Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/tKEsqsadjWPvO1jPaZy5I3A_ye4.roa
File:                     tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (raw, json)
Hash identifier:          kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=
Subject key identifier:   B4:A1:2C:AA:C6:9D:8D:63:EF:3B:58:CF:69:9C:B9:23:70:3F:C9:EE
Certificate issuer:       /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial:       0194228DF9A863E478A8FBFE8BAF00152812
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/tKEsqsadjWPvO1jPaZy5I3A_ye4.roa
Signing time:             Wed 01 Jan 2025 15:48:37 +0000
ROA not before:           Wed 01 Jan 2025 15:48:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31477
IP address blocks:        193.164.144.0/24 maxlen: 24
                          2001:678:750::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:f9:a8:63:e4:78:a8:fb:fe:8b:af:00:15:28:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
        Validity
            Not Before: Jan  1 15:48:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4a12caac69d8d63ef3b58cf699cb923703fc9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:29:d2:f5:27:63:29:aa:05:35:49:29:b0:
                    88:94:cb:fa:77:21:25:32:c3:23:be:f5:01:bb:6b:
                    54:84:7d:2d:58:8d:7e:84:d1:ac:73:c6:5c:61:12:
                    c2:e1:95:9b:f1:49:2d:c3:41:6d:e2:52:ea:46:ca:
                    4e:5c:fe:db:8c:f5:54:c1:f7:f1:31:e2:96:81:a4:
                    1f:87:e0:e8:0e:28:1d:41:a7:27:5b:d7:20:0f:d9:
                    0e:c2:6b:23:60:2e:a2:40:a1:71:9b:08:30:eb:ac:
                    37:00:cc:ee:24:51:38:9f:76:6e:8b:e4:b6:eb:3d:
                    b5:99:83:23:75:2d:5c:38:4e:02:3e:95:9c:03:f9:
                    ed:b3:09:11:06:bc:a5:85:6f:5d:ab:eb:f4:a7:1d:
                    5e:22:4f:37:17:55:ba:86:a4:9f:49:78:6f:59:01:
                    33:6e:7a:d5:ab:c3:0f:bb:f1:b3:da:73:a8:ff:69:
                    6c:4d:9d:18:30:c1:c2:be:67:a1:a2:d6:55:de:73:
                    b7:4e:70:66:8a:03:c3:5c:cb:78:c0:d5:a7:fb:7a:
                    7c:00:4e:52:4e:be:3e:68:7b:01:02:cf:0c:70:a3:
                    c0:00:14:36:fc:b8:6d:2e:81:c9:85:f5:1a:ea:28:
                    39:a2:df:99:a4:d3:36:d3:0d:71:5c:f5:d0:26:73:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:2C:AA:C6:9D:8D:63:EF:3B:58:CF:69:9C:B9:23:70:3F:C9:EE
            X509v3 Authority Key Identifier:
                keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/tKEsqsadjWPvO1jPaZy5I3A_ye4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.144.0/24
                IPv6:
                  2001:678:750::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:cd:f3:a5:0e:87:2d:cd:80:72:c2:ea:24:65:74:9d:34:
         f7:bc:17:e6:22:39:37:41:d8:36:e0:b1:4a:b0:57:3a:6e:a2:
         91:f5:99:9a:a2:b8:02:ea:5f:bc:6d:65:87:ac:b0:44:3e:98:
         00:c7:6b:ea:d1:4b:14:3f:31:76:fc:88:8f:4e:df:17:23:e9:
         d1:dd:1e:53:39:7d:32:cc:d2:a7:d0:ab:3f:7a:09:2d:81:7b:
         51:c3:69:ed:de:67:1c:5e:da:91:3a:ed:f0:c4:aa:47:90:01:
         de:52:a9:3a:51:4b:92:48:60:92:06:f8:fb:18:d1:cd:80:ef:
         d9:70:9b:7a:2c:7a:4e:f0:2d:41:ff:2e:95:d4:fe:10:03:f5:
         57:58:da:a7:9f:b8:dc:31:06:81:0e:81:fd:a2:c6:92:e6:e4:
         d3:43:56:84:1e:33:50:14:34:34:a0:b5:71:52:95:4b:19:ed:
         85:b6:83:e2:31:b3:c8:2b:84:34:a2:18:d2:da:00:84:b6:85:
         7e:df:42:96:1c:05:4c:58:72:ee:d6:ee:bd:5a:af:e9:0e:f8:
         57:eb:5e:f5:ae:ff:bd:74:ec:c7:b4:87:98:ae:70:8e:07:34:
         e6:72:95:a8:6f:4f:60:90:4d:ca:eb:52:52:04:a7:1a:a3:54:
         60:1b:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----