Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/kQBDlI9AJTPDOANcbfub1qPVjs0.roa
File:                     kQBDlI9AJTPDOANcbfub1qPVjs0.roa (raw, json)
Hash identifier:          ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=
Subject key identifier:   91:00:43:94:8F:40:25:33:C3:38:03:5C:6D:FB:9B:D6:A3:D5:8E:CD
Certificate issuer:       /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial:       0194252184B92FCDC45958C8998779FF0516
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/kQBDlI9AJTPDOANcbfub1qPVjs0.roa
Signing time:             Thu 02 Jan 2025 03:49:01 +0000
ROA not before:           Thu 02 Jan 2025 03:49:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206020
IP address blocks:        2001:67c:9b4::/48 maxlen: 48
                          2001:67c:9b8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:84:b9:2f:cd:c4:59:58:c8:99:87:79:ff:05:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
        Validity
            Not Before: Jan  2 03:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=910043948f402533c338035c6dfb9bd6a3d58ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:eb:75:64:e1:64:ed:18:e1:22:84:77:89:
                    55:cf:db:4c:1c:39:cb:b7:77:5c:4c:5e:2b:d6:d5:
                    21:7c:de:4b:f6:bf:cb:94:1c:da:f2:40:be:01:a3:
                    22:a3:56:86:92:94:08:e9:57:42:6e:15:e6:5b:c2:
                    5b:31:35:97:ec:ee:92:aa:f3:d1:2a:7f:50:c0:62:
                    88:2a:aa:6e:07:5a:6e:1f:ef:56:f5:75:2e:ae:4e:
                    f0:34:53:d9:eb:b5:19:b9:02:91:e8:19:33:d7:08:
                    7d:d0:a9:8f:28:ef:df:a1:33:de:e1:cd:69:6c:a6:
                    c8:14:27:dc:1c:4d:19:a7:37:18:01:ed:7e:a1:8d:
                    87:66:c7:1f:67:48:c1:e8:f9:57:53:7a:b7:90:e6:
                    49:12:68:40:66:4e:b0:87:83:aa:9e:77:5f:6e:08:
                    83:a5:4c:26:7c:19:76:c3:9f:2b:2a:8f:85:76:ff:
                    52:17:15:e6:b4:cf:cc:ae:85:33:db:a7:3d:44:ca:
                    a0:22:ad:d0:d1:6b:1c:37:db:cb:48:71:fd:a9:67:
                    af:cb:1f:68:1e:8d:06:2b:99:fb:b8:1d:c1:a4:f8:
                    a4:ad:d3:e2:15:28:7d:52:fc:a2:5d:76:88:2a:68:
                    f1:09:b1:27:28:09:6a:8f:44:01:16:2a:36:7a:d0:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:00:43:94:8F:40:25:33:C3:38:03:5C:6D:FB:9B:D6:A3:D5:8E:CD
            X509v3 Authority Key Identifier:
                keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/kQBDlI9AJTPDOANcbfub1qPVjs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9b4::/48
                  2001:67c:9b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:21:ae:c2:8e:7e:a8:d9:a5:a0:51:93:3c:61:1c:d0:81:
         72:92:e1:40:a9:15:96:ac:79:be:64:8a:ba:0a:cc:d7:03:d2:
         6b:48:27:00:6e:3e:5e:e5:9f:5d:8b:19:26:3c:dc:01:7b:9c:
         6f:28:35:f7:fb:cb:25:c9:7b:34:59:f6:0b:92:f7:85:eb:7f:
         35:81:16:de:d8:bd:4c:7e:f5:ad:38:77:23:9e:28:6f:7c:d8:
         41:38:af:b9:40:b0:8e:0c:31:3e:dd:15:78:7e:34:57:bd:f1:
         4c:4c:03:14:60:0e:59:eb:75:f1:4a:7f:35:10:db:79:e9:1c:
         56:21:0d:8c:7a:cf:16:7d:75:f4:f6:df:92:5e:38:61:32:ef:
         5b:e8:36:ca:41:35:b2:02:2b:34:3d:11:4e:14:ca:43:4d:cd:
         c1:40:68:44:e2:a4:0f:c1:b6:35:15:66:f1:2e:60:e9:51:46:
         90:3e:49:09:35:f4:0f:7b:75:8b:9f:95:9a:7c:e2:3d:4d:f2:
         9c:08:b4:0f:1f:65:19:68:9a:6a:1d:c3:e2:aa:86:1d:55:5c:
         b9:45:aa:31:35:59:9a:a4:bd:a3:94:72:1d:d4:d4:ab:df:b1:
         d0:5f:29:59:a0:31:ab:69:07:6a:93:8c:d6:53:cb:9c:5a:22:
         ce:ed:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----