Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/OfSq2CmV9KRPcEZ5sNNeGi-dWSQ.roa
File:                     OfSq2CmV9KRPcEZ5sNNeGi-dWSQ.roa (raw, json)
Hash identifier:          bdjPVjGi9NJ/B6nd/eijxy78gorfwiRBbOE1GQuAAZs=
Subject key identifier:   39:F4:AA:D8:29:95:F4:A4:4F:70:46:79:B0:D3:5E:1A:2F:9D:59:24
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       0195B9C684A55C01C3ADCFBDC22451B7490E
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/OfSq2CmV9KRPcEZ5sNNeGi-dWSQ.roa
Signing time:             Fri 21 Mar 2025 17:35:49 +0000
ROA not before:           Fri 21 Mar 2025 17:35:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206873
IP address blocks:        2a0e:13c7::/32 maxlen: 32
                          2a0e:4347::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b9:c6:84:a5:5c:01:c3:ad:cf:bd:c2:24:51:b7:49:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Mar 21 17:35:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=39f4aad82995f4a44f704679b0d35e1a2f9d5924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:ca:29:ec:ce:95:d0:ec:90:44:46:d9:94:
                    65:18:b8:f8:eb:ce:9e:c4:51:d4:4c:3f:25:95:f3:
                    65:12:7f:7d:5a:79:b2:5e:cf:fa:d6:aa:5a:67:a7:
                    b1:e1:a4:b3:d6:92:95:a5:a5:fe:15:b5:ff:90:fa:
                    25:50:1e:5e:a2:1c:79:f8:a0:de:aa:65:80:11:ac:
                    64:45:4b:d8:5f:e3:55:c2:fe:ae:be:81:09:b8:f6:
                    84:1d:b4:71:00:7d:fd:39:9b:80:7b:0a:5b:b9:a6:
                    08:6f:4b:cb:80:d9:f4:54:12:38:cc:8b:13:8f:8f:
                    bf:8d:06:a3:be:7a:88:f2:2d:99:57:df:2e:69:b3:
                    87:66:28:21:8b:8e:22:3c:5b:56:2a:a9:1a:46:e3:
                    91:ff:99:1e:b5:b5:ca:02:76:0b:16:27:55:f6:52:
                    2d:20:dc:e6:d8:7f:78:25:aa:3b:31:9a:88:7c:b0:
                    6d:46:7c:38:f7:32:24:3b:a6:0d:3d:fd:f3:b7:41:
                    96:74:ce:82:ac:dc:35:6e:e3:2b:ab:c4:a3:72:96:
                    6b:81:ac:33:c9:5f:89:30:eb:fa:c3:5b:df:19:ec:
                    dc:5c:4b:5a:3b:06:da:f3:5f:de:d2:e5:fe:6c:82:
                    90:08:b0:a2:5b:9e:b0:ca:2b:c1:03:92:1d:dc:63:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:AA:D8:29:95:F4:A4:4F:70:46:79:B0:D3:5E:1A:2F:9D:59:24
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/OfSq2CmV9KRPcEZ5sNNeGi-dWSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:13c7::/32
                  2a0e:4347::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:bd:d8:6a:a7:cb:20:a5:4c:90:54:7a:ef:de:20:64:22:20:
         e2:7e:96:ab:c3:89:73:df:97:c1:ce:0a:ee:67:86:38:83:f8:
         ff:cb:15:03:7e:75:c1:60:6b:01:33:70:66:11:bd:10:01:f6:
         11:73:d0:39:92:d4:e3:89:05:ac:56:cc:4d:ba:4d:52:87:e9:
         c4:ce:d0:6c:12:12:2d:3a:60:31:e2:76:aa:a8:af:fb:58:e1:
         e0:29:ef:28:f6:51:17:c7:1e:e3:a3:04:47:2c:51:f2:e4:4e:
         2f:94:23:f6:f5:61:4e:5a:f1:5a:66:38:dc:6d:62:e1:ad:35:
         60:88:37:28:33:68:94:de:b1:be:17:80:cf:85:df:c6:92:c3:
         ae:ef:d4:1e:9f:4e:1a:41:3a:2e:7c:e5:74:d4:71:b5:d3:4c:
         df:99:36:e2:02:de:a4:ce:9d:91:f1:f4:75:38:9d:a4:e3:ba:
         88:99:5a:4e:a0:3a:45:f3:b5:14:4e:23:17:75:e9:1e:7d:41:
         79:da:19:3e:85:4e:cc:b5:b3:ac:2b:b0:bd:90:6f:d7:ff:6a:
         7b:33:25:4b:a5:dc:d2:1a:8f:e7:63:bd:07:88:04:18:2a:e4:
         46:ee:ec:06:8b:a1:f4:29:23:5e:c4:67:90:4c:c4:3a:b9:ac:
         54:53:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----