Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa
File:                     Ec37hVP71V_ZFevZQkk3KHhvyto.roa (raw, json)
Hash identifier:          xJvGeA8vYMl7ZkUXDTWZEhOILjaO4eEHTDCf3ASOoaQ=
Subject key identifier:   11:CD:FB:85:53:FB:D5:5F:D9:15:EB:D9:42:49:37:28:78:6F:CA:DA
Certificate issuer:       /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial:       018CC94E455A48BC0CB98C1EFA0F49ACD315
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa
Signing time:             Tue 02 Jan 2024 08:33:19 +0000
ROA not before:           Tue 02 Jan 2024 08:33:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6766
IP address blocks:        2001:67c:2ed8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:45:5a:48:bc:0c:b9:8c:1e:fa:0f:49:ac:d3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
        Validity
            Not Before: Jan  2 08:33:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=11cdfb8553fbd55fd915ebd942493728786fcada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:17:06:e7:d5:12:ba:e9:ea:35:e6:77:0f:
                    4c:e2:6e:02:f9:2c:b1:25:85:30:61:e2:89:4e:6b:
                    ed:c2:58:83:b1:e3:aa:d5:a8:32:c0:ed:5d:42:3a:
                    dc:7d:37:a4:79:f7:dc:de:96:3b:6b:5f:c6:68:42:
                    82:10:1f:df:23:36:00:63:86:8d:ab:3f:3e:60:6b:
                    c6:ef:e9:41:9f:2c:4e:24:23:41:98:e5:7b:27:a5:
                    ee:80:dd:ae:66:9f:d0:9a:dd:e7:34:35:bf:2e:ac:
                    b5:1f:0a:10:a9:03:19:e8:d3:74:c1:90:ab:2a:9f:
                    9e:d5:0c:fd:4d:3c:dd:a2:bd:90:3f:5d:87:06:c5:
                    46:a8:e0:78:9b:de:71:e7:55:06:26:48:6c:8b:8d:
                    81:04:95:25:7c:fc:cb:2c:43:1e:af:94:9a:e5:81:
                    a6:0f:8a:c4:51:25:a4:3e:24:9a:92:6e:9b:86:84:
                    42:b4:f0:1c:21:49:f2:5c:b8:58:52:14:4e:b5:d5:
                    b1:7d:cb:38:5a:a1:6f:2d:2f:dd:b4:73:f8:35:52:
                    98:f6:b0:0b:47:b1:b2:6e:62:93:d8:d5:29:17:5c:
                    a9:7f:f4:83:9c:ab:56:7f:ce:60:e8:d3:59:84:26:
                    87:2a:ff:3a:a6:d0:1d:95:2d:80:c3:0f:05:8a:ba:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:FB:85:53:FB:D5:5F:D9:15:EB:D9:42:49:37:28:78:6F:CA:DA
            X509v3 Authority Key Identifier:
                keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ed8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:89:2d:ba:74:f1:7b:5f:fb:bb:78:01:49:a5:2b:e3:2e:
         cc:b7:08:70:1a:ca:5e:bc:03:34:ef:23:05:22:8e:25:09:ca:
         41:5c:14:04:d1:ec:fe:5b:19:99:d8:ac:a2:73:ee:bd:eb:ae:
         ea:5c:b0:11:1a:e5:a5:78:82:cb:01:ac:d0:37:ab:b7:96:3a:
         06:0d:04:97:76:7d:e1:fd:cf:ec:be:a6:d5:fb:53:c4:90:67:
         82:73:13:d5:62:67:0e:5a:f4:5f:7c:40:d5:b5:5a:e7:c3:16:
         1d:4c:67:86:f9:e0:75:0a:4f:d7:3a:27:13:1d:2f:29:75:50:
         7f:82:7a:da:77:c3:85:fa:fe:c4:7d:1a:a2:aa:b7:63:26:df:
         98:00:5a:27:ed:35:6a:92:e9:78:7d:b8:05:0a:47:5b:0c:4f:
         95:38:1d:93:c9:e9:b2:08:a6:e6:d3:bb:e8:c0:8e:a1:6b:44:
         3e:79:61:77:85:bd:6e:51:65:9a:a9:47:38:5e:44:c2:83:8f:
         57:8b:df:2c:ec:a5:4f:16:95:5a:e5:77:56:03:3f:e5:b3:9a:
         63:e3:6b:ca:84:45:69:77:59:97:ab:04:dd:2e:4f:fc:11:7b:
         a4:9e:e7:53:58:fa:eb:37:75:5b:f7:2d:86:11:f1:7b:b2:eb:
         9a:5c:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----