Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/UsysYH87_MeusDVf_2VMl6ZiNoA.roa
File:                     UsysYH87_MeusDVf_2VMl6ZiNoA.roa (raw, json)
Hash identifier:          l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=
Subject key identifier:   52:CC:AC:60:7F:3B:FC:C7:AE:B0:35:5F:FF:65:4C:97:A6:62:36:80
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       019420D642F4137373D63059FDA814FF4600
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/UsysYH87_MeusDVf_2VMl6ZiNoA.roa
Signing time:             Wed 01 Jan 2025 07:48:20 +0000
ROA not before:           Wed 01 Jan 2025 07:48:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201330
IP address blocks:        185.78.96.0/22 maxlen: 22
                          2a03:58a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:42:f4:13:73:73:d6:30:59:fd:a8:14:ff:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Jan  1 07:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=52ccac607f3bfcc7aeb0355fff654c97a6623680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:99:2b:ce:83:41:00:da:ea:fd:ac:49:9d:
                    61:cc:a5:ba:3f:ba:86:c4:86:01:35:25:9d:53:a6:
                    53:51:21:27:7b:de:37:cc:4a:00:4e:70:e6:5a:31:
                    4e:1b:d8:4e:3f:8e:e5:59:7e:a4:e2:25:98:59:1a:
                    06:ad:21:85:5e:5e:fb:45:f2:90:1b:0f:bc:28:ea:
                    86:2d:71:90:33:52:97:b4:49:34:61:3a:a5:35:8b:
                    38:7b:06:04:cd:e8:35:c9:d6:23:a7:30:d0:b1:58:
                    7e:e9:24:37:38:eb:76:9e:03:74:3e:6a:94:84:1d:
                    7f:1b:68:29:05:d4:ac:7a:be:f6:fa:11:ae:c6:8a:
                    e9:10:c3:52:ce:50:81:ee:df:89:4a:ac:ba:c1:3d:
                    f0:0e:6a:5d:94:96:6c:97:26:be:0a:c7:c9:f1:41:
                    ef:62:0c:e1:50:29:74:40:a5:13:41:f3:6f:1f:4b:
                    bc:4e:35:09:a9:62:0f:fd:cd:b9:f2:01:85:23:50:
                    9b:0b:e4:21:1a:1e:a6:8b:c7:56:fb:52:7f:ec:ba:
                    65:50:94:54:b8:f8:a3:07:3f:11:3c:9c:29:6b:3f:
                    7a:f2:29:16:d3:39:20:e4:c2:ff:d3:d0:fc:38:db:
                    5a:b6:3a:a8:ea:b8:9e:c8:67:cd:58:b4:72:23:52:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:AC:60:7F:3B:FC:C7:AE:B0:35:5F:FF:65:4C:97:A6:62:36:80
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/UsysYH87_MeusDVf_2VMl6ZiNoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.96.0/22
                IPv6:
                  2a03:58a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:fb:c4:53:d0:d1:92:fa:80:2f:70:26:f6:1d:4b:77:67:
         7c:88:95:be:52:74:77:d3:f1:6e:d9:da:ab:e9:6b:84:4a:39:
         75:8b:65:c8:1d:44:bc:04:ab:92:37:10:08:ae:3c:50:f5:01:
         15:5b:8d:cb:d0:83:8a:38:63:60:ec:97:89:56:73:77:ef:18:
         a5:66:25:70:f0:18:90:ab:48:21:02:b4:00:dc:bc:bf:23:fc:
         0c:6c:e3:11:6e:59:64:e2:e9:65:c8:fa:ab:5b:6c:96:46:29:
         64:00:4d:b4:e7:f4:ed:a1:9b:0f:58:34:bd:fc:27:5c:dc:93:
         7d:c1:7e:25:cc:bb:50:72:e9:95:2a:3e:ef:7a:23:2c:a4:c3:
         0a:27:ae:c6:41:a0:b2:e5:5c:03:2b:05:84:74:da:30:38:9c:
         46:25:cf:1a:a8:4c:91:49:37:40:03:4b:ed:19:f0:48:2d:ec:
         17:01:a4:00:58:b0:52:c8:6c:c1:01:bd:b7:de:1e:43:58:0c:
         a3:e3:76:89:06:f4:f7:ad:97:95:f3:3b:e3:00:66:5f:57:bf:
         11:25:cb:a0:83:84:0a:77:43:e1:88:e0:39:22:16:90:02:df:
         89:ed:76:23:7d:e0:f8:b7:d7:65:f3:68:6e:0d:e8:25:3e:4c:
         bf:4b:67:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----