Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa
File:                     ozWv7bU5ZFGqyms4ZyTgSklULO8.roa (raw, json)
Hash identifier:          mNDmK352Yl78ZUM0HISc1woeJcefBn1mtScDTD+qYDs=
Subject key identifier:   A3:35:AF:ED:B5:39:64:51:AA:CA:6B:38:67:24:E0:4A:49:54:2C:EF
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       018CC80191F8B07F01D2031E4D5BABC1F342
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa
Signing time:             Tue 02 Jan 2024 02:29:55 +0000
ROA not before:           Tue 02 Jan 2024 02:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210896
IP address blocks:        2a0c:d540:1111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:91:f8:b0:7f:01:d2:03:1e:4d:5b:ab:c1:f3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  2 02:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a335afedb5396451aaca6b386724e04a49542cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:38:c2:39:53:c3:10:01:36:62:2b:fe:32:
                    65:85:9f:16:e1:47:b4:b2:18:3a:bd:20:a3:20:c8:
                    3f:c5:c4:44:8d:bd:cc:bf:b0:bf:30:6f:a1:b8:7c:
                    78:81:6e:7c:78:fd:89:e8:9b:39:36:58:96:40:92:
                    4b:e8:a6:d0:4c:60:6e:4d:bf:e8:60:c6:8c:16:8e:
                    8b:3c:f3:30:75:d2:3d:51:27:c4:57:41:01:44:9c:
                    04:f6:0f:2e:d0:7f:f6:7c:a0:a9:a1:2e:28:48:fd:
                    78:f5:c6:27:9f:e4:a2:25:0d:0e:a8:73:c9:1b:3d:
                    eb:18:39:bc:40:1f:3e:cb:e3:86:03:3a:b6:cb:31:
                    38:54:92:7a:c3:41:21:56:06:79:9c:80:a9:46:4e:
                    89:87:88:fe:ae:e2:01:18:e6:7b:e3:fe:f3:bf:c3:
                    c1:87:a4:c0:6f:84:40:45:30:c7:d5:64:c2:1f:f0:
                    89:55:0c:7d:b8:5c:34:cb:45:f4:ba:60:22:6e:8f:
                    32:d3:c0:b9:56:cb:3b:c9:72:da:cb:b9:a7:88:27:
                    b2:50:3b:ac:a6:06:08:59:d1:ff:7a:97:6c:29:99:
                    ca:e2:ef:90:f8:f8:5b:63:9d:55:fc:6d:46:39:a3:
                    77:06:a6:3b:aa:89:e4:0d:b8:05:47:e6:1d:df:11:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:35:AF:ED:B5:39:64:51:AA:CA:6B:38:67:24:E0:4A:49:54:2C:EF
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:d540:1111::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:36:aa:15:a9:73:4a:25:45:8d:b2:c3:ec:72:88:92:cb:
         5a:f4:2d:c0:0e:f6:bb:da:3e:41:cc:a5:38:b8:8b:ab:b7:4f:
         49:dd:8c:8a:7c:e4:52:2e:7a:d9:23:53:0e:12:95:6f:8a:95:
         07:5b:9d:ac:98:a8:2d:c5:8f:4e:57:f3:8b:9c:91:db:e2:f4:
         87:19:ec:2a:e9:bd:e3:cf:bc:93:cc:88:9a:af:27:f4:f1:b7:
         40:c1:27:ea:3d:ce:a6:85:8d:98:ea:b8:f7:25:10:8b:1e:b9:
         90:58:dc:71:e7:68:04:bc:92:a6:77:df:c9:f6:09:e2:79:ad:
         90:3b:e3:8e:6f:17:a3:79:3d:84:06:11:89:f2:a1:e0:12:49:
         78:c2:1a:bb:f4:dd:90:95:28:3e:fa:79:82:15:03:ef:7d:49:
         5e:af:93:73:25:b0:aa:4c:0c:dc:3d:a6:2f:61:e0:7b:36:f4:
         2a:96:b2:9f:81:e1:c1:48:ea:8b:e8:fb:25:0e:40:bc:d2:96:
         21:b5:96:46:ed:8b:ce:13:5e:f4:6e:50:a9:a3:84:34:70:49:
         03:d3:54:ea:7e:68:7f:11:08:38:7c:17:ff:19:85:92:88:bd:
         7f:fd:75:09:79:8d:33:1d:de:67:30:e9:bd:c2:74:b1:55:ec:
         de:d4:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----