Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/BMb0rW16dYBV_vIKMC4DCxNpxVs.roa
File:                     BMb0rW16dYBV_vIKMC4DCxNpxVs.roa (raw, json)
Hash identifier:          cCKR+A5QMWWpV7BTCI/pRxrmyeu1uoMux3hTbt4gBOA=
Subject key identifier:   04:C6:F4:AD:6D:7A:75:80:55:FE:F2:0A:30:2E:03:0B:13:69:C5:5B
Certificate issuer:       /CN=77d01100407f553f0fb131be72b32e4981237efc
Certificate serial:       01905E92B197E12521DCCDC4D67B984F6AF1
Authority key identifier: 77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/BMb0rW16dYBV_vIKMC4DCxNpxVs.roa
Signing time:             Fri 28 Jun 2024 11:19:50 +0000
ROA not before:           Fri 28 Jun 2024 11:19:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48655
IP address blocks:        2a0c:6200::/29 maxlen: 29
                          2a0c:6200::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5e:92:b1:97:e1:25:21:dc:cd:c4:d6:7b:98:4f:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d01100407f553f0fb131be72b32e4981237efc
        Validity
            Not Before: Jun 28 11:19:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04c6f4ad6d7a758055fef20a302e030b1369c55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:58:f4:69:00:d0:62:79:61:1f:34:7e:83:
                    36:fe:31:b8:f3:f5:27:ee:af:92:22:98:03:77:fa:
                    87:b1:fd:f1:21:33:6f:82:db:b2:89:cd:46:eb:b2:
                    43:5e:f3:4c:8d:5f:8a:c5:5d:63:f4:54:53:58:ee:
                    97:4f:96:20:b7:bb:a5:fc:b3:53:1e:40:50:eb:94:
                    2c:17:9c:20:4b:f1:d2:62:88:08:fb:7a:94:72:7a:
                    9a:b0:96:18:b6:c0:83:8f:ef:aa:ab:3d:8c:ef:92:
                    de:33:3b:7a:63:37:33:06:84:57:20:aa:12:b1:db:
                    c4:ed:cf:bf:99:c1:59:b3:13:08:a2:f3:5c:c1:05:
                    a4:92:34:31:d3:4a:33:1f:a7:78:3a:c3:11:84:12:
                    34:b5:31:23:38:7e:f9:28:56:83:cd:75:19:81:a9:
                    b4:45:68:7e:0f:c9:da:2c:11:dc:18:db:31:c0:68:
                    0d:56:bf:b0:d6:13:b4:a8:f2:f4:d0:f6:7d:f2:71:
                    dd:77:0a:6c:52:2d:cc:7d:c3:47:cb:50:8e:e4:5e:
                    e6:01:9f:e2:d7:29:85:57:d6:f3:70:77:58:12:bc:
                    32:f5:b3:12:d4:f8:34:89:50:31:e5:f6:81:fe:cd:
                    4b:43:89:5f:f5:d2:ab:58:40:ee:2e:e1:7b:57:b6:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C6:F4:AD:6D:7A:75:80:55:FE:F2:0A:30:2E:03:0B:13:69:C5:5B
            X509v3 Authority Key Identifier:
                keyid:77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/BMb0rW16dYBV_vIKMC4DCxNpxVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:6200::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:5a:e6:b9:3d:2c:6c:9b:6d:e1:4f:98:67:79:35:5b:07:
         a9:30:63:dc:64:6f:9a:f8:b6:17:e3:f6:0c:c5:a8:d3:11:6f:
         3b:57:2f:b7:cd:8a:09:b5:42:c8:7f:61:4b:47:2f:c7:38:71:
         19:a0:e7:5a:7f:8a:e3:6e:5b:dd:27:20:fc:33:dc:98:41:5f:
         3e:2c:cb:a3:dd:5a:78:85:03:b9:a9:73:5e:e6:28:00:59:ae:
         1c:93:35:7b:95:bb:a4:ca:85:f1:75:de:0b:30:49:c0:b1:94:
         9a:3e:11:92:7a:0a:f0:04:07:ff:8a:bb:9d:af:c7:c1:2e:a4:
         57:06:ef:09:8f:21:ac:6f:3c:6f:ad:c8:97:46:f6:49:70:4d:
         28:68:d9:55:32:7d:aa:68:90:5f:57:b0:3c:dd:ca:a5:0f:54:
         ab:bf:d4:92:1a:e8:46:3e:cf:24:5b:b5:e9:5e:03:67:c3:1d:
         7b:22:ee:a8:26:de:3b:40:0b:1d:d3:c1:18:48:e1:23:58:78:
         60:94:c3:08:6e:c4:85:f8:de:76:7b:45:2c:05:cd:17:b1:e3:
         8f:03:16:32:22:ce:ff:47:e1:73:35:be:61:55:53:ba:22:c9:
         6a:b6:9a:01:6f:57:31:4e:ff:48:f5:45:16:b9:16:0a:c5:40:
         21:0c:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----