Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/k-nuwK-F95AFujZnAFrvKZK1mwc.roa
File:                     k-nuwK-F95AFujZnAFrvKZK1mwc.roa (raw, json)
Hash identifier:          G/0ROXHfv9sHSwi05OgpwZ7Y9ZEUyH1d9Zxje5rQQdg=
Subject key identifier:   93:E9:EE:C0:AF:85:F7:90:05:BA:36:67:00:5A:EF:29:92:B5:9B:07
Certificate issuer:       /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial:       018CC7274F69EAE8BA662F08D675261E0D2F
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/k-nuwK-F95AFujZnAFrvKZK1mwc.roa
Signing time:             Mon 01 Jan 2024 22:31:31 +0000
ROA not before:           Mon 01 Jan 2024 22:31:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50979
IP address blocks:        2a02:27ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:4f:69:ea:e8:ba:66:2f:08:d6:75:26:1e:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
        Validity
            Not Before: Jan  1 22:31:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=93e9eec0af85f79005ba3667005aef2992b59b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:d3:e2:31:a9:81:15:7b:22:7f:9c:5f:0f:
                    9b:e6:b5:6c:17:8f:1d:f2:f7:5d:f3:c8:cd:22:e0:
                    c3:76:28:22:97:a4:3c:13:50:0c:20:d4:b2:70:f3:
                    ab:40:7b:dd:0c:b0:2a:db:b5:45:15:a0:50:2e:4f:
                    8d:0f:be:6c:34:9f:d8:00:fa:0e:f0:bb:75:82:42:
                    c1:22:eb:8b:7f:fc:01:15:c8:3a:fc:10:f0:a5:91:
                    4d:f7:bd:a5:b9:04:44:1d:d4:f2:d0:69:ee:24:74:
                    04:93:21:d7:5b:b7:04:f8:7e:a5:de:ff:26:97:24:
                    cf:51:89:c0:96:b5:69:d6:da:d2:ea:92:cb:72:7c:
                    07:a2:a0:3a:c7:9f:ae:f1:d9:79:9c:ca:ae:fa:cc:
                    dc:23:13:d7:7b:b1:2d:9c:05:6a:a1:ed:ab:2b:4c:
                    d9:55:6f:2f:3d:1c:6e:3d:c2:3e:91:37:fa:25:20:
                    8c:90:7a:13:d7:28:b1:45:14:2f:60:67:49:41:a1:
                    60:1d:75:0b:4a:05:4f:24:c9:50:50:36:ba:51:49:
                    0d:4b:e1:74:7b:27:10:63:d9:ed:ac:eb:19:24:15:
                    6b:82:b2:31:8a:d1:70:3d:76:e0:d6:d2:6d:dc:f6:
                    dc:c1:2e:dc:2b:e2:f7:05:9c:3f:88:5d:97:98:a6:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E9:EE:C0:AF:85:F7:90:05:BA:36:67:00:5A:EF:29:92:B5:9B:07
            X509v3 Authority Key Identifier:
                keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/k-nuwK-F95AFujZnAFrvKZK1mwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:27ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:4c:f4:db:c3:6e:58:83:fa:b0:c9:e6:47:59:b3:99:d8:
         f1:d7:38:b1:2b:3d:d0:ad:cd:3b:5c:60:9d:63:77:21:92:bd:
         57:6a:9d:1e:bd:e1:c7:eb:9a:a7:d0:68:8c:f7:2f:4b:16:f3:
         22:17:c6:f4:51:3b:cf:10:4f:3c:74:75:1a:70:97:b5:d6:05:
         dd:72:f4:98:6e:d3:bf:67:77:1d:5a:aa:51:dd:f4:74:16:e2:
         96:f7:76:c8:a5:56:66:16:17:b2:a3:10:fc:23:96:d9:47:38:
         3d:9f:9e:06:78:f7:69:2b:4a:43:a9:ee:da:5f:51:5c:94:4d:
         a0:b1:9d:38:c6:1b:30:b9:34:71:01:62:0d:d1:8e:8d:89:79:
         12:51:20:3a:f2:4a:59:70:fb:36:09:b1:02:de:75:08:9b:81:
         f3:68:31:7c:1b:f9:45:ed:55:54:29:d1:15:ed:2d:e2:2a:5f:
         f0:45:28:d2:39:4b:7c:fc:29:e0:5c:88:f7:a4:75:1c:9d:97:
         32:99:ed:d9:20:1a:a3:77:3c:6e:4f:7e:d6:12:7a:1d:51:31:
         54:f3:65:9e:fb:a6:d3:6a:e4:5e:97:6f:b4:ae:bf:83:a5:42:
         03:33:a7:27:3a:5f:e2:c7:fb:7c:f1:c8:26:35:f7:3a:58:1d:
         02:dd:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----