Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa
File:                     C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (raw, json)
Hash identifier:          dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=
Subject key identifier:   0B:C5:50:BD:B7:57:15:25:B1:63:D7:14:4B:26:91:A6:51:8B:1B:C3
Certificate issuer:       /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial:       019427B591538549F3DB812B12E0114FB88F
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa
Signing time:             Thu 02 Jan 2025 15:49:58 +0000
ROA not before:           Thu 02 Jan 2025 15:49:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25446
IP address blocks:        2a0c:c580::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:91:53:85:49:f3:db:81:2b:12:e0:11:4f:b8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
        Validity
            Not Before: Jan  2 15:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bc550bdb7571525b163d7144b2691a6518b1bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:40:ef:0f:3f:fa:73:38:cd:1f:2d:51:0c:
                    47:c6:d5:9f:d5:4c:9e:53:f8:6c:6d:4c:ab:0c:8c:
                    20:d2:8e:50:04:14:ce:25:a6:47:53:35:79:ca:ef:
                    5d:b4:4d:b3:b1:16:c2:5f:1f:7b:6d:cd:65:6d:da:
                    e2:33:04:5d:f1:ee:9e:27:d3:9b:69:17:53:5e:17:
                    5e:42:6f:cb:f1:af:0c:4f:78:48:86:49:60:d4:70:
                    41:69:36:0f:69:33:57:92:1a:f3:c0:2a:85:a5:d6:
                    10:8d:28:50:eb:a2:91:15:25:78:b6:b2:fc:6c:98:
                    88:f2:89:0d:1c:05:24:55:c7:d3:ef:a2:a8:2b:75:
                    7e:9a:c6:c1:df:4c:76:31:1d:75:d3:d5:22:28:96:
                    6a:74:d7:fc:87:03:47:e2:d6:3a:ca:72:97:38:5b:
                    cc:2e:5f:96:a5:d7:b4:e1:ea:92:67:a7:b0:54:30:
                    7e:b4:ad:e5:75:e0:6e:9c:cd:94:3b:29:b8:44:53:
                    e4:d6:25:17:81:e3:6e:89:3c:4e:9b:b9:ab:e6:9d:
                    bf:ed:83:8e:0a:66:a8:bf:37:9c:63:ab:3c:50:35:
                    f3:3f:2b:1c:80:fe:a6:5c:b6:5d:1d:b4:46:a2:03:
                    a0:e9:03:13:41:03:2c:75:c9:4d:bb:8b:35:ba:48:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:50:BD:B7:57:15:25:B1:63:D7:14:4B:26:91:A6:51:8B:1B:C3
            X509v3 Authority Key Identifier:
                keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:c580::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:7c:51:13:07:1f:3b:ec:3f:1d:37:af:45:98:cc:e0:cb:
         a9:4e:d0:d2:e4:94:6a:23:f9:08:79:f9:4f:68:b2:3d:25:2a:
         ee:e2:e8:40:fa:bc:cd:c1:0c:23:f0:5a:b2:5b:f5:54:16:60:
         71:40:61:43:59:6a:ca:6f:23:fa:1d:ff:5f:4a:d6:eb:a2:a1:
         73:31:ad:e3:09:05:de:65:23:4f:43:4c:6d:09:db:e3:b6:5c:
         d5:b7:eb:04:83:68:86:d6:d0:43:8b:0b:2a:5a:29:84:d4:47:
         f9:f5:b9:d0:04:d3:81:e4:37:a8:f6:b6:da:16:6f:b3:4d:ea:
         87:b2:b6:e8:65:0f:b9:90:42:f1:7c:59:f5:31:0c:1f:4e:8d:
         54:59:4f:2f:4e:6d:a2:17:c2:80:04:a9:e7:82:54:af:73:94:
         c2:1d:07:9e:0e:41:07:9d:9b:bb:5d:43:62:b5:60:58:30:56:
         b4:83:55:d8:ee:64:ef:c8:8c:21:87:8d:35:13:12:db:ba:76:
         7f:79:6c:6e:6e:d9:cd:aa:43:c8:32:0d:d2:53:18:f4:86:90:
         8a:17:2e:96:c3:20:f3:37:b8:d4:01:27:44:4b:d9:ea:96:1a:
         e2:f3:0f:86:1e:1f:fc:bb:83:cd:69:84:3e:37:58:c2:14:02:
         db:9b:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----