Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/iL-dhRpylUDHuXMxbMBz3TgbTMY.roa
File:                     iL-dhRpylUDHuXMxbMBz3TgbTMY.roa (raw, json)
Hash identifier:          /g2vDcdwnXg1dj4hWmONFERLb+lr7JpqQIsTefthbh8=
Subject key identifier:   88:BF:9D:85:1A:72:95:40:C7:B9:73:31:6C:C0:73:DD:38:1B:4C:C6
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019424453672E405AF74EC775285C83693AF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/iL-dhRpylUDHuXMxbMBz3TgbTMY.roa
Signing time:             Wed 01 Jan 2025 23:48:23 +0000
ROA not before:           Wed 01 Jan 2025 23:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214168
IP address blocks:        2a0e:9c0::/29 maxlen: 29
                          2a0e:91c0::/29 maxlen: 29
                          2a11:6700::/29 maxlen: 29
                          2a11:8c80::/29 maxlen: 29
                          2a11:8cc0::/29 maxlen: 29
                          2a12:1ec0::/29 maxlen: 29
                          2a12:1f40::/29 maxlen: 29
                          2a12:3240::/29 maxlen: 29
                          2a12:4680::/29 maxlen: 29
                          2a12:4980::/29 maxlen: 29
                          2a12:6980::/29 maxlen: 29
                          2a12:7d00::/29 maxlen: 29
                          2a12:9180::/29 maxlen: 29
                          2a12:be00::/29 maxlen: 29
                          2a12:da00::/29 maxlen: 29
                          2a12:e900::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:36:72:e4:05:af:74:ec:77:52:85:c8:36:93:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Jan  1 23:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=88bf9d851a729540c7b973316cc073dd381b4cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:8b:cb:db:39:1e:04:17:48:7a:e4:39:c0:
                    34:de:4d:34:0e:6e:77:41:cd:ee:65:92:7d:39:99:
                    6d:11:f5:57:f1:ff:90:e8:69:59:ea:15:c4:a7:ca:
                    d9:2a:89:d2:0c:9c:95:1c:86:69:6a:8e:bf:5b:43:
                    97:76:7e:b3:5e:42:af:4d:18:39:62:19:38:a2:a8:
                    7a:ba:42:56:de:39:ef:f2:c8:05:71:a8:ee:34:ee:
                    69:18:5a:a3:c0:52:0f:2e:c1:51:2f:4e:d0:26:b6:
                    c7:33:fc:8f:c5:f7:9f:98:30:7d:a6:74:90:12:b2:
                    df:48:b5:df:a7:c8:0c:2e:81:12:08:0e:ea:70:fd:
                    12:a7:69:dc:b7:97:37:23:c2:a7:01:b0:5f:37:e8:
                    f6:a6:81:d3:70:9c:24:ad:e0:f6:38:81:aa:f5:39:
                    55:94:2c:1a:d5:3d:86:98:c0:52:c0:cf:b9:bd:07:
                    7f:3b:21:41:af:a3:2f:ee:b5:f4:66:f5:6a:da:26:
                    d6:5e:18:93:0b:57:87:fd:d7:00:da:9e:be:4f:f7:
                    ca:88:38:30:d2:43:dd:4a:f3:1b:25:95:46:f2:df:
                    a3:3a:48:3a:c9:8f:dc:16:53:c7:04:b6:41:25:ca:
                    02:c7:bf:e3:37:fe:7e:45:1a:50:34:a3:f0:7c:f8:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:9D:85:1A:72:95:40:C7:B9:73:31:6C:C0:73:DD:38:1B:4C:C6
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/iL-dhRpylUDHuXMxbMBz3TgbTMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:9c0::/29
                  2a0e:91c0::/29
                  2a11:6700::/29
                  2a11:8c80::/29
                  2a11:8cc0::/29
                  2a12:1ec0::/29
                  2a12:1f40::/29
                  2a12:3240::/29
                  2a12:4680::/29
                  2a12:4980::/29
                  2a12:6980::/29
                  2a12:7d00::/29
                  2a12:9180::/29
                  2a12:be00::/29
                  2a12:da00::/29
                  2a12:e900::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:14:a0:93:f1:1b:22:80:88:af:3f:4b:a3:35:d9:ed:0c:
         46:ec:73:b3:77:5c:7a:d1:7d:c7:d6:dd:8a:1e:80:aa:e6:6a:
         f8:28:e2:9f:6c:a1:81:a5:3c:ed:fd:c3:1a:9e:3a:15:1d:85:
         ef:f4:ad:83:fd:8f:e4:42:04:0c:17:79:36:5c:62:f7:e2:ed:
         05:00:e2:2d:cd:48:a4:16:3e:df:f4:4d:ca:13:5b:2a:1f:d9:
         a8:c8:5a:05:4a:a7:1d:c8:9d:bb:a0:ca:b4:75:c1:b6:ed:7b:
         29:25:08:dd:53:95:42:e8:00:ba:75:7c:c0:30:e4:34:32:ae:
         c9:44:fb:85:ed:1d:f1:24:b3:1b:ff:73:12:c1:45:aa:13:2f:
         ff:8f:27:91:aa:40:ac:53:83:c7:63:49:c3:07:0d:49:bd:90:
         c2:81:aa:47:20:b3:ea:27:dd:31:7c:fa:ee:98:2b:43:97:79:
         8a:c9:cb:1c:e2:35:d2:9a:62:97:b9:80:43:42:c6:5f:e2:55:
         0b:3d:df:0d:2f:8d:3b:00:2d:c0:25:dd:96:74:92:5c:76:22:
         3c:75:77:48:3a:44:b7:84:08:38:31:02:c2:0e:e0:d5:57:2a:
         30:d5:a0:59:4f:8f:bb:18:ff:86:42:7a:d1:15:1d:ff:d8:40:
         12:c2:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----