Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/lsNczk4rDmRBSwVAP5GubZc31Vo.roa
File:                     lsNczk4rDmRBSwVAP5GubZc31Vo.roa (raw, json)
Hash identifier:          vxEJxcCY1ywoGsnbwgr213iy3/bfmuH75MEw2EYtTbU=
Subject key identifier:   96:C3:5C:CE:4E:2B:0E:64:41:4B:05:40:3F:91:AE:6D:97:37:D5:5A
Certificate issuer:       /CN=9c7d4ef007be5b90317277f1c168400a686124d8
Certificate serial:       018715609FF7C870CBE80FE60A227B0014C1
Authority key identifier: 9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/lsNczk4rDmRBSwVAP5GubZc31Vo.roa
Signing time:             Fri 24 Mar 2023 20:47:46 +0000
ROA not before:           Fri 24 Mar 2023 20:47:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199471
IP address blocks:        2001:67c:c48::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:15:60:9f:f7:c8:70:cb:e8:0f:e6:0a:22:7b:00:14:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7d4ef007be5b90317277f1c168400a686124d8
        Validity
            Not Before: Mar 24 20:47:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96c35cce4e2b0e64414b05403f91ae6d9737d55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:60:dc:dc:4e:47:ea:36:d2:41:b1:3a:37:
                    69:d0:ca:4a:75:de:5d:19:ca:79:50:b5:75:79:99:
                    6f:cd:f8:be:5b:5e:e0:0c:c1:d2:4c:6c:b3:1c:31:
                    de:94:d4:d1:cb:f2:af:5b:ab:15:0b:24:d6:61:af:
                    b6:3f:bc:53:3b:e1:6d:54:dd:3a:05:23:71:62:5f:
                    a7:c1:9f:af:f8:c5:5a:7a:9a:3a:79:e2:7e:e5:f6:
                    b5:27:b3:39:8f:80:fc:46:32:06:38:40:df:90:7f:
                    96:3a:3f:f5:b1:4f:8c:06:b7:67:58:c8:e8:09:2b:
                    cf:9f:b9:5d:c9:7f:68:cd:e0:73:1f:d0:1d:ae:63:
                    42:4b:80:ee:62:42:be:b4:23:b0:d4:e7:c2:7f:04:
                    a5:95:d3:cd:e7:be:51:9c:7a:49:32:7e:df:6e:d7:
                    04:79:40:38:b7:26:16:47:55:40:18:f6:66:7c:b9:
                    d8:ed:f8:38:62:0c:76:18:1e:a2:19:15:5b:96:66:
                    27:80:00:d9:0d:3e:88:5e:bb:97:b2:70:3e:4f:1d:
                    a2:d3:db:72:4f:f4:b9:28:75:b4:8d:46:fe:08:d8:
                    b8:81:86:aa:90:99:8f:98:75:4f:6b:61:74:68:44:
                    dd:d4:f2:79:a0:69:2e:f4:24:7d:2a:9b:ec:47:11:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:5C:CE:4E:2B:0E:64:41:4B:05:40:3F:91:AE:6D:97:37:D5:5A
            X509v3 Authority Key Identifier:
                keyid:9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/lsNczk4rDmRBSwVAP5GubZc31Vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c48::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:8b:31:2e:05:b6:c6:b9:64:3c:57:92:56:41:36:4b:97:
         90:64:32:0d:76:f0:88:c6:53:09:c0:2e:9a:73:5c:ce:46:62:
         f2:be:42:8d:9c:08:06:8c:2d:96:24:7e:26:cd:37:bb:6b:cb:
         88:5b:f5:38:9c:da:e3:e7:c2:e8:0d:27:be:c9:63:47:ba:ca:
         9e:19:3a:c7:5d:0b:14:e0:25:ff:2d:b8:84:15:b5:0c:2c:b7:
         31:b3:33:12:4f:73:c8:37:10:6a:db:68:fc:5d:d1:10:cd:ea:
         ce:41:73:4f:f4:97:64:61:73:e5:5e:99:ab:53:02:d2:2c:90:
         cb:84:4d:ee:90:80:fc:3a:6a:f2:f8:05:f7:66:a7:35:9f:d8:
         c9:cd:92:6f:02:b2:2c:8a:e5:a5:29:19:01:58:4e:1c:21:2d:
         35:20:eb:71:f0:c4:47:76:22:8d:97:63:8a:cd:2c:1e:5e:fb:
         35:99:69:e5:1b:85:7e:9c:90:51:f4:33:5e:24:9b:69:0f:c9:
         d1:e5:80:f6:3d:9b:71:73:05:28:1b:21:5f:72:e0:a8:18:2f:
         8c:65:68:7d:67:66:1f:89:33:36:e8:d3:ab:70:8b:ba:d8:47:
         25:ab:aa:46:35:29:df:0b:d7:67:64:69:1a:27:89:86:5b:e7:
         47:ad:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----