Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6ak6V4G8B4onsS5-q5cE5YXLjR4.roa
File:                     6ak6V4G8B4onsS5-q5cE5YXLjR4.roa (raw, json)
Hash identifier:          mU4QtzcaUiNKW+rp3CHJhnjEUEBySgbb9ospsi5nM4I=
Subject key identifier:   E9:A9:3A:57:81:BC:07:8A:27:B1:2E:7E:AB:97:04:E5:85:CB:8D:1E
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       0194266C5A802A7E835764DD7D3517EC48C2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6ak6V4G8B4onsS5-q5cE5YXLjR4.roa
Signing time:             Thu 02 Jan 2025 09:50:22 +0000
ROA not before:           Thu 02 Jan 2025 09:50:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12685
IP address blocks:        212.76.160.0/19 maxlen: 19
                          2a02:5a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:5a:80:2a:7e:83:57:64:dd:7d:35:17:ec:48:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  2 09:50:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e9a93a5781bc078a27b12e7eab9704e585cb8d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:f7:53:05:d5:1c:55:33:65:ba:fa:3f:87:
                    b8:dd:db:35:17:f9:bb:d4:c2:fc:99:ec:17:21:8c:
                    dd:f4:f9:ea:25:12:1d:24:f3:3d:64:77:6d:40:a4:
                    ce:ec:41:00:91:0b:6b:9e:31:0c:a6:54:cf:02:03:
                    b4:da:f7:3e:7f:56:68:44:86:08:b9:53:82:ff:7d:
                    b5:05:29:93:ea:48:67:cc:05:2f:9b:73:32:84:fa:
                    ad:3b:df:48:af:66:99:98:a3:23:83:4f:90:3d:2f:
                    ab:ab:7e:c9:3b:77:96:fa:92:01:6e:88:8e:db:cd:
                    46:ed:d3:bb:c4:57:8c:e5:cd:7c:c2:35:c6:67:35:
                    ec:b2:61:33:45:0e:3f:14:79:76:8a:d8:74:20:18:
                    93:f5:5e:f1:ca:fd:6a:b4:45:bb:87:dc:2e:61:a8:
                    a6:9e:3f:58:c2:e3:5f:ba:8c:d2:78:13:20:fb:ac:
                    76:bb:87:d4:93:9e:40:f2:51:8e:eb:2c:d1:1b:d8:
                    4f:42:b4:20:87:9c:f0:2f:fa:07:2f:93:e8:90:dc:
                    72:75:d7:40:a4:8f:b3:21:94:59:eb:42:04:01:fd:
                    7b:3e:ff:15:b2:af:3f:6c:3c:02:f9:a6:d6:3d:23:
                    b6:65:94:17:d0:53:fd:d6:fc:03:db:87:78:df:05:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:3A:57:81:BC:07:8A:27:B1:2E:7E:AB:97:04:E5:85:CB:8D:1E
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6ak6V4G8B4onsS5-q5cE5YXLjR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.76.160.0/19
                IPv6:
                  2a02:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:87:2b:75:3b:fa:44:9b:53:ba:4c:72:dc:81:a0:0d:48:
         8c:7d:e3:ac:37:7f:fc:c5:0d:d6:1f:77:68:09:78:a6:6f:9a:
         b3:16:14:8b:62:93:04:ab:7b:f2:b1:d9:e5:fe:55:03:47:0b:
         51:82:32:e2:75:64:f0:3d:17:3a:94:93:ff:df:41:9c:3b:38:
         b0:4d:60:db:8c:97:ed:f6:43:af:f6:58:e9:96:83:e8:ab:95:
         9b:39:f9:b5:bc:86:0d:ac:3b:b9:66:db:b4:e9:53:bf:92:64:
         e4:5c:9b:db:7d:aa:bf:91:48:37:b0:c0:37:ae:e1:46:0c:34:
         87:22:3f:87:ab:e1:ba:3b:08:ba:26:fd:bb:a9:31:b1:ef:f6:
         19:7b:58:9c:80:13:7d:bf:4e:0e:cf:51:57:69:42:fd:82:1a:
         45:01:48:73:d0:4d:7c:6c:e5:bb:04:d5:55:3e:6e:bf:18:31:
         9d:6a:21:5c:69:4e:8d:76:9c:84:9d:01:92:23:02:65:ac:22:
         f4:19:c9:46:8b:ed:99:20:80:95:fc:a5:4e:e4:fd:87:fc:da:
         04:af:dc:9e:f3:50:3d:3a:3b:79:0c:44:2e:76:c2:ce:94:02:
         95:f4:6a:14:e8:f8:74:2a:dc:a5:a7:fe:ef:a4:01:b5:9f:c7:
         0a:f8:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----