Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa
File:                     Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (raw, json)
Hash identifier:          B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=
Subject key identifier:   5B:1A:FB:92:00:0B:0E:07:2C:38:E0:90:7D:9A:00:08:76:0E:C1:B4
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       019420D597D929E5B54C11D5694D6403C912
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa
Signing time:             Wed 01 Jan 2025 07:47:36 +0000
ROA not before:           Wed 01 Jan 2025 07:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209075
IP address blocks:        2001:678:a5c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:97:d9:29:e5:b5:4c:11:d5:69:4d:64:03:c9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Jan  1 07:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b1afb92000b0e072c38e0907d9a0008760ec1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:fd:4c:07:30:a1:05:94:4b:c6:88:1f:db:
                    19:71:ad:93:13:11:6c:ac:3d:23:3d:7e:51:7b:c7:
                    08:35:04:87:00:87:4e:50:7a:9b:92:e9:a5:ef:69:
                    8c:b1:c4:96:b4:cf:fa:30:12:d1:7e:40:1c:7e:5d:
                    a1:a3:f1:5b:a1:9b:c5:fc:c3:09:ad:92:c6:0b:7e:
                    2d:3a:a8:a1:1d:d9:f3:17:a0:50:0b:e2:2d:35:a3:
                    31:c0:b9:a6:7f:83:51:dc:94:f2:dd:74:5d:d0:71:
                    b0:07:d7:31:8c:46:f8:2c:ce:1f:f3:11:79:5a:bb:
                    a6:c5:d4:9c:1a:9f:3a:f5:57:2f:5a:2c:8c:8e:bc:
                    4b:fe:48:68:ef:1c:6a:15:73:18:e8:c0:34:f5:ee:
                    70:6f:cb:23:5a:cf:e0:94:b2:8e:f7:e7:70:18:e7:
                    03:f3:72:57:66:58:f8:cc:29:f9:02:0b:59:15:04:
                    e3:97:4a:70:3b:4a:56:44:ef:41:ed:fa:60:2a:1e:
                    5e:85:d4:80:43:fd:d7:93:70:b3:06:57:0e:3c:b7:
                    58:1a:a2:75:6c:ab:1f:a0:61:89:d8:c4:1b:f1:4f:
                    98:1f:74:cd:1e:b8:b7:d6:6d:67:fc:6b:e1:55:38:
                    f2:e1:07:7a:29:f6:5f:2f:c0:13:d9:b5:67:1a:3e:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:FB:92:00:0B:0E:07:2C:38:E0:90:7D:9A:00:08:76:0E:C1:B4
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:4e:c5:36:60:d7:6c:27:fc:5a:88:3a:de:30:17:b2:01:73:
         56:58:d0:18:ff:34:4b:a3:b3:11:0e:b6:2c:aa:18:cc:0f:13:
         68:00:a5:6e:a8:64:d6:e9:44:de:fc:62:4f:e6:ba:b2:98:d2:
         da:43:17:96:1d:50:8a:1d:2a:cf:98:04:97:fe:84:98:75:88:
         fe:6a:12:53:1a:90:e2:be:58:ab:6e:19:01:9a:59:66:47:4c:
         1b:07:c7:5b:33:0d:e6:0d:ae:59:2a:4f:28:a2:ac:16:f9:aa:
         28:e8:69:45:51:e8:bc:b1:04:c4:38:38:53:fa:c9:70:f0:32:
         8d:7b:54:86:6d:e3:d6:64:31:68:d8:f3:e9:56:9d:15:d2:d7:
         41:b4:17:1f:18:84:2d:9f:11:b5:5f:d3:0f:29:af:e8:7a:46:
         b7:f9:b2:39:ba:2a:bc:47:7e:ee:34:24:54:0c:a5:e8:ab:e7:
         63:f7:30:81:d0:43:84:ea:20:68:e6:a1:f7:97:e1:38:67:57:
         56:e6:27:86:55:19:f6:17:2e:eb:93:b0:ae:c9:6a:dc:f2:2b:
         36:37:83:74:6a:b2:01:d7:06:fa:90:6a:ef:a5:c7:1f:44:fa:
         ad:a3:ca:54:4b:9f:13:58:9b:65:46:b5:a7:d7:48:69:67:fc:
         4a:66:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----