Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/nsWYD62GXvXwJfFUS4kAQcZmYTU.roa
File:                     nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (raw, json)
Hash identifier:          jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=
Subject key identifier:   9E:C5:98:0F:AD:86:5E:F5:F0:25:F1:54:4B:89:00:41:C6:66:61:35
Certificate issuer:       /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial:       019421B200320519C99998A2C9E07730516E
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/nsWYD62GXvXwJfFUS4kAQcZmYTU.roa
Signing time:             Wed 01 Jan 2025 11:48:21 +0000
ROA not before:           Wed 01 Jan 2025 11:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208447
IP address blocks:        2001:678:9e8::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:00:32:05:19:c9:99:98:a2:c9:e0:77:30:51:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
        Validity
            Not Before: Jan  1 11:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9ec5980fad865ef5f025f1544b890041c6666135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:1d:21:0f:ff:4f:9d:c9:4b:b2:be:1e:28:
                    d8:6c:0e:a2:cb:1c:e8:a7:b3:8a:ca:37:74:d8:63:
                    71:0d:4e:48:a0:be:9e:e8:e1:31:8a:2e:cd:71:99:
                    a6:0c:cf:3b:1c:2e:24:bb:d0:8c:65:ae:c3:41:45:
                    ce:f7:9a:7d:44:48:ae:48:79:1a:f4:0a:1f:80:2f:
                    cf:a0:18:f0:ad:4f:8a:78:59:1d:79:24:64:bf:c0:
                    15:c1:1c:43:cd:64:67:88:06:97:b2:f9:c4:dc:c4:
                    fc:cb:0f:24:b5:ef:81:2b:c6:29:1c:2a:3d:c0:0d:
                    2c:00:b9:90:aa:32:a0:db:8f:2b:6e:31:55:7b:ef:
                    3c:a3:a8:51:2e:82:2f:23:96:79:f3:b1:38:fa:f2:
                    8b:f1:7a:a8:d3:da:8b:d6:64:a4:72:1e:cc:f8:38:
                    ed:64:c7:43:fb:9a:01:27:e9:95:f7:12:d9:79:be:
                    e2:9b:49:91:3b:60:9c:86:5e:0a:85:68:f9:46:75:
                    4d:f4:b8:02:d0:ef:9d:30:70:4b:1d:0c:04:ed:a4:
                    55:e0:6f:5a:b6:6d:97:2e:76:ad:d2:56:bc:e8:a7:
                    6a:15:da:03:88:69:e0:a9:f6:7a:c5:9a:99:ac:35:
                    68:5f:2d:58:0e:a7:53:7a:57:10:14:6a:bb:fc:d0:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:98:0F:AD:86:5E:F5:F0:25:F1:54:4B:89:00:41:C6:66:61:35
            X509v3 Authority Key Identifier:
                keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/nsWYD62GXvXwJfFUS4kAQcZmYTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:9e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:81:26:e0:f2:0c:fe:f6:5f:26:12:86:b2:18:04:3b:7f:42:
         47:76:4d:60:3b:3c:9b:2a:2b:b7:aa:d7:da:59:e7:d7:20:50:
         fc:e0:fc:c6:9d:86:72:b1:54:5a:f6:33:67:42:2b:02:bf:30:
         d5:21:66:0d:f2:05:80:a4:60:1c:19:79:4a:8d:e9:16:c4:e8:
         7c:7d:fc:97:60:33:8e:3f:43:1f:02:10:32:c2:6f:59:72:be:
         85:6e:8b:37:80:2b:9f:3e:e6:4f:fb:a2:71:1d:68:31:1c:80:
         e9:e2:58:95:f0:76:03:20:9d:57:d6:ad:48:fe:13:a9:19:df:
         cc:f7:b0:4e:9c:15:23:18:8c:19:84:96:e5:42:58:d1:85:a8:
         79:5c:0a:1a:4d:d6:b1:de:1e:bd:f2:b1:d0:08:fe:f5:d6:57:
         08:54:f9:cd:e5:e3:83:de:d4:fb:9b:29:fa:c5:eb:bb:c7:35:
         4c:6b:d9:c1:a3:de:c1:ce:05:6e:ff:69:c2:9b:10:4b:22:b2:
         6b:56:c0:a1:15:f7:b9:3a:93:70:68:ff:3a:bb:67:b7:e0:6f:
         f3:db:ef:c0:aa:fa:26:ac:21:30:c6:15:70:1f:4a:6c:8d:49:
         35:23:e1:45:43:d1:15:31:6a:eb:2c:69:f4:88:b3:7a:e5:42:
         94:6e:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----