Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-GxQlBlFGJHcAazyAB7qxk49nFI.roa
File:                     1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (raw, json)
Hash identifier:          yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=
Subject key identifier:   F8:6C:50:94:19:45:18:91:DC:01:AC:F2:00:1E:EA:C6:4E:3D:9C:52
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019423D6F38521DFD9B651F612E233F4EFDC
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-GxQlBlFGJHcAazyAB7qxk49nFI.roa
Signing time:             Wed 01 Jan 2025 21:47:57 +0000
ROA not before:           Wed 01 Jan 2025 21:47:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50196
IP address blocks:        77.241.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:f3:85:21:df:d9:b6:51:f6:12:e2:33:f4:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Jan  1 21:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f86c509419451891dc01acf2001eeac64e3d9c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:3c:2d:75:2e:d8:c3:d0:e2:5b:f9:85:9c:
                    4a:e2:33:c5:64:91:e3:96:33:21:0c:52:e6:63:bc:
                    9e:d8:04:f5:b3:ef:e9:08:6f:4a:8d:70:3f:bb:c6:
                    d8:e1:0c:0c:7d:fe:71:66:b2:9f:5c:46:54:51:dd:
                    b3:e8:fa:36:7b:2b:af:30:09:fb:47:f4:fb:67:8d:
                    fb:8b:d3:2c:fb:d8:66:1c:01:04:4e:12:1d:a8:be:
                    5a:3d:97:c5:f6:c1:53:d9:66:39:f8:c5:c6:48:6e:
                    5d:07:f4:ac:6d:cc:f2:94:6c:db:7f:f3:64:3b:6b:
                    80:68:ea:f3:9e:f5:12:9c:41:a6:f9:33:ad:29:f4:
                    60:4a:e5:e5:99:68:56:78:e7:b3:e8:37:3f:c2:e0:
                    15:80:4e:53:40:49:3b:5a:c7:2e:ce:a2:4f:42:f1:
                    81:5f:8e:18:82:a4:16:a6:08:40:40:bd:1e:b4:37:
                    56:e8:67:20:e8:0f:17:18:e6:0b:1a:1a:06:24:11:
                    d5:6b:f8:30:b1:07:a9:f0:e3:a9:f8:d6:62:51:3a:
                    41:62:03:81:9a:4f:37:91:d3:c6:ae:3d:cc:9b:50:
                    a0:23:0d:b7:d9:95:b7:b8:05:24:7c:f9:e4:02:61:
                    be:4b:9b:a8:43:ee:6d:3a:f3:3e:ff:b4:e9:f4:19:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:50:94:19:45:18:91:DC:01:AC:F2:00:1E:EA:C6:4E:3D:9C:52
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-GxQlBlFGJHcAazyAB7qxk49nFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.241.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:fc:3e:5a:4b:d3:ec:96:81:dd:d2:73:37:46:94:3a:50:
         9a:3c:ba:a9:ac:49:46:d1:b0:e0:cc:1f:ab:bb:08:a2:bd:be:
         96:bf:8c:87:a7:44:89:c5:44:a8:e8:9e:72:57:58:0e:5e:17:
         24:1b:5b:a3:d4:e8:b5:db:2d:b2:7e:73:9c:80:e3:3d:a8:c8:
         66:dc:5c:9c:5f:23:45:12:19:86:33:00:38:7c:57:1c:2e:b6:
         8c:77:dd:67:7e:7e:2e:11:af:55:a3:de:11:b3:ea:84:67:74:
         5a:b7:a7:66:ff:ad:76:f6:dd:9f:8b:76:70:a4:09:71:08:ac:
         d6:2d:83:a2:d0:44:9f:41:c4:30:2b:c5:da:ea:f3:b3:57:07:
         31:93:e3:50:8d:69:65:5b:32:1f:99:fe:57:87:ed:94:a6:a0:
         2e:cd:46:33:25:52:23:70:33:a3:6f:1e:39:62:75:ad:be:c7:
         97:81:62:31:2f:1e:c9:43:93:01:71:2f:c8:80:d1:bf:7d:4e:
         27:fe:5c:b0:b4:f0:28:10:e9:d3:2b:e0:12:f3:c5:55:f8:87:
         2f:47:5f:ea:a5:a4:8d:32:60:5a:ee:2d:c2:f5:72:c5:fe:79:
         f6:88:85:d3:15:e9:f8:8f:a7:28:f9:60:0b:04:7b:bc:e5:6a:
         70:2d:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----