Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/3vDPYhTVSNkpwDXIOAhKw07fJVo.roa
File:                     3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (raw, json)
Hash identifier:          LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=
Subject key identifier:   DE:F0:CF:62:14:D5:48:D9:29:C0:35:C8:38:08:4A:C3:4E:DF:25:5A
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019425FDAB0BBA4C96190D0FCEB7F536C55A
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/3vDPYhTVSNkpwDXIOAhKw07fJVo.roa
Signing time:             Thu 02 Jan 2025 07:49:28 +0000
ROA not before:           Thu 02 Jan 2025 07:49:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197563
IP address blocks:        178.18.231.0/24 maxlen: 24
                          2001:b28:4::/48 maxlen: 48
                          2a03:5f80:8::/48 maxlen: 48
                          2a03:5f80:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ab:0b:ba:4c:96:19:0d:0f:ce:b7:f5:36:c5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jan  2 07:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=def0cf6214d548d929c035c838084ac34edf255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:43:a5:96:0a:84:d7:55:e0:75:41:c8:19:
                    4b:14:0e:eb:de:ca:bd:38:7d:e6:58:c8:39:cc:b1:
                    e7:9f:34:7e:e7:6f:ba:59:ec:03:c7:1d:28:92:12:
                    ab:d1:e2:30:52:40:54:ca:eb:04:f2:95:8b:30:48:
                    e6:85:96:11:9b:10:80:67:82:c2:cb:aa:de:4e:44:
                    c1:35:a9:52:cb:4d:a3:9c:90:68:84:1f:d6:97:03:
                    0f:8c:ee:21:ec:ff:e0:3b:3c:c4:c6:a9:88:94:50:
                    1d:13:d0:25:ba:7d:2e:3f:ea:ba:35:45:37:dc:f2:
                    6e:dd:58:89:6e:46:0d:cb:86:61:c4:0d:59:07:a4:
                    49:3a:83:19:5a:d1:87:e2:fc:0b:46:70:f4:7e:86:
                    bf:ce:ae:1f:4b:90:c8:3a:6e:bb:da:93:5c:f1:f2:
                    b7:e6:cb:82:bf:1c:26:a6:0e:d2:02:af:9d:16:9e:
                    8a:86:02:91:4f:2d:57:a4:db:88:18:27:21:ae:06:
                    17:da:4e:32:69:c3:92:f2:09:2d:5f:b9:46:45:43:
                    f6:18:be:e1:b6:37:65:21:6f:f6:30:4d:85:de:dd:
                    3f:6f:92:78:59:3c:91:ff:9c:a6:ca:90:84:c2:ac:
                    91:c1:33:df:08:4e:7e:ff:45:a8:92:0b:c7:1e:ab:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F0:CF:62:14:D5:48:D9:29:C0:35:C8:38:08:4A:C3:4E:DF:25:5A
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/3vDPYhTVSNkpwDXIOAhKw07fJVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.18.231.0/24
                IPv6:
                  2001:b28:4::/48
                  2a03:5f80:8::/48
                  2a03:5f80:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:04:db:06:91:b1:87:d3:bc:31:0c:8c:95:2a:d2:4d:02:5d:
         ae:00:3f:1d:f6:d3:74:be:f4:d2:a9:f4:98:d8:8c:f4:f3:3f:
         55:82:9e:e4:c4:90:62:26:45:6e:d6:05:a6:b5:10:0a:3d:1c:
         35:ef:ec:f2:cd:48:35:5d:5a:c9:7d:9d:d0:a9:92:6a:57:b5:
         d6:03:40:97:d3:4a:0a:5f:6a:57:3c:a6:95:50:81:50:6d:f1:
         89:3d:48:29:12:f5:05:14:4d:34:64:0c:b9:a5:6f:4a:6f:6f:
         5d:9c:f7:da:f8:db:d3:2e:d1:03:72:05:a9:ad:e5:ba:2c:28:
         19:d2:c6:74:67:34:ae:aa:9c:4f:b6:3c:fb:47:6c:5e:a7:60:
         ef:82:30:39:12:3e:fd:53:2e:8e:ce:d6:ed:fa:42:2d:7f:f3:
         19:92:a3:9c:45:4f:83:df:70:c5:df:7c:9f:67:8d:91:72:f5:
         f9:ae:b1:f1:ce:66:a1:36:b8:73:9f:e9:a2:d3:ba:0e:6b:68:
         f5:50:50:e5:67:7c:db:e1:cd:78:ce:72:8e:d4:a7:1c:24:16:
         8b:eb:12:82:01:55:57:d1:09:c5:53:a7:63:9f:17:8e:30:f4:
         5c:6c:ea:73:d9:84:c4:36:fa:4c:22:fd:f7:a1:d9:ca:81:62:
         a2:f4:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----