Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/TrP_VOAAx7mkYFTiFPpKSCfhkY0.roa
File:                     TrP_VOAAx7mkYFTiFPpKSCfhkY0.roa (raw, json)
Hash identifier:          6xlGs3bysRKo5ynapMHu2o/STm/uKwkrHsKFXLpz1KU=
Subject key identifier:   4E:B3:FF:54:E0:00:C7:B9:A4:60:54:E2:14:FA:4A:48:27:E1:91:8D
Certificate issuer:       /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial:       0193CFED677EFE976572899386DBACA0C103
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/TrP_VOAAx7mkYFTiFPpKSCfhkY0.roa
Signing time:             Mon 16 Dec 2024 14:44:22 +0000
ROA not before:           Mon 16 Dec 2024 14:44:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204662
IP address blocks:        2a07:8d40:1::/48 maxlen: 48
                          2a07:8d40:1001::/48 maxlen: 48
                          2a07:8d40:2001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:cf:ed:67:7e:fe:97:65:72:89:93:86:db:ac:a0:c1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
        Validity
            Not Before: Dec 16 14:44:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4eb3ff54e000c7b9a46054e214fa4a4827e1918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:fe:cb:ab:81:be:ee:ad:15:65:6d:9e:81:
                    e8:90:69:a9:22:d0:d0:95:5a:89:da:93:90:24:f9:
                    c9:f2:09:0c:48:f4:67:98:eb:55:38:4a:0f:6d:fa:
                    19:48:ac:88:9f:12:a9:8e:82:2e:80:60:e5:c5:ae:
                    0d:7d:12:e0:35:25:fa:93:90:a2:d1:0c:00:b2:85:
                    8e:bb:75:44:d7:a7:23:98:4d:12:19:d9:d5:53:47:
                    9f:bc:94:aa:fa:9a:1f:2f:1d:d4:54:60:a5:e1:4b:
                    ca:40:b9:68:fa:ec:e1:9c:dd:93:41:a7:9b:f2:3f:
                    e1:ca:f1:79:45:0d:3c:c7:01:46:26:d1:d0:27:f9:
                    17:3f:bc:41:10:00:11:97:e8:5d:36:2a:d9:30:57:
                    c5:b0:45:29:8c:0e:54:65:0b:48:26:bf:91:a4:8e:
                    da:b6:a4:61:26:16:b5:d7:bc:f7:44:cb:af:70:8e:
                    b9:db:2f:e4:17:5f:0a:e8:7f:a6:29:7a:91:6e:bb:
                    33:2c:7e:10:db:26:5e:48:16:04:cf:72:22:fb:da:
                    31:94:c1:1e:3b:e9:b6:45:dc:85:91:95:5a:6e:cc:
                    71:e6:95:7d:7c:6d:b2:60:9d:d3:63:02:93:47:9a:
                    79:85:f8:b7:1b:27:62:0f:83:cb:7e:48:2f:e1:e5:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:FF:54:E0:00:C7:B9:A4:60:54:E2:14:FA:4A:48:27:E1:91:8D
            X509v3 Authority Key Identifier:
                keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/TrP_VOAAx7mkYFTiFPpKSCfhkY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:8d40:1::/48
                  2a07:8d40:1001::/48
                  2a07:8d40:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:80:54:1f:31:31:2c:f0:27:d2:64:4b:65:04:43:28:f6:e8:
         29:53:74:5b:13:f4:3f:f4:fd:f8:9b:7c:f9:7c:67:67:85:f0:
         be:b9:3c:42:a6:94:6f:3f:17:24:88:e7:47:96:24:f1:e2:40:
         e6:8a:d7:17:27:dd:fe:c9:f4:0e:d8:c7:0b:17:cf:75:25:30:
         29:54:2b:e2:9c:b5:49:25:fa:b9:0d:0b:0b:bd:49:f0:08:6a:
         7f:29:55:88:65:83:c6:8e:72:c1:72:2a:3e:54:9f:1e:13:7f:
         9f:04:6d:a3:9a:a8:48:fa:d9:69:7d:9d:d1:e1:9a:0d:8c:85:
         cd:4b:cb:13:53:df:19:cd:f5:51:ab:75:2e:f4:f7:d7:3e:11:
         42:21:3e:40:e7:53:74:4d:dc:8e:6d:e5:e5:cb:2d:8d:de:75:
         ff:5d:60:cf:51:ac:7e:a6:d9:eb:5c:a7:3a:0c:50:31:47:9d:
         6d:8c:07:1b:7f:e1:b3:28:98:76:cd:e5:14:f0:b5:1d:ae:85:
         b4:23:95:8c:67:f7:b7:37:63:9c:b2:8f:6b:c8:5d:c0:3f:f0:
         32:14:66:32:f1:21:95:76:1a:14:92:13:61:ed:1e:80:db:f5:
         00:d1:68:30:52:be:bf:3c:1b:b2:45:0f:0e:e0:07:85:93:c3:
         92:bf:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----