Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/VcLRSmks30Rrzb_V-4cS_8CDrdU.roa
File:                     VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (raw, json)
Hash identifier:          ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=
Subject key identifier:   55:C2:D1:4A:69:2C:DF:44:6B:CD:BF:D5:FB:87:12:FF:C0:83:AD:D5
Certificate issuer:       /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial:       019426D966CBBC0430DB140135A09A0EC924
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/VcLRSmks30Rrzb_V-4cS_8CDrdU.roa
Signing time:             Thu 02 Jan 2025 11:49:29 +0000
ROA not before:           Thu 02 Jan 2025 11:49:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211935
IP address blocks:        2001:67c:291c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:66:cb:bc:04:30:db:14:01:35:a0:9a:0e:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Validity
            Not Before: Jan  2 11:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55c2d14a692cdf446bcdbfd5fb8712ffc083add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:b4:4a:b9:0d:15:50:a6:44:3c:70:f1:93:
                    d5:dd:f0:1d:93:88:ba:76:93:ca:14:c1:0f:41:13:
                    fd:4b:f8:1f:7c:23:02:cf:49:64:62:ac:5f:f8:3c:
                    5c:6c:4d:06:9e:c7:0a:a9:65:cc:8e:89:32:34:42:
                    2a:71:77:5b:87:5b:c8:94:2a:c5:10:e5:ec:51:8f:
                    61:20:8c:fb:49:b4:14:2a:20:fb:3c:27:1a:aa:47:
                    5a:79:1e:0a:fb:2d:f6:08:c2:9e:56:2b:fa:d7:de:
                    88:41:4e:db:6d:62:5b:9d:61:cb:6e:3a:09:d7:fc:
                    a9:ae:de:b9:52:27:d1:40:b0:93:44:8f:c8:88:90:
                    19:94:00:3c:74:b2:d0:c1:7d:b1:51:d7:ad:59:5a:
                    a8:13:01:d5:ce:49:9a:79:0b:35:a2:3f:f5:1f:c5:
                    27:b7:70:c3:a5:bf:93:01:5e:5d:cc:a2:7e:74:46:
                    48:07:0d:a1:6f:6c:f9:cb:4f:e5:2d:23:02:10:56:
                    8e:17:89:c2:0c:33:ab:8c:3f:d5:b1:b5:10:8c:09:
                    4a:14:6f:24:f4:87:ef:5c:5e:b1:81:34:8e:b9:3f:
                    1d:bb:27:1f:b6:42:ac:d5:12:04:cd:9f:93:34:6b:
                    3b:46:f5:bd:74:61:a6:20:0a:7d:f7:f1:19:c6:48:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:D1:4A:69:2C:DF:44:6B:CD:BF:D5:FB:87:12:FF:C0:83:AD:D5
            X509v3 Authority Key Identifier:
                keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/VcLRSmks30Rrzb_V-4cS_8CDrdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:291c::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:3e:1c:3e:0c:b8:e1:ba:58:3a:3f:8e:f1:ec:36:03:23:
         24:25:eb:01:20:aa:35:ca:44:4c:b2:1b:04:ee:b1:d1:24:30:
         4c:f4:99:02:48:dc:a5:74:f2:25:13:ad:a2:a8:30:1f:75:b5:
         60:9c:f0:24:a2:12:eb:fe:b5:97:ce:55:10:c3:c2:cc:77:d8:
         2d:97:18:92:17:2b:dc:2b:11:66:6e:45:eb:e5:65:95:30:4b:
         48:1b:05:8b:b7:59:c2:c2:35:1d:8e:fc:dc:40:bd:1d:ed:7c:
         75:7c:31:37:0f:12:36:01:ba:ff:bd:ab:51:a4:06:2d:08:3c:
         04:27:8d:7a:94:04:ae:0b:b2:8e:81:7a:9d:41:4f:15:11:d4:
         a6:c1:80:ff:95:88:fe:bd:9d:04:9d:c5:86:f6:a9:ca:0a:a3:
         90:76:7b:42:38:f5:02:d2:22:70:15:f7:1b:3c:f8:1c:8f:b4:
         05:e3:47:b4:31:39:ac:26:8a:03:98:01:0a:1c:4c:7e:38:1c:
         32:e8:03:8e:c7:d5:e7:b2:e0:7f:48:c0:05:1f:6a:27:76:a2:
         f4:e5:e6:88:4f:80:2d:19:70:30:c6:25:37:34:b3:c4:60:fe:
         27:4e:65:2b:db:05:d8:e4:f9:c3:02:8a:35:b4:8e:3b:0e:75:
         e3:c8:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----