Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/fcZemZl1vze9O7p9AxyuSyrFuZM.roa
File:                     fcZemZl1vze9O7p9AxyuSyrFuZM.roa (raw, json)
Hash identifier:          FwV5i3nd9L09P7VibTZwPG5Ywt6qHvbEJ0CkZEQ+EhQ=
Subject key identifier:   7D:C6:5E:99:99:75:BF:37:BD:3B:BA:7D:03:1C:AE:4B:2A:C5:B9:93
Certificate issuer:       /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial:       0194B2212DB1154EB681639B306A40431EAD
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/fcZemZl1vze9O7p9AxyuSyrFuZM.roa
Signing time:             Wed 29 Jan 2025 12:55:06 +0000
ROA not before:           Wed 29 Jan 2025 12:55:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216235
IP address blocks:        176.10.93.0/24 maxlen: 24
                          2a13:f3c0::/48 maxlen: 48
                          2a13:f3c0:1::/48 maxlen: 48
                          2a13:f3c0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b2:21:2d:b1:15:4e:b6:81:63:9b:30:6a:40:43:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
        Validity
            Not Before: Jan 29 12:55:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7dc65e999975bf37bd3bba7d031cae4b2ac5b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:4e:24:08:44:a1:17:d1:0a:5a:6b:d1:5e:
                    00:41:15:19:88:d5:96:3f:9f:50:28:07:21:e4:80:
                    c3:f5:70:f7:dd:f1:3a:ee:e9:c9:10:de:60:07:7d:
                    e5:e2:c0:43:cf:94:a3:94:87:a0:40:64:b5:84:f3:
                    a3:5e:79:b5:0f:17:35:a1:47:40:69:db:73:5d:86:
                    2c:e7:0c:63:34:1d:3e:f2:b2:57:18:07:5e:48:48:
                    08:f4:95:19:58:41:28:7d:4b:60:4b:0f:43:0e:3b:
                    93:a6:9f:a7:dc:1b:75:27:67:35:4c:bc:63:e4:7e:
                    49:38:c8:9c:54:4e:7d:66:ba:5a:6e:64:c1:e1:0c:
                    8d:8d:59:54:95:0e:98:0b:3b:af:9c:40:ee:d8:0c:
                    82:f7:f1:0d:2b:81:6c:e6:de:7b:21:1a:b0:5e:8e:
                    ad:67:15:0a:73:7c:81:64:05:df:a3:80:33:90:83:
                    6a:5b:80:56:79:08:dc:f6:1f:88:2e:a5:93:60:a3:
                    f1:3d:f6:1e:c7:db:cb:d9:6c:30:ac:be:81:5d:99:
                    4e:f9:42:ce:de:c3:70:63:84:ba:d4:d9:f9:86:97:
                    47:f1:71:01:a9:bd:98:4f:da:24:9d:8d:0b:d6:e3:
                    4e:0e:b1:71:38:53:90:db:5b:2b:2e:40:3f:90:81:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:5E:99:99:75:BF:37:BD:3B:BA:7D:03:1C:AE:4B:2A:C5:B9:93
            X509v3 Authority Key Identifier:
                keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/fcZemZl1vze9O7p9AxyuSyrFuZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.10.93.0/24
                IPv6:
                  2a13:f3c0::-2a13:f3c0:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:d8:29:3d:7c:38:3a:80:f9:2d:34:c5:cc:df:d0:58:27:
         a7:1f:62:a8:e5:77:2d:29:90:bd:d6:1e:4a:e2:73:ac:1a:a7:
         f8:3e:b0:d5:b3:6a:d2:6e:c7:81:15:41:fe:0f:79:4f:96:0a:
         6d:fe:5a:64:9b:ae:78:a5:05:d6:11:00:fe:34:47:de:5f:90:
         de:d0:15:b6:21:30:b3:45:24:fd:17:0a:ad:c6:a4:7e:c2:70:
         b7:c4:3b:60:c5:e2:9c:02:72:6f:b7:ed:37:90:90:16:5e:d2:
         7b:11:01:75:52:df:e6:e1:7d:c9:89:23:9f:f8:31:47:bb:a3:
         e7:64:3e:86:e2:4c:f8:87:c5:59:ff:d3:e3:b1:2b:71:29:c2:
         f6:bc:85:3f:ae:6c:b6:ad:fb:d9:4a:44:ce:7c:2a:9b:76:f9:
         23:c4:95:9d:49:30:e5:32:1b:58:3d:4d:5b:62:8e:97:d2:54:
         32:ca:74:87:17:6e:fb:de:a3:ec:b8:40:ff:bc:f0:53:67:de:
         e6:ae:f5:35:07:5e:ea:8f:86:62:bc:87:ec:2d:5d:c4:c6:31:
         f4:55:88:9d:a7:ca:fc:ef:f4:e8:cf:9d:04:42:e4:2b:b7:6f:
         24:9c:4c:de:64:d1:34:ae:35:2d:86:e6:63:25:18:56:1a:de:
         27:43:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----