Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa
File:                     xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (raw, json)
Hash identifier:          UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=
Subject key identifier:   C4:F4:83:B8:0E:10:F1:A1:96:C0:FE:8A:DC:DF:E7:C8:AE:F8:80:3A
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       01941F8C8E7A3AD853EDC8E255205C843CD6
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa
Signing time:             Wed 01 Jan 2025 01:48:12 +0000
ROA not before:           Wed 01 Jan 2025 01:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202079
IP address blocks:        37.203.242.0/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:8e:7a:3a:d8:53:ed:c8:e2:55:20:5c:84:3c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Jan  1 01:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c4f483b80e10f1a196c0fe8adcdfe7c8aef8803a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:f0:1e:6e:7b:f9:ee:93:e5:50:4b:24:f7:
                    2e:20:0e:f6:7a:2a:7d:a1:46:fc:38:3a:81:b6:00:
                    9c:49:7b:e2:ab:a0:9c:ec:14:d7:43:bc:66:c2:44:
                    7f:59:13:39:12:9a:62:d7:97:c3:22:1f:33:cb:49:
                    0b:c1:b5:67:84:68:ed:d3:8e:38:db:84:b8:c4:0e:
                    78:a4:88:ce:27:34:d8:bc:11:c9:5b:49:3f:30:a3:
                    07:0d:29:75:92:63:59:8a:43:31:90:2c:f2:90:97:
                    07:25:ca:5f:9e:0f:d2:8b:d8:b8:5d:71:35:6b:a8:
                    4c:0e:83:52:80:cd:ee:1c:39:ee:f1:26:1d:c9:b2:
                    c4:c0:20:d3:3f:18:3b:69:5f:9e:69:3d:17:93:e3:
                    37:4b:a0:5d:fc:bc:de:33:03:18:d4:b1:09:81:43:
                    32:80:be:81:ae:30:3f:ca:99:50:9a:42:73:c2:c2:
                    d8:46:99:b5:a9:77:b2:ec:32:a8:01:13:ee:f5:eb:
                    83:49:7e:ce:91:5c:e3:84:73:a8:eb:c0:23:53:b0:
                    e1:bf:13:70:c2:e6:b8:2f:af:dc:ac:03:74:2a:e4:
                    e5:14:32:e0:77:7e:99:ab:3d:08:98:58:76:a0:8a:
                    c3:e3:13:e4:ad:b0:4a:7a:cc:9c:1a:55:d9:60:2b:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:83:B8:0E:10:F1:A1:96:C0:FE:8A:DC:DF:E7:C8:AE:F8:80:3A
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.242.0/27

    Signature Algorithm: sha256WithRSAEncryption
         84:8c:ac:53:7e:44:c7:30:72:64:ff:68:26:dd:98:2c:43:ee:
         bf:bd:b4:56:81:c1:7f:e3:48:8a:19:65:3b:77:f7:5c:41:6f:
         c8:40:ce:a0:e9:a2:be:aa:a6:33:fb:79:d1:d2:97:98:66:84:
         7c:c7:32:b4:10:fd:5c:db:98:69:ab:67:37:37:f3:0b:ac:bf:
         af:23:21:a5:49:a9:c8:7c:f1:d7:89:76:fd:62:a3:0e:e5:a8:
         2b:c3:94:c9:7b:13:c8:cd:0a:0e:30:3f:af:29:e9:64:48:9e:
         75:59:76:f5:41:28:ee:fa:4a:36:70:36:f9:28:83:31:ca:9b:
         79:d6:7a:11:c8:81:38:fb:d7:0a:da:5c:08:68:dd:7c:98:15:
         2c:41:71:fc:3e:68:9e:c0:69:ee:b1:2d:8c:42:0d:88:6f:ee:
         4d:b8:ce:b1:0f:a4:08:0c:8a:1a:00:39:1e:25:62:f9:1e:3b:
         23:fa:74:36:54:78:9d:2d:19:58:46:14:2d:b4:cf:09:32:d1:
         b2:33:c0:6a:32:52:f9:a0:02:c7:69:35:ae:9b:4e:0a:11:2b:
         d4:80:ba:9b:70:75:e8:d5:be:92:46:c1:0e:72:ee:33:66:c2:
         3e:79:e5:57:dd:3c:fe:e7:a1:5f:6d:82:1b:98:6b:82:96:38:
         aa:92:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----