Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa
File:                     DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa (raw, json)
Hash identifier:          0vKa1p+Btf2J4Hc1AcLpA50JbzMhVeF3FjwclweUf0I=
Subject key identifier:   0C:8B:0C:EE:A3:86:23:9F:D9:8A:D8:2B:6D:63:FD:A2:FC:92:FB:C4
Certificate issuer:       /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial:       018F441E71BAAC2B9A9D62D495CA12E99C88
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa
Signing time:             Sat 04 May 2024 14:59:56 +0000
ROA not before:           Sat 04 May 2024 14:59:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205028
IP address blocks:        2a11:a600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1e:71:ba:ac:2b:9a:9d:62:d4:95:ca:12:e9:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
        Validity
            Not Before: May  4 14:59:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0c8b0ceea386239fd98ad82b6d63fda2fc92fbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:c4:e2:55:9c:93:81:ca:69:ef:38:7e:05:
                    78:2f:84:3f:a3:f7:d6:21:29:dc:01:ea:3f:f9:9f:
                    20:ef:cb:aa:5d:02:34:a2:5d:2d:0e:e7:3a:ff:54:
                    9f:74:49:35:cc:7a:d8:f3:f7:38:4f:c1:4e:3f:8a:
                    81:9f:9e:75:36:87:aa:cc:77:91:57:15:e3:ce:8b:
                    77:6b:20:1a:6b:c1:77:0e:7e:df:39:8b:ad:0b:2e:
                    a5:20:8a:9b:db:0c:d8:8f:e4:d7:88:69:d0:06:69:
                    4c:26:03:34:7a:6f:ea:25:71:17:e4:94:9f:0f:4e:
                    2f:30:1e:ba:d8:59:3f:d3:b6:26:a5:b7:9f:8f:4d:
                    5d:29:0f:6d:d2:52:ca:3c:6e:b7:11:81:a3:fb:40:
                    09:53:38:39:49:df:61:c7:e9:e6:a3:b2:06:fa:b9:
                    79:ee:81:34:df:62:c7:ae:b1:4e:b1:f5:af:55:07:
                    d8:6f:cd:68:a2:b6:aa:dc:f8:17:f3:33:eb:55:2d:
                    d3:0e:1b:d2:69:90:93:3d:41:6f:56:2f:fe:81:7d:
                    b2:77:16:2c:6e:b9:21:9b:e7:8c:9c:4c:fd:0d:26:
                    7b:1f:7a:6d:76:8d:94:5d:a7:ce:93:22:12:16:26:
                    aa:21:82:cb:70:72:20:24:06:2b:f8:7b:c0:e1:cc:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8B:0C:EE:A3:86:23:9F:D9:8A:D8:2B:6D:63:FD:A2:FC:92:FB:C4
            X509v3 Authority Key Identifier:
                keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:20:5b:ae:89:1f:ab:9a:f3:a1:a5:ac:23:01:62:a1:ae:af:
         d0:50:0e:cb:f4:48:92:44:43:61:5a:6d:23:eb:d6:32:cb:35:
         36:00:f8:83:b8:98:81:9c:66:02:6c:f8:2c:d2:d7:d8:70:cf:
         13:97:33:ea:d8:85:de:bc:e9:40:7e:7a:f3:62:21:c0:68:b4:
         73:b3:20:cb:6b:c8:b6:d4:d6:3c:66:96:e3:13:32:a7:ff:20:
         18:ef:1b:6a:ea:2a:ea:42:21:bb:d9:12:07:57:0a:16:7f:ee:
         04:51:40:00:a4:81:6f:e4:e1:54:34:09:8f:a4:b0:3a:75:10:
         5a:66:3c:fc:2d:87:77:b8:f2:53:ea:f9:77:5d:4c:f4:4f:55:
         58:09:21:92:2b:fb:bb:90:f9:ea:cb:0b:9d:cd:04:0c:c6:5c:
         69:a0:2b:25:bd:b4:4d:a1:1d:bc:9b:08:96:a4:08:1e:1f:19:
         65:55:d6:01:19:96:88:1c:e1:8c:2a:5d:86:75:39:af:9b:41:
         0d:8d:f0:18:df:b9:9b:c7:aa:17:04:5b:94:9b:d7:6c:f6:68:
         dc:25:f1:81:44:7b:88:05:64:92:4c:5b:f8:cd:5f:a7:f1:ca:
         a8:8e:ed:46:d4:8a:79:5f:ea:b3:41:f9:ad:07:7a:c3:2c:00:
         78:eb:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----