Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/2f42Ui-pru7wNiS6tvX-43aKjFs.roa
File:                     2f42Ui-pru7wNiS6tvX-43aKjFs.roa (raw, json)
Hash identifier:          mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=
Subject key identifier:   D9:FE:36:52:2F:A9:AE:EE:F0:36:24:BA:B6:F5:FE:E3:76:8A:8C:5B
Certificate issuer:       /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial:       019424B3FF80D3792D33C3871E06F2928F9F
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/2f42Ui-pru7wNiS6tvX-43aKjFs.roa
Signing time:             Thu 02 Jan 2025 01:49:23 +0000
ROA not before:           Thu 02 Jan 2025 01:49:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49101
IP address blocks:        176.102.64.0/22 maxlen: 22
                          2a07:dbc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ff:80:d3:79:2d:33:c3:87:1e:06:f2:92:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
        Validity
            Not Before: Jan  2 01:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d9fe36522fa9aeeef03624bab6f5fee3768a8c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:64:70:e3:ba:49:eb:98:6a:93:ec:54:74:
                    db:f8:64:ef:f8:e0:80:63:b4:f3:f7:74:8f:9d:af:
                    3d:34:80:2d:6d:e0:28:73:b7:56:31:df:11:c7:b1:
                    89:f5:7a:33:7e:cd:fe:47:b9:f4:74:c0:f8:28:c9:
                    88:50:75:f4:18:86:cf:83:cf:15:61:46:44:0d:9a:
                    82:b2:3a:82:62:bc:28:4a:e2:c6:60:ff:dc:0d:a1:
                    49:b7:ed:18:d5:68:7f:0e:fb:a3:60:22:2d:cb:4b:
                    bf:19:43:f5:8a:d3:e5:95:95:d1:3c:9c:fe:6e:71:
                    20:36:c0:f9:3a:3d:24:8f:6d:00:7c:8c:8f:39:8b:
                    16:ad:be:fe:ed:bf:03:61:d0:97:79:0f:fd:a3:61:
                    3d:a0:6b:50:cd:94:98:97:e1:51:9b:8a:08:35:06:
                    ec:51:ba:bc:11:1d:32:85:2b:3c:ba:16:93:b1:67:
                    e4:c8:cd:8c:87:37:73:bd:30:a0:93:db:b6:8c:1b:
                    15:01:f8:18:ce:7a:90:ea:c6:09:bf:8d:ed:b4:41:
                    4d:55:7f:da:ae:a2:03:42:7e:bf:43:78:ae:4c:e6:
                    48:0d:cb:8b:00:9f:17:2a:14:38:56:c4:4f:7a:a0:
                    d3:92:fe:67:4d:09:28:b0:8e:8c:66:1f:6b:45:37:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:36:52:2F:A9:AE:EE:F0:36:24:BA:B6:F5:FE:E3:76:8A:8C:5B
            X509v3 Authority Key Identifier:
                keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/2f42Ui-pru7wNiS6tvX-43aKjFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.102.64.0/22
                IPv6:
                  2a07:dbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:fe:2d:1f:eb:a1:3d:cc:b4:2e:c8:d8:d6:45:e9:7d:22:
         f7:02:85:c5:e9:bf:8c:ec:73:4a:f0:75:fe:8d:94:a3:0f:62:
         1d:3e:19:1b:d8:6d:4a:d0:b5:79:b9:6e:76:b2:93:a9:e4:da:
         65:c9:46:a0:bf:c2:4d:1c:36:f5:bd:79:e1:10:0b:91:bd:b7:
         3c:e2:dd:e1:6c:c6:57:eb:73:21:a1:c5:62:2c:8d:32:0b:ea:
         42:88:ea:c1:cc:a7:25:9f:c5:44:72:e7:12:b8:34:61:6d:fb:
         a5:d0:06:68:3d:c6:17:f1:36:23:9a:08:6f:55:ab:06:65:44:
         36:a9:56:48:b0:19:5f:42:0b:e1:d0:80:1c:cd:6b:d8:75:4f:
         9a:1d:f5:e5:24:fc:79:61:4a:44:7c:5f:82:c2:f2:be:c8:da:
         9b:4b:dc:2a:ab:1f:e9:99:c4:51:0c:6b:1d:24:80:6b:b1:02:
         3c:00:c5:aa:02:35:ea:13:7a:2b:85:2d:ef:2d:04:0c:36:51:
         59:19:7c:ea:ee:3a:87:47:34:f9:90:0a:60:52:a1:7f:7b:c0:
         6b:f7:76:5e:02:3a:1f:c4:52:64:4a:49:47:f6:d2:19:09:32:
         ae:68:0b:9a:95:2c:06:74:13:99:b3:86:59:2f:ee:17:bc:39:
         b0:49:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----