Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/sLqGRwzH1KTbXiCh9ib5hBD78Xw.roa
File:                     sLqGRwzH1KTbXiCh9ib5hBD78Xw.roa (raw, json)
Hash identifier:          pdhPNLLBFNbt8lu75DbByCFsskTFIklzKXvOB9auIjc=
Subject key identifier:   B0:BA:86:47:0C:C7:D4:A4:DB:5E:20:A1:F6:26:F9:84:10:FB:F1:7C
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       019386E90B195D2E7F2FB4E3370C0EEB0E6F
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/sLqGRwzH1KTbXiCh9ib5hBD78Xw.roa
Signing time:             Mon 02 Dec 2024 10:27:19 +0000
ROA not before:           Mon 02 Dec 2024 10:27:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59577
IP address blocks:        2a12:5b80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:86:e9:0b:19:5d:2e:7f:2f:b4:e3:37:0c:0e:eb:0e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: Dec  2 10:27:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b0ba86470cc7d4a4db5e20a1f626f98410fbf17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:3e:45:2b:e8:34:04:a2:13:5d:5f:ab:f8:
                    2c:b0:db:10:86:11:f3:de:b6:a8:98:a0:c2:48:9a:
                    9e:10:50:92:51:5b:c9:b6:a6:3f:45:84:1c:1d:aa:
                    6d:57:8f:6b:7c:a2:84:e7:fa:6c:5c:5b:89:68:dd:
                    b7:28:fc:d2:f4:4c:00:dc:5d:a4:86:a1:d2:b6:81:
                    6a:d9:01:f0:83:96:25:e4:9d:25:b3:34:54:9b:dd:
                    ed:65:7e:83:87:d9:b6:34:0e:bc:6d:8e:16:5a:4c:
                    32:64:0c:9e:d5:75:9d:a0:c5:8f:68:91:76:61:7e:
                    a7:e3:5b:be:7e:43:1a:c8:63:c3:08:f1:c2:07:0e:
                    eb:8c:16:11:86:7c:bc:e8:2f:c0:c2:d3:82:21:0b:
                    13:34:de:b3:65:06:fb:08:f1:e4:01:8e:6b:9c:75:
                    ac:30:1c:e4:d8:c3:27:77:c0:63:28:10:3b:28:f6:
                    47:4a:54:5c:17:74:ea:8a:cc:23:31:d1:dc:27:2b:
                    e8:6c:9f:ba:7f:78:b4:1d:11:ab:c2:31:39:1a:c8:
                    4c:85:60:3a:2f:f3:0c:b8:bf:e2:2f:ac:bd:8a:0c:
                    dd:9d:51:d5:c8:36:77:48:a9:64:64:91:52:69:ae:
                    62:6c:86:3d:51:76:3c:7e:4b:9a:38:dc:9b:01:e9:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:86:47:0C:C7:D4:A4:DB:5E:20:A1:F6:26:F9:84:10:FB:F1:7C
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/sLqGRwzH1KTbXiCh9ib5hBD78Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:0c:2f:ce:d0:4a:8b:96:7c:68:3b:77:e6:29:0f:40:67:
         c0:b0:fd:c6:db:97:02:a8:92:fc:01:4e:ef:ed:7b:de:95:12:
         67:18:60:b7:ea:d5:58:27:73:c2:34:6d:f5:55:48:6b:ba:46:
         8c:8b:54:e1:42:e3:0b:c1:3d:7d:66:9c:b8:d4:86:04:ef:78:
         58:58:02:1d:9f:ee:ce:51:35:13:9f:d6:d1:41:3c:16:b1:65:
         4c:97:f9:17:fc:e8:6a:02:bd:bb:cc:74:1b:cf:a9:cb:6b:78:
         88:a2:35:a2:17:1c:ed:f4:cc:67:7e:1a:45:5b:fc:71:18:85:
         cb:f2:c5:39:ae:1a:11:1d:29:81:eb:af:ef:e5:39:7e:a9:83:
         d6:e2:f5:e2:15:c4:64:39:4d:78:4e:be:5c:df:bd:89:87:db:
         0f:61:81:52:bd:46:13:db:a4:40:33:11:d2:31:3a:13:22:7a:
         01:74:4f:1a:bc:0b:68:57:c0:29:4e:fb:00:76:36:2c:17:f5:
         2c:86:4e:06:35:9b:a4:12:95:1d:5f:0b:d9:71:0e:b0:91:4f:
         ab:38:7a:ce:2f:90:22:b4:7a:11:90:b5:8a:fc:08:65:b7:bc:
         6e:07:20:15:73:66:50:ea:4c:b2:e3:76:9f:9c:33:68:79:f0:
         12:c8:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----