Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa
File:                     ltulORma-P3wSZy8kJxgbvD19do.roa (raw, json)
Hash identifier:          3uqahYMVTtnE2H28OWI+8QzVU2R+VXC5p06rtgEZIiM=
Subject key identifier:   96:DB:A5:39:19:9A:F8:FD:F0:49:9C:BC:90:9C:60:6E:F0:F5:F5:DA
Certificate issuer:       /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial:       018CC425482DF9CA0EF60E4BB299BD86E566
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa
Signing time:             Mon 01 Jan 2024 08:30:26 +0000
ROA not before:           Mon 01 Jan 2024 08:30:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200303
IP address blocks:        2001:678:c20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:48:2d:f9:ca:0e:f6:0e:4b:b2:99:bd:86:e5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
        Validity
            Not Before: Jan  1 08:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=96dba539199af8fdf0499cbc909c606ef0f5f5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:6f:a9:71:1c:ce:25:fc:8b:a2:08:ed:13:
                    b3:9c:fc:0e:60:d7:39:37:e6:24:2d:5b:a5:47:63:
                    b3:ed:79:f5:b2:cf:65:73:7f:ca:a5:bc:9a:2b:17:
                    4f:dd:ab:ff:b7:18:92:f5:21:3b:63:8f:64:2f:6f:
                    44:cf:8a:ab:a2:ac:2c:6e:f2:cd:5d:87:39:c8:1e:
                    8e:ed:79:09:88:17:37:ee:27:89:8c:d0:8f:4f:7f:
                    a2:df:2a:14:5f:9c:4e:76:68:89:d7:07:70:3f:32:
                    fd:d1:4d:53:5c:f9:25:ff:08:60:31:8c:b3:f8:86:
                    b2:82:53:85:af:0b:68:1e:35:43:4f:04:3a:74:23:
                    c7:54:31:17:5b:43:8c:72:2a:71:20:2a:c6:b3:04:
                    66:c8:66:90:d8:a9:87:0b:28:ed:c3:c8:0f:09:89:
                    b7:47:98:ad:4b:bf:b8:5a:25:bd:e1:4c:32:a6:f0:
                    9f:ff:ce:1a:c1:6a:d8:76:6c:51:a8:0d:af:88:15:
                    f1:fe:cc:1f:e3:e7:e7:8e:45:9a:1e:d5:f4:4a:82:
                    52:07:ff:66:3f:41:3b:b1:d0:eb:57:7b:85:60:e1:
                    6c:e7:5d:40:44:87:52:ff:84:15:ae:1e:28:d4:8e:
                    53:11:ea:6c:a8:dd:b2:7d:a4:65:af:f7:51:75:16:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:A5:39:19:9A:F8:FD:F0:49:9C:BC:90:9C:60:6E:F0:F5:F5:DA
            X509v3 Authority Key Identifier:
                keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c20::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:68:0a:c4:00:c7:98:47:fc:0e:c5:e0:7d:42:31:34:bb:7d:
         0f:b0:3a:44:b1:65:27:16:6b:93:99:23:a1:32:d1:de:3e:c2:
         10:7d:8b:e4:14:28:4c:22:6e:82:e8:30:8e:82:f3:9a:23:63:
         c8:b9:3b:1d:7a:87:32:81:26:15:5b:a8:66:cc:40:06:f4:4d:
         3e:aa:29:88:84:41:5a:3d:a6:59:1e:41:35:ab:02:60:09:26:
         18:20:7f:13:ca:a5:77:72:68:d8:97:55:a0:7f:1f:7b:b1:e3:
         a6:61:0c:d0:ff:97:73:4b:11:ab:f5:88:0d:0f:e5:4e:cd:e8:
         b7:10:83:2a:7c:67:63:06:7f:1c:bb:f4:af:aa:87:1e:e1:53:
         83:80:09:3b:83:d6:50:d1:e0:43:f2:ce:16:51:ad:d8:bf:a7:
         bc:39:bb:77:67:7b:41:8b:17:52:bc:25:9c:23:5b:04:3d:d5:
         75:01:44:12:9a:1e:14:85:00:23:8e:19:4c:4b:84:d8:fc:14:
         c8:38:20:e4:fa:5a:91:81:4a:34:7f:85:ba:ad:cd:e2:19:a9:
         7f:d5:8d:a8:ec:d8:8b:72:bb:35:ef:42:6f:69:4f:99:32:b2:
         fc:59:15:b7:d7:54:c0:57:14:18:1a:77:09:05:90:bd:db:86:
         c3:1d:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----