Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/torroLihTDOA3iF3dz35198q-Ig.roa
File:                     torroLihTDOA3iF3dz35198q-Ig.roa (raw, json)
Hash identifier:          vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=
Subject key identifier:   B6:8A:EB:A0:B8:A1:4C:33:80:DE:21:77:77:3D:F9:D7:DF:2A:F8:88
Certificate issuer:       /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial:       019427B522FE8BB60E7E2E7DE087D88D1F41
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/torroLihTDOA3iF3dz35198q-Ig.roa
Signing time:             Thu 02 Jan 2025 15:49:29 +0000
ROA not before:           Thu 02 Jan 2025 15:49:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203574
IP address blocks:        193.34.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:22:fe:8b:b6:0e:7e:2e:7d:e0:87:d8:8d:1f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
        Validity
            Not Before: Jan  2 15:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b68aeba0b8a14c3380de2177773df9d7df2af888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:59:62:d2:be:97:ed:76:bd:6e:e8:47:72:
                    d1:75:1b:ee:eb:51:14:c2:93:7e:cc:8c:ed:60:8c:
                    84:09:8f:8b:c2:6b:74:47:cc:55:28:65:09:a0:db:
                    9a:c3:8e:6a:be:b1:93:8c:24:4f:57:17:9a:69:3d:
                    78:6d:e0:c0:2a:e1:bc:a1:29:47:8b:6a:63:40:f4:
                    6b:ec:64:d9:e3:f0:68:cb:e6:5f:13:95:15:ac:73:
                    5b:46:47:50:77:65:9e:3f:49:1a:6e:e9:40:bc:43:
                    8a:7e:77:13:35:46:59:08:b3:6e:ee:05:30:f7:9f:
                    7e:21:72:21:02:77:13:90:09:2e:7f:9a:af:b5:05:
                    8b:9e:02:bf:46:3a:b3:5d:46:11:e7:34:fa:93:df:
                    3a:75:4c:9b:27:7b:77:fb:85:9b:5b:d3:37:f9:e8:
                    18:22:ae:88:87:30:06:66:ca:18:6f:b6:ad:cf:58:
                    21:8d:31:9b:66:29:c1:cc:0d:fd:82:e4:85:65:93:
                    ef:c6:6f:66:e5:19:a5:fa:31:ce:94:3d:c8:4b:de:
                    59:4e:3d:e3:36:fe:ed:2c:0c:ac:30:c3:f1:6a:13:
                    41:b0:3d:76:8a:c1:ca:f8:f8:03:a7:22:03:af:6d:
                    93:44:af:88:44:e4:e5:f8:a7:86:a3:80:27:e1:04:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:EB:A0:B8:A1:4C:33:80:DE:21:77:77:3D:F9:D7:DF:2A:F8:88
            X509v3 Authority Key Identifier:
                keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/torroLihTDOA3iF3dz35198q-Ig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:77:0f:d0:63:ef:bb:98:d3:1e:f1:39:95:17:44:b3:b7:c1:
         d3:f0:d4:b5:1b:57:1e:81:fb:b1:71:68:ff:dd:73:6b:5c:2c:
         e3:2f:46:67:c5:35:60:c2:1d:ee:43:34:c3:22:f2:29:8c:40:
         ee:33:a0:8a:2c:3c:2e:c3:ee:cf:ea:b0:e5:fe:47:48:50:79:
         7c:37:a2:90:30:81:c6:e8:48:33:6f:27:56:22:e7:bb:be:89:
         03:24:c4:45:a9:52:3b:dd:62:4a:98:04:8a:23:8f:2a:c5:53:
         0a:32:b0:17:45:70:87:4d:16:ee:51:66:21:cb:27:7e:95:5e:
         f3:19:4d:c3:8b:63:a7:59:ce:65:2d:93:92:60:51:bf:f3:a1:
         d5:5a:ca:6b:6f:88:88:80:b0:7a:df:44:8c:27:c1:93:bb:7e:
         8f:17:bf:45:98:67:c9:80:30:17:18:15:9f:87:1c:a6:14:cc:
         10:d7:0b:38:77:c2:be:76:2c:d0:01:52:8b:fe:13:8a:85:e7:
         8b:00:8c:26:cc:eb:d9:15:3e:e6:68:fa:73:3a:23:08:26:68:
         fd:56:04:74:99:71:0f:53:2a:d6:b9:e6:d0:1e:8c:4b:c3:ea:
         18:47:b6:03:f5:e5:4d:57:96:d6:90:26:27:1e:b4:2f:7a:c0:
         9a:c7:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----