Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/galtvA878B_gyWy0hQyRkeaZi6U.roa
File:                     galtvA878B_gyWy0hQyRkeaZi6U.roa (raw, json)
Hash identifier:          COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=
Subject key identifier:   81:A9:6D:BC:0F:3B:F0:1F:E0:C9:6C:B4:85:0C:91:91:E6:99:8B:A5
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019427B59C98AA91309D5E1F10B17DFE0BD9
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/galtvA878B_gyWy0hQyRkeaZi6U.roa
Signing time:             Thu 02 Jan 2025 15:50:01 +0000
ROA not before:           Thu 02 Jan 2025 15:50:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39392
IP address blocks:        185.80.30.0/24 maxlen: 24
                          2a10:3900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:9c:98:aa:91:30:9d:5e:1f:10:b1:7d:fe:0b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jan  2 15:50:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=81a96dbc0f3bf01fe0c96cb4850c9191e6998ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:4c:e5:60:7e:c2:93:0d:84:b3:59:e6:10:
                    21:f5:e5:33:72:a2:c8:ab:36:74:6b:60:00:7b:b0:
                    a1:89:dd:d5:d6:76:2e:39:fe:04:f6:8e:01:0d:15:
                    ec:53:c2:c3:c8:5f:0b:74:21:7e:fe:98:a8:fb:d9:
                    ec:ed:2b:fe:99:6a:ea:b7:a2:da:9e:51:20:1f:2b:
                    eb:79:89:83:a8:31:1e:a8:3f:a6:16:8b:c4:71:a6:
                    20:48:4e:4c:d5:4a:47:d9:64:a9:5d:9b:93:c8:00:
                    f2:64:f0:af:63:6e:8b:39:0a:77:a6:b5:d0:6a:90:
                    c8:0e:6b:a5:94:87:b5:ef:a1:d3:c5:b0:20:67:b3:
                    f4:7d:6e:72:02:1d:1f:28:15:62:31:3b:77:b1:32:
                    6d:cb:47:73:0e:1b:0f:33:c3:4d:35:07:bd:fc:b5:
                    a8:3d:5c:45:b3:dc:c0:8c:a0:48:e8:2e:5f:c3:f4:
                    22:2d:95:09:cd:95:95:a8:a0:e3:62:5a:f3:00:3a:
                    d6:93:08:f9:6b:bd:0a:94:42:f4:fc:d0:74:25:23:
                    8a:fb:7d:9b:7a:a6:e6:a3:e3:17:4c:10:1e:7b:bd:
                    16:2b:da:ee:79:e8:24:8d:21:a2:83:31:ae:6a:89:
                    a0:87:9b:b2:00:33:45:d6:33:da:a8:bf:24:40:50:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:6D:BC:0F:3B:F0:1F:E0:C9:6C:B4:85:0C:91:91:E6:99:8B:A5
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/galtvA878B_gyWy0hQyRkeaZi6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.30.0/24
                IPv6:
                  2a10:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:ad:f0:0e:5b:dd:76:7d:f6:22:95:b9:4d:c2:d9:61:73:
         d5:fb:24:60:80:24:5b:3a:4b:03:e0:53:9c:a3:e8:59:aa:5f:
         64:09:96:0e:74:8a:29:4a:55:c2:60:8a:e5:c3:5a:f7:8a:ab:
         fc:29:07:22:26:bf:bc:f9:8a:f7:58:54:d5:98:c6:be:07:98:
         a1:57:6c:01:5b:aa:f9:78:85:59:14:6f:8f:40:02:f4:4b:8c:
         00:d8:dc:f1:52:f5:3a:d0:22:b3:b4:01:95:93:4e:c5:f3:aa:
         80:67:95:71:3a:dc:7f:ef:9a:03:fb:89:aa:74:bc:77:ad:9c:
         c5:70:73:c0:82:67:0b:28:ea:9c:8c:4f:29:8a:48:1c:ec:4e:
         34:8a:1f:62:d8:30:9b:57:79:97:d4:d8:d3:22:b8:54:be:c7:
         63:82:f0:91:86:e3:79:28:72:05:98:78:c9:31:4f:12:3b:03:
         12:23:c2:24:b6:40:30:19:35:44:d7:56:4c:3a:93:92:5d:5f:
         bc:5c:ff:68:62:96:db:89:83:70:38:fa:36:c4:b0:01:4f:37:
         c4:2d:33:1f:7d:73:62:8b:40:2e:fb:2b:19:50:0e:44:4e:6f:
         94:8a:ba:e9:5e:f1:e8:1b:3b:51:0b:e2:66:3c:da:fe:d4:b6:
         b0:78:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----