Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/V8SpHQV-GcUuxGXxA3wVm-DRUGI.roa
File:                     V8SpHQV-GcUuxGXxA3wVm-DRUGI.roa (raw, json)
Hash identifier:          YC7VD1xVTDucegRVM3dkSRLrZtbs3DPp6uN7ggsoqOE=
Subject key identifier:   57:C4:A9:1D:05:7E:19:C5:2E:C4:65:F1:03:7C:15:9B:E0:D1:50:62
Certificate issuer:       /CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
Certificate serial:       01904BA1D142F0CFDFA2122860572341091B
Authority key identifier: 36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/V8SpHQV-GcUuxGXxA3wVm-DRUGI.roa
Signing time:             Mon 24 Jun 2024 19:03:34 +0000
ROA not before:           Mon 24 Jun 2024 19:03:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42375
IP address blocks:        2a12:41c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4b:a1:d1:42:f0:cf:df:a2:12:28:60:57:23:41:09:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
        Validity
            Not Before: Jun 24 19:03:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57c4a91d057e19c52ec465f1037c159be0d15062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:46:40:6e:2d:01:bc:c3:cb:ba:14:ed:a9:
                    7c:41:67:40:c2:8d:71:b0:f3:15:61:eb:a5:77:1d:
                    af:32:7b:a9:a5:84:36:36:22:0e:8d:61:a7:7c:87:
                    7e:1c:77:ba:50:87:b2:f8:45:a4:aa:38:5f:4a:91:
                    82:8d:87:e5:3a:0b:6c:9e:49:a1:e7:a1:b8:a1:68:
                    78:e3:1b:78:df:34:3d:1a:57:dd:f7:5c:9a:43:64:
                    93:df:eb:c1:ca:53:bb:c2:23:0a:99:d2:e5:a3:88:
                    e6:96:42:5e:12:cd:45:7f:49:f3:29:39:2b:0b:0b:
                    31:69:be:df:48:f0:74:fa:93:12:37:d0:0f:45:1d:
                    fe:ef:f3:3b:dc:e3:e2:04:c3:d0:a1:9c:08:69:00:
                    a4:8a:7d:4a:3b:8a:82:0c:99:af:3e:15:f5:11:ba:
                    22:30:6e:4d:3a:4d:22:85:40:42:08:f4:ac:b8:22:
                    95:e2:fb:b0:40:a9:ea:31:8b:8a:df:41:b2:57:61:
                    26:5b:f3:c3:cd:fa:2a:b7:ec:ae:59:0a:2e:01:bf:
                    66:23:63:69:c2:ba:fe:79:35:97:a2:a3:97:20:59:
                    aa:71:2f:79:0e:db:3f:63:0b:36:73:d3:42:d5:a2:
                    82:82:17:df:f7:76:0a:8c:32:8c:7c:15:2e:67:38:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:A9:1D:05:7E:19:C5:2E:C4:65:F1:03:7C:15:9B:E0:D1:50:62
            X509v3 Authority Key Identifier:
                keyid:36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/V8SpHQV-GcUuxGXxA3wVm-DRUGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:41c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:76:a5:59:05:a5:03:f6:d4:be:21:64:44:a8:58:33:e1:b5:
         81:39:a7:bb:30:81:d4:c5:c4:d3:7a:98:14:c6:db:f9:d3:b5:
         3e:70:51:25:2b:81:2b:d1:75:3c:ee:d4:e6:19:cd:90:84:a0:
         ed:c9:d7:23:79:fb:e0:de:c7:e8:96:18:68:40:22:2b:22:90:
         40:c1:48:2e:b7:25:b3:42:85:c8:17:80:21:d1:11:d4:df:1c:
         3a:fc:02:31:64:71:0d:17:2a:b8:74:72:e4:c7:69:37:ce:d4:
         f7:a5:d4:5a:3b:2f:4c:f5:43:ef:ac:1c:c7:bb:34:09:62:64:
         ca:ce:6c:99:76:a9:7b:d1:eb:c9:35:e0:c3:9f:b6:22:16:58:
         a2:d2:e1:cd:ee:40:e6:40:5f:1f:b7:d9:dc:70:f2:c8:e5:41:
         85:15:a8:a7:7c:c8:b7:1d:6a:af:bd:83:2c:29:f4:c7:be:76:
         4e:95:06:a2:db:5b:18:43:a5:77:18:59:43:d0:a6:5e:ad:e3:
         c4:f6:1f:97:cc:dc:c0:ff:44:81:37:cb:9b:a4:60:f4:91:4f:
         35:20:fa:de:31:e1:a7:3c:7a:34:6f:58:7d:e7:fb:1d:2e:0c:
         ed:13:aa:73:23:61:ee:05:0b:95:86:94:54:4c:5f:98:3e:55:
         09:25:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----