Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bQcmADbTrWS979Znwjz8JsE1VBU.roa
File:                     bQcmADbTrWS979Znwjz8JsE1VBU.roa (raw, json)
Hash identifier:          1DreexogZtQSTxeHxWY/yAmf+k+z6TGGp+NB8X+oCjY=
Subject key identifier:   6D:07:26:00:36:D3:AD:64:BD:EF:D6:67:C2:3C:FC:26:C1:35:54:15
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       018EE69327F988F6DAC7DEF2CEC57586CBAE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bQcmADbTrWS979Znwjz8JsE1VBU.roa
Signing time:             Tue 16 Apr 2024 11:03:07 +0000
ROA not before:           Tue 16 Apr 2024 11:03:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44237
IP address blocks:        2a02:930::/32 maxlen: 32
                          2a02:930::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e6:93:27:f9:88:f6:da:c7:de:f2:ce:c5:75:86:cb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Apr 16 11:03:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6d07260036d3ad64bdefd667c23cfc26c1355415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:64:f1:87:51:a6:63:09:1f:96:2a:c1:3a:
                    34:9e:31:77:17:1d:67:0d:76:b0:78:24:29:f8:a3:
                    6c:71:1a:44:18:5e:b3:a7:73:6c:19:73:7f:3f:d9:
                    6a:a7:47:4a:1b:7a:37:32:00:da:7c:c2:c8:2d:d7:
                    4f:e6:4b:46:5c:b8:4f:da:d9:42:8b:ae:f4:b8:9a:
                    87:5b:25:67:1e:21:60:28:1d:48:fe:32:c2:0b:8a:
                    4f:51:e8:f3:e5:19:6e:54:4b:51:4f:4c:66:3b:9f:
                    3a:31:06:fd:1c:33:25:f2:41:0c:c2:e9:c7:97:c8:
                    12:98:77:eb:eb:40:98:11:5d:cc:b9:66:fd:f5:6f:
                    aa:f2:c9:16:02:37:29:fd:66:f4:5f:48:98:fa:ae:
                    a2:48:3b:08:d4:e5:24:cc:b6:44:84:36:35:3d:b1:
                    8b:f0:32:18:19:61:24:1f:0b:a2:69:3e:06:40:8d:
                    d6:73:c4:26:79:1c:84:71:be:3a:19:83:72:1f:d9:
                    48:3e:d9:4a:96:a9:47:03:95:b8:9a:7d:33:f1:81:
                    48:4c:13:9d:71:6e:90:0d:e4:73:f6:88:c4:3b:df:
                    24:bb:7a:00:75:5e:4d:cf:03:e6:95:fb:2e:e0:4c:
                    de:0e:ca:46:a4:a4:cb:d1:bd:56:f8:e7:27:2a:c4:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:26:00:36:D3:AD:64:BD:EF:D6:67:C2:3C:FC:26:C1:35:54:15
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bQcmADbTrWS979Znwjz8JsE1VBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:930::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:1f:6b:ef:5c:f3:a8:5b:8b:eb:6a:79:f3:0d:9c:d1:a1:
         97:b5:06:29:25:5d:d4:07:65:b7:fd:53:c5:bc:ad:06:f8:c0:
         b0:a2:2b:a3:82:ca:b6:7a:17:6f:cd:dd:d8:81:20:3b:06:b3:
         08:a9:b0:3b:b6:c8:09:52:df:a4:3e:ad:b4:95:14:8f:9e:59:
         1f:0d:3e:e0:92:04:08:b8:45:51:51:69:ec:0c:6c:8a:d1:7e:
         df:aa:04:53:12:6b:09:bd:d4:c2:d1:e4:2a:a2:33:bf:fd:a4:
         5c:c1:81:0d:ba:c1:50:a2:45:58:ca:9d:53:07:7a:6b:98:18:
         7f:d2:3a:54:03:3b:b9:cf:44:bd:57:88:9c:c9:33:7a:25:16:
         b0:91:fd:13:b9:0c:74:fc:56:ab:1c:02:a4:07:7c:b4:8c:40:
         55:43:d3:12:7b:b6:39:45:86:64:18:7e:34:64:9e:b2:8e:cc:
         d0:57:4a:5c:50:71:1a:ac:4c:b3:14:c8:25:12:f2:29:d8:d0:
         79:69:60:b9:c1:d4:50:91:99:8e:98:00:bc:bb:78:0d:f2:c5:
         1b:7d:cb:5f:b2:4a:5c:42:43:70:6d:a8:16:de:35:ec:58:2f:
         20:b9:85:39:f5:dd:a9:a3:da:7c:24:f8:04:16:02:8b:75:fd:
         13:5c:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----