Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/rClNA5S0Q3fTjOMbaJwSykyfOp0.roa
File:                     rClNA5S0Q3fTjOMbaJwSykyfOp0.roa (raw, json)
Hash identifier:          FXdY+wyYX+sNpI3Br0trB4QTzeKr7VAjRPB7tjZCrPU=
Subject key identifier:   AC:29:4D:03:94:B4:43:77:D3:8C:E3:1B:68:9C:12:CA:4C:9F:3A:9D
Certificate issuer:       /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial:       0195F5EBDB5060CB0C5750393C297825DB73
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/rClNA5S0Q3fTjOMbaJwSykyfOp0.roa
Signing time:             Wed 02 Apr 2025 09:53:49 +0000
ROA not before:           Wed 02 Apr 2025 09:53:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215515
IP address blocks:        2a0e:2300::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f5:eb:db:50:60:cb:0c:57:50:39:3c:29:78:25:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
        Validity
            Not Before: Apr  2 09:53:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ac294d0394b44377d38ce31b689c12ca4c9f3a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:5c:ab:cb:18:3c:08:6f:83:b3:80:36:90:
                    45:62:9e:9b:dd:87:09:2d:3c:a1:c0:08:d1:c1:ad:
                    49:6e:cd:3c:3d:24:3f:c2:ba:d5:13:61:a8:fd:af:
                    79:07:38:43:32:0e:8e:4a:94:10:30:ee:c6:f1:1a:
                    ee:db:93:6a:8f:f4:61:e0:8e:26:40:a5:03:71:c7:
                    42:a7:88:13:04:85:df:70:46:50:d4:6a:41:ab:ff:
                    cf:26:ad:74:ce:28:54:ea:21:25:1c:45:8e:47:09:
                    77:90:db:54:5b:a3:ae:fc:19:bc:ab:10:53:73:28:
                    ae:70:c6:44:e2:38:13:89:41:d7:85:32:cd:2d:12:
                    cc:de:f0:64:6b:2f:84:3b:bd:8d:c7:78:3a:89:16:
                    12:02:c3:b4:c3:47:e7:c5:44:5e:26:87:c2:57:46:
                    69:02:8c:31:02:8c:f1:67:2c:0b:f7:26:53:ae:54:
                    8f:f0:1c:6b:74:70:d7:51:40:4a:71:97:e4:7e:8a:
                    ad:df:2a:82:0d:25:af:f7:21:1b:6b:53:c6:bd:c1:
                    34:6f:9b:35:c7:4c:0e:f1:a1:d2:a4:ca:d0:28:6b:
                    6b:1f:6f:9d:67:99:7b:b5:ba:72:67:90:b0:53:04:
                    af:f3:fa:6b:44:89:6d:da:e2:82:48:40:64:ea:c3:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:29:4D:03:94:B4:43:77:D3:8C:E3:1B:68:9C:12:CA:4C:9F:3A:9D
            X509v3 Authority Key Identifier:
                keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/rClNA5S0Q3fTjOMbaJwSykyfOp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:2300::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:b9:41:19:35:fd:9c:0f:59:4e:ea:a2:18:22:13:08:16:
         87:b0:7f:0e:29:38:dc:93:1c:3f:1a:b3:5e:c3:49:be:5f:31:
         97:09:d6:b1:46:65:38:b4:71:9c:96:99:f3:18:98:12:0a:18:
         7e:43:c4:74:cf:c0:ba:d4:28:34:4e:3e:e0:6b:8f:86:ff:08:
         c5:2c:07:0b:81:e7:0e:fe:fe:bf:7f:5a:f3:20:40:23:45:6f:
         12:88:f5:93:f9:15:f2:7f:19:a7:51:47:89:43:35:b9:24:0d:
         0c:b7:cc:c8:5a:87:68:0d:a1:ae:4e:af:11:fc:dd:e3:14:2d:
         d9:67:cf:39:0c:19:0a:9f:47:fb:a6:84:01:1e:9a:a4:bd:ef:
         b0:ed:45:a5:ac:5a:de:39:45:3c:a8:bf:58:1f:3a:cf:6a:15:
         90:16:41:20:7a:a8:5f:bf:36:f6:8d:26:73:df:11:77:a3:40:
         82:a6:37:1a:b7:52:f3:d3:43:6f:5f:96:81:53:0f:18:01:6c:
         04:8a:f4:15:13:54:49:b7:fb:53:33:b4:6c:bb:dc:ab:b6:29:
         a9:b9:31:da:7a:14:b0:10:54:1a:64:60:33:d9:26:ea:2a:f9:
         4c:7b:40:6d:46:84:ce:ac:e0:5e:61:14:53:6a:df:17:2b:62:
         60:9f:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----