:85:df:62:b8:7d:a8:47:12:8a:03:bb:9b:a9:
         7c:7d:67:c5:8f:bb:5e:e2:85:c3:ca:90:93:7e:b9:a8:d9:c4:
         55:8e:98:b6:72:0d:20:43:3d:16:21:f1:82:01:12:30:fc:49:
         ec:f4:f8:48:7d:cd:9f:f5:93:e1:c2:59:93:ed:4e:4f:ff:f3:
         e8:4e:8d:0f:62:75:46:3f:d5:d4:98:e0:7b:b4:61:26:39:a1:
         7c:bf:5b:fa:f7:d3:11:72:b6:44:a5:30:09:49:ec:dc:cc:eb:
         bf:9b:0f:36:42:28:1a:71:df:b0:ff:33:74:1d:e9:19:c8:24:
         20:de:f8:73:68:0c:d2:88:81:8c:0e:0f:13:53:07:f4:fc:95:
         85:28:dd:68:97:97:19:15:3f:df:8d:bb:e5:fd:88:7b:32:91:
         e6:fe:24:80:e8:40:28:02:f4:0c:a9:17:77:53:e7:4a:f5:d3:
         43:7b:85:01:d6:8b:61:02:58:98:90:ae:e7:bd:70:94:03:7f:
         dd:27:67:19:c6:0b:db:7e:d5:9f:66:75:03:03:54:5a:a4:a9:
         38:d8:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----