Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/ydrhZCvt890Ifa5EyfQtkWZwJNY.roa
File:                     ydrhZCvt890Ifa5EyfQtkWZwJNY.roa (raw, json)
Hash identifier:          6V6GtreLtGN6A6N0ZMoclmLQDwKTi0yhhoOTtWDlwuM=
Subject key identifier:   C9:DA:E1:64:2B:ED:F3:DD:08:7D:AE:44:C9:F4:2D:91:66:70:24:D6
Certificate issuer:       /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial:       0191C650FF844D13C54FAA0047B24C377FC1
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/ydrhZCvt890Ifa5EyfQtkWZwJNY.roa
Signing time:             Fri 06 Sep 2024 07:51:22 +0000
ROA not before:           Fri 06 Sep 2024 07:51:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138270
IP address blocks:        2a00:cb20:3a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c6:50:ff:84:4d:13:c5:4f:aa:00:47:b2:4c:37:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
        Validity
            Not Before: Sep  6 07:51:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c9dae1642bedf3dd087dae44c9f42d91667024d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:a6:fd:4e:16:a6:01:f0:6d:1d:c7:23:f8:
                    74:b8:25:a3:4d:2b:58:e1:33:65:a1:6c:95:a6:3a:
                    e5:3b:c8:8e:3f:0f:76:3f:77:ae:ab:6e:16:18:ec:
                    09:82:37:55:16:37:18:45:79:7d:7d:a9:2a:09:ab:
                    8a:04:e6:98:e6:8b:8f:95:f0:45:1f:24:27:7a:14:
                    09:26:34:8f:23:d8:23:78:6a:e6:1d:96:6d:a7:01:
                    37:1c:e3:6a:2b:5c:42:89:ea:0d:c9:7d:d4:84:e1:
                    54:73:a7:f6:9d:5c:2c:dd:08:bb:be:78:2f:24:a0:
                    af:fb:d6:24:8e:dd:ae:e6:8a:d0:ab:63:f7:1f:1e:
                    01:1d:9f:b0:98:7d:21:7c:ee:0d:56:09:88:f7:8d:
                    1d:c7:23:6f:b4:23:32:11:0f:c4:4f:e7:c1:ed:3b:
                    59:a2:49:14:61:49:6e:8f:46:c6:ee:e4:71:05:90:
                    d4:02:6f:3d:99:f6:b4:f5:6e:a0:f2:2e:0a:e0:e7:
                    9a:c7:dc:b0:0e:8b:58:05:dd:4f:d6:86:2b:40:42:
                    cc:0f:fc:89:7e:01:67:bd:a5:13:58:f1:fa:26:60:
                    5d:b9:a5:46:81:d4:52:42:4c:e7:8e:d8:08:2c:a1:
                    62:d7:c3:ed:5a:cb:37:24:5d:7a:6e:e5:ba:1f:f5:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DA:E1:64:2B:ED:F3:DD:08:7D:AE:44:C9:F4:2D:91:66:70:24:D6
            X509v3 Authority Key Identifier:
                keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/ydrhZCvt890Ifa5EyfQtkWZwJNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:cb20:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:65:e2:1f:08:44:09:f9:ab:26:15:41:21:26:a3:c2:99:04:
         0f:b0:07:94:f6:7b:bf:16:eb:95:1d:49:53:97:d8:bd:ad:26:
         ee:9c:96:dc:9b:f0:82:95:ad:dc:2a:ba:58:2a:b7:e6:5a:31:
         bc:0d:81:ba:50:79:9d:45:a2:14:8b:5d:07:7d:43:b7:b6:fa:
         75:17:06:96:07:fd:3f:8d:75:77:6c:8d:f8:83:0a:2e:e4:ac:
         f6:97:da:55:41:8a:42:34:45:f2:f0:dc:5a:1b:34:54:08:aa:
         ba:3e:88:34:ea:cd:f3:83:f1:e6:33:6b:6a:54:98:5f:4d:b0:
         5c:42:da:47:0a:84:4a:45:d5:0a:7b:7b:bf:f1:67:59:8c:66:
         a9:88:57:6e:68:66:34:3a:b1:96:17:e7:0e:89:da:ea:95:84:
         f0:ec:69:52:64:f3:bb:69:02:ad:ef:96:02:12:f1:bf:80:9b:
         89:11:e3:f5:e6:fa:23:16:b8:1c:d2:2f:b2:33:a4:d0:fc:ce:
         af:56:ce:01:e4:6b:d7:14:97:a9:bb:1b:5e:29:5c:e7:4f:6c:
         1a:c6:fa:33:cf:28:b2:d1:50:29:cc:f3:d9:2f:87:ae:39:7a:
         cb:e3:58:22:a6:70:d8:26:5e:e4:80:f3:2b:cc:fc:bb:97:55:
         25:e7:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----