Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa
File:                     vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (raw, json)
Hash identifier:          uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=
Subject key identifier:   BC:F5:B4:BC:EB:EA:B6:13:A5:1D:4E:BF:BF:7B:08:73:90:D0:D2:3D
Certificate issuer:       /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial:       019427473F2761D9D39775E8E5C15F270847
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa
Signing time:             Thu 02 Jan 2025 13:49:28 +0000
ROA not before:           Thu 02 Jan 2025 13:49:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61025
IP address blocks:        185.17.236.0/23 maxlen: 24
                          2a03:dd40::/32 maxlen: 32
                          2a03:dd42::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:3f:27:61:d9:d3:97:75:e8:e5:c1:5f:27:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
        Validity
            Not Before: Jan  2 13:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcf5b4bcebeab613a51d4ebfbf7b087390d0d23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:44:1b:e9:a5:e6:e4:2b:ab:d3:05:99:44:
                    49:af:3e:78:92:00:5d:38:6b:6e:7b:58:94:ba:fa:
                    df:f0:bd:c7:08:aa:49:d1:34:92:01:1d:ba:35:d3:
                    70:8a:7a:48:52:c4:79:69:36:54:20:47:d6:3f:32:
                    a1:09:62:49:51:4c:39:a0:2f:e4:b3:b9:7a:1d:76:
                    b7:38:b3:f4:48:69:04:09:73:31:0f:36:03:09:7a:
                    d0:68:bd:35:e3:52:ee:0f:1a:19:5e:d2:f7:92:3c:
                    29:6d:25:c9:0a:9e:81:ef:41:75:85:8f:1b:f4:18:
                    a5:2f:34:92:10:d8:27:33:82:4a:45:12:d2:35:aa:
                    e2:85:8e:5a:8a:cb:63:4d:40:67:3b:33:1f:81:b7:
                    2a:62:d6:96:e4:e6:34:83:ce:44:f9:4d:5b:1a:99:
                    ea:a7:11:44:ea:64:fe:bd:95:08:a2:b9:eb:dd:b9:
                    03:8d:8e:1b:34:71:67:e0:7c:32:0e:67:e1:c3:fa:
                    c6:31:11:a0:28:01:f4:eb:53:df:82:52:ac:ef:c1:
                    4d:e4:22:46:10:23:32:8d:50:43:9d:db:8d:7c:b8:
                    f5:dd:63:e0:86:08:52:ee:cc:0e:d1:53:1f:62:6b:
                    c6:eb:a6:e0:6e:53:9e:a1:6b:fe:dd:a3:31:d9:d8:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:B4:BC:EB:EA:B6:13:A5:1D:4E:BF:BF:7B:08:73:90:D0:D2:3D
            X509v3 Authority Key Identifier:
                keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.17.236.0/23
                IPv6:
                  2a03:dd40::/32
                  2a03:dd42::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:b4:2c:35:f6:3b:50:54:66:92:89:bd:4c:bc:92:85:35:7b:
         9b:c3:6e:a1:8a:3b:d5:7d:18:41:52:9c:9f:40:f1:82:73:62:
         94:ef:a1:b0:f3:fe:75:88:fe:c6:e2:e3:f4:c3:0d:3c:52:44:
         b7:f6:b1:d7:f9:04:97:5f:fb:b7:a5:18:e2:b1:95:0b:d5:38:
         48:03:06:16:c2:77:3e:c7:d6:53:14:40:e9:2b:ac:9b:f3:3f:
         24:32:a5:fc:63:4b:06:67:42:43:25:47:cb:03:47:d1:8e:c1:
         7b:1f:f5:29:94:1d:f3:e4:af:3e:d4:77:5f:d8:d2:0a:14:e0:
         24:b5:29:71:c3:5a:1a:3d:25:7b:75:3a:7a:12:ef:81:a0:db:
         7b:51:1b:7b:d3:6a:f9:0c:f3:42:48:42:17:44:2c:3c:16:65:
         23:26:cd:aa:e0:a2:65:b8:c2:5a:9b:78:49:c5:e4:4b:09:7d:
         50:7a:77:59:15:7c:73:82:6f:1d:8a:80:f4:90:1e:77:69:c3:
         9d:d1:ce:c4:54:82:35:c3:e8:5a:fe:a3:d4:4f:fa:a4:0c:eb:
         4c:ff:ca:c2:9a:64:4c:0b:5b:6b:f5:d9:3b:71:d1:4d:48:29:
         b5:45:0b:98:a4:3a:21:77:9e:56:4f:03:df:b3:ad:9a:cd:e2:
         ff:d7:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----