Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/onUpvp2eOcQTulUwC5YOYeY8lJs.roa
File:                     onUpvp2eOcQTulUwC5YOYeY8lJs.roa (raw, json)
Hash identifier:          8louP+hvp9qC9hZoR1YbgH+oKr8dxR60G/3uHXuTDIM=
Subject key identifier:   A2:75:29:BE:9D:9E:39:C4:13:BA:55:30:0B:96:0E:61:E6:3C:94:9B
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       01961191CC1C09736B27A7C4EF2E347C9801
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/onUpvp2eOcQTulUwC5YOYeY8lJs.roa
Signing time:             Mon 07 Apr 2025 18:44:49 +0000
ROA not before:           Mon 07 Apr 2025 18:44:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30788
IP address blocks:        2a11:2c40::/29 maxlen: 29
                          2a11:4a00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:91:cc:1c:09:73:6b:27:a7:c4:ef:2e:34:7c:98:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Apr  7 18:44:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a27529be9d9e39c413ba55300b960e61e63c949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:30:2a:5d:9d:3c:5e:71:21:88:46:d7:12:
                    32:43:c1:ab:88:46:c0:db:c1:e2:70:3d:71:61:61:
                    c8:c7:c7:0a:4f:c3:c1:e5:18:75:bd:42:55:7b:29:
                    c5:cd:1a:fd:d0:6f:88:3a:c5:f4:af:c8:ec:bd:76:
                    f9:8e:78:46:70:f1:c2:b6:7d:92:f0:a5:e8:c0:57:
                    c0:66:42:e0:5d:e0:fa:7f:09:17:5f:b1:03:05:b0:
                    6d:45:bd:7c:79:b2:0f:11:cd:db:67:04:60:cb:66:
                    4b:3b:5b:96:4e:10:62:80:46:33:27:dd:16:5c:fb:
                    77:21:80:58:e1:19:61:67:b1:e9:c0:c5:8c:dd:11:
                    87:ce:dd:aa:85:c3:8a:55:43:ce:16:f1:16:d0:01:
                    1c:65:12:34:c1:f9:c6:a0:1b:52:97:33:97:74:bf:
                    b0:dc:a4:a8:58:d7:cd:02:58:14:b8:bb:ec:2b:b8:
                    6e:6c:e8:69:32:1e:98:52:96:b4:b1:69:9b:50:ae:
                    3e:20:5d:f4:4f:be:7b:21:f0:33:94:8d:3d:7d:47:
                    4c:5f:04:b9:47:fa:46:d6:64:e7:2a:34:f7:94:ae:
                    27:65:8c:52:e0:f3:76:a4:c8:22:2e:11:b9:4d:8b:
                    ab:ba:94:c6:89:a9:17:1b:4c:3f:50:39:fc:10:d9:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:29:BE:9D:9E:39:C4:13:BA:55:30:0B:96:0E:61:E6:3C:94:9B
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/onUpvp2eOcQTulUwC5YOYeY8lJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:2c40::/29
                  2a11:4a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         bf:8c:97:fd:e9:9c:d6:3f:f2:e7:39:2f:59:9b:c8:46:f9:35:
         80:e2:90:b9:3d:86:df:56:23:61:b5:c0:de:51:84:20:e8:4a:
         af:10:56:b7:7c:8d:15:46:84:c0:03:19:44:5e:ea:c0:c4:7a:
         19:53:a8:d2:58:f0:5d:73:78:e8:d1:36:6e:9b:2a:17:23:ea:
         55:cc:b6:16:ae:37:65:2f:5b:fa:89:68:80:b0:b4:73:f1:7b:
         65:1f:10:de:04:61:5d:ab:c8:4c:6d:8a:5e:06:2d:18:3c:77:
         b1:ec:7b:59:a0:2e:13:4a:c8:d2:b5:d8:f2:ac:76:c3:6d:56:
         32:0f:f5:95:be:fb:d4:01:ce:73:4a:64:89:84:f0:dc:6c:a4:
         27:4c:44:99:02:5f:dd:62:09:c3:b6:7e:bc:15:d4:71:94:f4:
         07:fd:33:a9:51:1d:fc:76:13:08:30:43:62:e8:83:4b:1f:4c:
         12:7e:91:cf:60:51:15:44:d8:6c:9c:18:dd:e0:e4:91:97:56:
         fb:c4:32:65:65:70:16:97:c8:e9:12:d3:2d:d5:9b:04:4d:09:
         bb:b4:a5:42:5a:67:44:39:76:96:88:64:61:37:7c:90:55:2b:
         b5:11:d0:e2:cc:a4:e5:a2:ad:38:c9:3f:60:c2:22:67:cb:e0:
         53:13:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----