Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/EvZMqc9wgeiidNLil4fr9EAtbQQ.roa
File:                     EvZMqc9wgeiidNLil4fr9EAtbQQ.roa (raw, json)
Hash identifier:          Qbwmqw+QIO5kMoVH4m4ndTtsRxaR9V+p3YZuSaUv7D0=
Subject key identifier:   12:F6:4C:A9:CF:70:81:E8:A2:74:D2:E2:97:87:EB:F4:40:2D:6D:04
Certificate issuer:       /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial:       019371EBA96530DF52A269EB589C27911CDA
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/EvZMqc9wgeiidNLil4fr9EAtbQQ.roa
Signing time:             Thu 28 Nov 2024 08:38:09 +0000
ROA not before:           Thu 28 Nov 2024 08:38:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        188.213.84.0/23 maxlen: 24
                          2a11:e687::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:71:eb:a9:65:30:df:52:a2:69:eb:58:9c:27:91:1c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
        Validity
            Not Before: Nov 28 08:38:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12f64ca9cf7081e8a274d2e29787ebf4402d6d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:43:7f:02:4b:87:d4:21:2e:c1:32:f6:f4:
                    c8:c9:fa:ca:5a:1c:eb:81:a7:45:43:18:45:d7:15:
                    9e:de:b7:57:68:8f:05:3a:5c:38:5e:86:d0:8b:f4:
                    22:96:db:8a:30:43:13:57:86:95:71:68:72:23:8d:
                    3c:dd:48:c3:bc:81:06:33:1b:1c:ae:6e:54:4f:41:
                    c1:23:e1:7f:81:7e:57:80:87:9a:22:e4:e7:f7:89:
                    e8:14:ba:0f:69:b6:51:31:09:c4:4f:7f:50:d9:97:
                    5a:57:26:fe:02:0c:34:f8:04:68:5f:b3:0a:f8:1b:
                    23:f2:b0:2d:ec:dc:12:74:59:18:5b:4d:5a:3e:e3:
                    b2:ab:7a:ab:1a:4e:76:24:d8:6b:57:08:d0:f9:97:
                    b3:9c:47:d7:cd:dc:dd:4e:24:da:38:40:fd:1b:30:
                    93:a5:d4:dc:24:f4:94:fc:b5:f4:a0:4e:3e:7f:e3:
                    7d:9e:ed:5d:d5:21:16:59:20:8c:db:1e:4d:ab:3a:
                    15:1f:44:fa:ca:74:90:cc:b9:b9:90:a7:e5:e0:78:
                    99:d0:03:cf:b0:2a:5e:f8:0e:dc:bb:c6:cc:ff:f7:
                    9e:39:33:90:31:e8:0d:7b:bf:62:07:3b:4b:3e:39:
                    41:75:e7:a6:73:33:a8:a8:d8:1c:0c:4e:4a:eb:16:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:4C:A9:CF:70:81:E8:A2:74:D2:E2:97:87:EB:F4:40:2D:6D:04
            X509v3 Authority Key Identifier:
                keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/EvZMqc9wgeiidNLil4fr9EAtbQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.84.0/23
                IPv6:
                  2a11:e687::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:41:a2:94:8c:fd:8a:84:84:ad:b3:cd:cf:74:c3:f2:ba:
         6f:ff:1f:ca:45:ab:eb:42:04:ee:97:ee:f2:7c:09:e8:ef:8d:
         9e:d9:53:74:79:6b:2d:56:71:0e:ff:62:6c:87:6d:8a:de:e4:
         96:be:37:69:43:d3:08:dd:23:4d:e2:e9:b0:16:e5:f6:02:b6:
         d9:1d:f5:2e:db:14:2e:5d:09:28:70:fa:53:46:7d:e7:f7:ff:
         8f:22:b6:b3:74:07:80:ec:7a:05:79:b2:af:5d:ae:33:00:60:
         26:59:b0:3b:e7:05:ef:d4:f6:35:94:ff:44:c1:39:15:b1:54:
         29:69:cd:cf:e6:70:49:88:cf:39:0b:79:1f:5a:da:43:d9:3e:
         4b:13:18:08:f0:7a:06:80:9b:7e:ce:01:c1:69:c0:1e:81:4c:
         91:57:44:79:fb:22:14:96:f9:d5:23:7a:b5:b5:dc:93:5d:b5:
         c0:19:55:b3:2f:0b:55:27:e5:5d:8f:43:82:da:8b:2c:1a:c9:
         5a:2b:b4:35:15:c1:bd:e0:a0:54:de:3f:fd:c1:ae:ea:f3:f9:
         9d:e7:62:f5:ae:a1:11:20:d9:46:18:44:22:4b:17:81:82:8e:
         6d:d5:be:9f:cc:1e:90:c7:3a:f1:57:a9:eb:e2:53:48:79:9e:
         ad:e8:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----