Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gInPQlRVmCNSzrvan8h7y-hKl_k.roa
File:                     gInPQlRVmCNSzrvan8h7y-hKl_k.roa (raw, json)
Hash identifier:          Tv5elGYRXotHxTYq83W2fSTiORkhfEiLF5Tn9EDX64s=
Subject key identifier:   80:89:CF:42:54:55:98:23:52:CE:BB:DA:9F:C8:7B:CB:E8:4A:97:F9
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       0196251F23559CEF603DAD25BA938DC873D6
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gInPQlRVmCNSzrvan8h7y-hKl_k.roa
Signing time:             Fri 11 Apr 2025 13:51:59 +0000
ROA not before:           Fri 11 Apr 2025 13:51:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        188.209.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:25:1f:23:55:9c:ef:60:3d:ad:25:ba:93:8d:c8:73:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Apr 11 13:51:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8089cf425455982352cebbda9fc87bcbe84a97f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:6b:72:d0:6c:04:ba:6e:b6:ac:8d:33:fd:
                    6c:76:37:01:43:16:3d:d2:bf:b7:d0:cc:92:08:36:
                    03:8a:9a:b8:14:23:25:51:4d:42:52:8a:05:91:b0:
                    75:b1:c6:56:db:7d:8b:d9:8e:b4:0f:d3:48:db:9f:
                    8e:4d:e3:00:0a:ec:3a:6d:ef:96:68:aa:28:b9:45:
                    8a:7f:a9:16:b9:4f:85:38:0e:ab:3f:b2:01:2c:aa:
                    8c:c3:43:51:23:7d:4a:ae:92:de:9d:89:4a:d9:f6:
                    6f:b8:50:e8:09:75:e9:2b:d1:5c:8a:5c:91:45:15:
                    0f:8f:38:29:c6:c7:e6:76:fa:ca:f2:23:2e:c6:a6:
                    29:a3:e7:49:62:fc:56:e5:52:07:f9:9e:5c:3d:1f:
                    68:e6:01:0e:8e:40:7a:ae:41:d5:fa:79:25:e1:ad:
                    ee:2b:fc:c4:14:a9:bb:4c:8a:d7:64:80:0a:c8:b9:
                    a4:8b:ff:d6:49:b0:88:88:3c:73:6e:50:e9:34:32:
                    18:7a:07:12:20:c3:dd:e5:e6:6e:4b:7a:ef:35:78:
                    2f:3a:e1:99:57:e6:28:36:6e:68:58:cb:1d:74:be:
                    00:7d:97:45:db:bd:92:57:98:fd:e4:bb:77:4f:2e:
                    75:2c:7f:61:f6:04:c2:5d:b2:84:92:ef:1e:bd:bf:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:89:CF:42:54:55:98:23:52:CE:BB:DA:9F:C8:7B:CB:E8:4A:97:F9
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gInPQlRVmCNSzrvan8h7y-hKl_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:1a:d6:1d:b9:d1:66:75:36:0f:81:44:fb:25:70:42:a6:
         e0:88:14:f7:a5:d5:f6:35:d9:a1:fa:bc:c2:a9:9b:37:71:bc:
         de:d0:be:e9:9e:50:5f:93:fb:d1:b7:04:f9:c5:ac:e7:f6:38:
         91:21:7a:71:8c:1f:fa:20:cb:e0:bf:27:5e:45:a7:6a:92:d5:
         e4:df:7b:56:38:ce:c5:22:94:32:4f:a2:f3:29:d1:56:df:de:
         63:63:4e:58:ef:1b:34:7a:e0:42:c3:dd:fa:d8:bf:22:59:4a:
         c6:99:37:4b:14:df:af:e7:47:14:c1:de:42:c6:89:78:2d:7f:
         c4:80:97:a4:c0:2b:fe:8a:a4:40:2d:8c:ec:a7:51:84:fe:2e:
         a2:a0:e7:31:4d:f8:59:99:53:6e:91:b7:48:0b:bf:c8:a7:dd:
         c9:ce:95:21:53:df:58:ee:aa:a9:7a:8e:84:95:70:c2:63:98:
         d1:f7:c8:27:83:c7:1e:d1:75:b6:01:34:7d:1f:92:d9:bf:a5:
         9f:a0:09:de:db:4f:12:df:39:57:5a:37:de:55:80:9f:54:0b:
         f8:31:cc:31:7c:8e:e4:7e:97:2c:bd:c4:4c:6f:84:94:e7:6b:
         c2:3a:44:b5:2c:d4:7f:ab:d3:b1:71:a3:d6:ce:4e:80:9f:3e:
         5c:08:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----