Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/pzcGKLsYJDgAvVmaLC043N77QRg.roa
File:                     pzcGKLsYJDgAvVmaLC043N77QRg.roa (raw, json)
Hash identifier:          YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=
Subject key identifier:   A7:37:06:28:BB:18:24:38:00:BD:59:9A:2C:2D:38:DC:DE:FB:41:18
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       019427B63B8F5E5436D5F5D4213767F8FD94
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/pzcGKLsYJDgAvVmaLC043N77QRg.roa
Signing time:             Thu 02 Jan 2025 15:50:41 +0000
ROA not before:           Thu 02 Jan 2025 15:50:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207564
IP address blocks:        185.115.247.0/24 maxlen: 24
                          2001:4da8:c010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:3b:8f:5e:54:36:d5:f5:d4:21:37:67:f8:fd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Jan  2 15:50:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7370628bb18243800bd599a2c2d38dcdefb4118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:19:4f:d2:a8:5c:e9:8b:c3:cf:5c:38:a2:
                    f6:45:55:f4:d2:a2:39:72:72:a3:b3:24:94:a4:1a:
                    78:a8:f0:1a:ba:3b:8a:eb:a8:7b:c6:b5:ad:76:dc:
                    7b:09:b1:07:a5:e7:80:e2:bf:dc:83:84:b7:f5:30:
                    ba:77:42:14:f5:be:60:a0:da:0b:61:90:6c:81:e4:
                    82:75:36:c8:e4:22:36:03:b7:4c:d9:c5:bd:44:86:
                    f3:d2:62:2a:11:26:c3:73:c8:c3:97:cf:f5:ee:ff:
                    51:fa:8c:9f:19:96:9e:01:c8:ec:c9:a0:e5:d8:28:
                    8c:75:55:e2:2b:b1:40:99:9f:21:4f:58:fc:d7:3e:
                    88:fa:74:15:e6:51:b5:dc:c0:fb:50:23:a6:ce:26:
                    ef:da:4f:ee:91:e1:33:5c:cb:63:90:4f:7e:e9:b9:
                    65:a6:00:3c:84:3d:75:37:86:8d:c9:c0:fc:37:78:
                    24:57:a0:17:c4:bd:6d:01:fa:9a:af:4d:c3:04:2d:
                    c1:8d:b1:59:32:9e:01:7f:73:80:61:b6:94:07:81:
                    9e:64:98:eb:17:f8:08:c1:84:22:fa:41:e4:6e:ba:
                    5d:a0:1b:5c:b3:93:51:e3:6e:78:cc:62:b5:be:4c:
                    9b:d3:60:4a:94:61:d9:a5:e9:be:4c:1b:97:c0:77:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:37:06:28:BB:18:24:38:00:BD:59:9A:2C:2D:38:DC:DE:FB:41:18
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/pzcGKLsYJDgAvVmaLC043N77QRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.247.0/24
                IPv6:
                  2001:4da8:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:49:f1:2d:e0:7d:a1:86:d3:b0:98:e6:3d:50:0e:31:c4:ac:
         34:65:f7:ee:10:cd:8e:4e:69:37:a6:28:ae:c8:05:82:e5:48:
         e7:05:a6:06:fd:f3:3b:1b:61:2c:7a:b0:6a:79:2b:d3:22:09:
         5f:4f:2c:75:29:d7:44:18:e3:64:6a:f4:70:19:1d:10:a6:2c:
         db:63:2a:d1:a0:09:aa:d2:4e:0d:f1:9f:ae:69:38:b1:26:75:
         5c:50:d9:f5:95:6a:11:a3:84:79:d2:9f:15:30:9b:63:83:b1:
         b0:fd:8b:9d:bf:19:fa:9b:bf:79:df:4a:bb:49:81:79:e4:73:
         d9:97:b4:b1:3f:e3:43:db:c4:61:3e:07:9e:1e:90:71:01:d6:
         fa:d6:14:23:ff:19:4c:17:dc:01:f5:bc:ea:e0:45:bb:46:07:
         35:bb:c2:c1:71:9a:10:d9:ec:a7:23:70:e1:97:95:aa:e0:e2:
         90:79:4c:51:1c:03:94:85:5d:05:7b:d1:de:0a:a6:53:cb:0c:
         d1:89:e8:08:db:b8:04:9f:22:ae:1a:6c:de:33:19:8b:ef:cd:
         4c:9c:23:a7:d9:40:9f:fe:c0:28:15:8a:e0:4d:8f:4e:6b:50:
         60:8f:e3:29:48:ba:2a:a0:df:b6:d5:6b:86:ed:0e:92:b5:5c:
         a8:a0:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----