Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Plnaiur-lBwqpCzhvOswQDIElbQ.roa
File:                     Plnaiur-lBwqpCzhvOswQDIElbQ.roa (raw, json)
Hash identifier:          ajtkEyfuFBG1lB+OYGBoY8r6fkqllZkZbwRFk0/1Zq4=
Subject key identifier:   3E:59:DA:8A:EA:FE:94:1C:2A:A4:2C:E1:BC:EB:30:40:32:04:95:B4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019425227FE37C6F500440617E25C9FC8E19
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Plnaiur-lBwqpCzhvOswQDIElbQ.roa
Signing time:             Thu 02 Jan 2025 03:50:05 +0000
ROA not before:           Thu 02 Jan 2025 03:50:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214645
IP address blocks:        2a0e:97c0:3b0::/48 maxlen: 48
                          2a0e:97c0:3b1::/48 maxlen: 48
                          2a0e:97c0:3b2::/48 maxlen: 48
                          2a0e:97c0:3b3::/48 maxlen: 48
                          2a0e:97c0:3b5::/48 maxlen: 48
                          2a0e:97c0:3b6::/48 maxlen: 48
                          2a0e:97c0:3b7::/48 maxlen: 48
                          2a0e:97c0:3b8::/48 maxlen: 48
                          2a0e:97c0:3b9::/48 maxlen: 48
                          2a0e:97c0:3ba::/48 maxlen: 48
                          2a0e:97c0:3bb::/48 maxlen: 48
                          2a0e:97c0:3bc::/48 maxlen: 48
                          2a0e:97c0:3be::/48 maxlen: 48
                          2a0e:97c0:3bf::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:7f:e3:7c:6f:50:04:40:61:7e:25:c9:fc:8e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e59da8aeafe941c2aa42ce1bceb3040320495b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:97:f9:90:e0:89:af:61:1d:1a:9a:86:ea:
                    5b:67:8d:7d:bd:cb:ac:04:61:53:eb:dc:5f:57:87:
                    21:1e:a3:57:5e:1a:df:a9:61:15:24:0e:f4:d2:00:
                    72:ac:21:25:d9:d9:e8:cd:e1:ce:35:29:75:da:f3:
                    45:7f:18:53:c3:8d:93:6d:30:a6:76:81:ec:28:ea:
                    6c:90:2e:45:db:30:2d:e9:fa:f2:2e:38:4c:fa:49:
                    f3:75:c1:59:47:c1:7f:88:03:18:61:2d:da:da:2a:
                    2a:36:5c:1f:cb:f6:de:c5:32:57:53:b8:00:20:9c:
                    39:30:0e:5b:e1:a7:f6:bf:cc:22:67:9e:a7:b2:0d:
                    70:9d:9d:ca:1a:02:42:4b:a0:a6:39:f3:83:23:49:
                    bb:b8:21:d2:56:98:57:96:65:e7:40:45:28:d6:37:
                    11:56:e5:00:9a:2c:41:b1:0b:9a:5b:88:5a:66:5f:
                    39:73:c3:27:d7:27:04:3a:33:2e:0a:38:4b:ab:45:
                    c9:b9:85:85:bd:34:8f:66:10:d4:fe:37:cf:d8:a8:
                    8a:19:b1:11:a1:55:e3:10:ba:fa:f2:e9:39:b0:ae:
                    74:b4:7e:62:a6:dc:1a:cc:fb:92:78:59:a9:d0:1f:
                    07:5b:c1:ae:ce:64:a6:2c:27:aa:c6:2c:df:45:ee:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:DA:8A:EA:FE:94:1C:2A:A4:2C:E1:BC:EB:30:40:32:04:95:B4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Plnaiur-lBwqpCzhvOswQDIElbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3b0::/46
                  2a0e:97c0:3b5::-2a0e:97c0:3bc:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:3be::/47

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:cd:8d:8d:52:de:f2:66:44:79:da:8a:65:d7:8d:0b:8f:
         6c:5b:4a:a9:40:c9:73:8a:ab:14:38:4c:30:3f:ce:08:c6:b4:
         80:0b:12:98:be:82:9a:74:df:50:1f:d3:45:80:9a:18:3e:6a:
         4d:c8:83:63:d5:53:41:22:42:ff:ed:2e:91:42:13:89:c9:05:
         99:16:8c:87:ba:59:83:e1:f3:e0:1b:be:e1:88:23:d6:e5:20:
         41:54:1d:08:e1:69:0d:e6:fb:86:7a:ad:75:18:7c:01:40:8f:
         ba:e4:79:0b:75:b9:37:5f:cd:45:1d:2e:e0:26:9c:ee:b1:6f:
         c5:ae:fe:be:b9:76:08:98:01:85:bb:af:aa:88:6a:ee:73:98:
         0c:06:35:0c:c8:ec:c7:03:39:2b:0a:f8:48:19:d3:b8:5a:d5:
         93:3f:20:3c:fa:ab:b9:98:f9:01:72:df:44:05:f8:bd:9e:05:
         5b:c7:6e:1d:e6:00:3b:9c:c9:ee:96:62:91:fe:5c:44:c5:1e:
         a3:b4:46:a0:b4:a7:7c:3f:fb:4b:2d:fa:04:c7:f4:15:1e:c8:
         51:09:77:3a:69:33:bd:40:c9:0b:a4:ba:79:4d:f7:b0:43:0c:
         83:70:7e:4b:82:45:4c:34:d5:5a:c0:93:24:00:dc:ab:ab:fd:
         8c:b9:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----