Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/jO75D5vvIqhHVe5tRL2-Zcg8Vbw.roa
File:                     jO75D5vvIqhHVe5tRL2-Zcg8Vbw.roa (raw, json)
Hash identifier:          eqL/2VzHifDsY1A/x38ymTl+sL04hFKS1MdEnh/jOO4=
Subject key identifier:   8C:EE:F9:0F:9B:EF:22:A8:47:55:EE:6D:44:BD:BE:65:C8:3C:55:BC
Certificate issuer:       /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial:       018F1505326F2DD82307BC22A7C9E87CF692
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/jO75D5vvIqhHVe5tRL2-Zcg8Vbw.roa
Signing time:             Thu 25 Apr 2024 11:30:13 +0000
ROA not before:           Thu 25 Apr 2024 11:30:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397423
IP address blocks:        2a02:5747::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:05:32:6f:2d:d8:23:07:bc:22:a7:c9:e8:7c:f6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6327607563493337687ad69ce1064e636265be3f
        Validity
            Not Before: Apr 25 11:30:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ceef90f9bef22a84755ee6d44bdbe65c83c55bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:2b:85:a0:80:13:6d:52:31:b9:c4:12:d4:
                    2a:72:e6:ba:c3:ca:08:60:46:1b:ca:cb:5a:0f:6e:
                    2d:56:9d:ae:d0:13:08:c9:9a:b2:b7:ba:a1:5f:39:
                    b2:fa:2a:4c:fc:f4:aa:7f:64:4b:7a:cc:cd:d6:3e:
                    28:d0:88:1f:31:63:ef:b1:67:4b:ed:cc:72:a8:63:
                    d7:64:f5:31:83:d1:68:db:fb:d7:43:f2:59:54:3a:
                    1c:64:2e:14:fb:f7:c6:8b:f8:d9:a0:6a:9d:1f:7c:
                    14:50:c1:39:d4:11:85:1d:22:f7:e8:ac:e0:89:6e:
                    70:7e:40:4c:7f:cf:33:e2:65:ad:27:5e:e6:1d:0a:
                    7b:b5:a9:2b:6b:09:c8:90:cb:ae:99:fd:98:d5:94:
                    1e:7e:31:3d:9b:b8:8a:9b:7e:19:16:c1:d2:8a:2b:
                    ba:71:2e:af:41:3b:76:3f:c1:8f:1f:48:25:a3:f3:
                    71:a2:af:7b:e9:4c:01:84:2b:c4:39:d0:3e:a0:d5:
                    2d:d0:cd:f8:6a:21:e5:41:d2:4e:ba:6a:18:62:99:
                    84:22:eb:f9:0c:e1:29:b5:7d:96:61:08:dc:94:27:
                    19:b1:e5:de:6a:71:e6:05:ac:63:80:d4:cc:a4:9e:
                    7b:77:59:79:2e:8c:d3:58:a3:55:07:a6:67:83:f9:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EE:F9:0F:9B:EF:22:A8:47:55:EE:6D:44:BD:BE:65:C8:3C:55:BC
            X509v3 Authority Key Identifier:
                keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/jO75D5vvIqhHVe5tRL2-Zcg8Vbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:5747::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:2e:58:ef:a4:dc:62:40:2d:32:b8:c4:6f:ce:00:bf:17:66:
         a6:23:ad:61:bb:ea:ec:a0:68:7b:fe:e4:5f:06:4d:a2:04:67:
         1f:1d:c3:d7:37:b2:ee:07:0d:9e:26:20:ac:6b:78:48:17:8c:
         96:24:44:8b:2a:35:1f:7a:cf:19:d8:f3:13:23:ad:24:e6:cb:
         35:72:37:bd:00:96:bc:32:5c:d9:b2:74:1f:ac:e2:d9:f9:48:
         27:78:90:da:02:b8:74:2f:a2:eb:11:60:0e:17:70:4f:13:ae:
         ec:5d:a7:1f:7e:b6:88:c1:52:4a:ba:28:b2:80:df:81:07:6b:
         a3:95:1e:05:41:56:de:da:f8:e4:d3:f4:81:34:c4:50:39:cf:
         dd:d1:54:86:86:f7:fb:e1:39:43:56:38:0d:82:0c:95:28:67:
         5b:f3:60:83:a1:79:5b:16:f6:dc:07:38:52:91:bb:80:10:e0:
         81:6a:b1:fc:75:6f:fd:2d:a9:bd:02:66:21:38:95:a7:43:a7:
         25:7a:60:38:37:e8:06:99:02:25:36:90:e8:ba:7e:7c:5d:9c:
         93:36:9b:1e:f6:14:4d:8a:8f:d7:48:ef:3b:be:be:bc:40:75:
         c1:7f:f8:59:68:1f:c5:a5:a4:94:49:d2:bc:79:30:13:58:cd:
         1e:12:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----