Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa
File:                     FMEvE8lRSqQ-c4n53FDffBkErx8.roa (raw, json)
Hash identifier:          GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=
Subject key identifier:   14:C1:2F:13:C9:51:4A:A4:3E:73:89:F9:DC:50:DF:7C:19:04:AF:1F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01942143B35D6EE1E1FB5BEBB0DECAA1891F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa
Signing time:             Wed 01 Jan 2025 09:47:52 +0000
ROA not before:           Wed 01 Jan 2025 09:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42619
IP address blocks:        193.59.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b3:5d:6e:e1:e1:fb:5b:eb:b0:de:ca:a1:89:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 09:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14c12f13c9514aa43e7389f9dc50df7c1904af1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:40:68:ef:ed:be:eb:37:e1:c1:f1:1b:39:
                    9c:ef:f7:0e:61:ee:a2:d6:02:c3:39:9a:db:65:76:
                    a7:4d:63:6d:9b:86:ae:6f:22:8f:74:13:45:8e:ad:
                    fa:d4:a2:11:78:ba:b4:45:81:d7:eb:f3:e5:da:37:
                    dc:65:ac:64:74:84:50:79:5c:1d:c9:71:90:82:08:
                    46:39:67:9b:69:46:c9:c1:71:fd:d6:24:c6:76:5a:
                    4a:1a:bd:05:46:17:c4:24:4b:71:7e:78:ec:f0:cc:
                    1c:ac:b2:81:a7:e4:38:95:3c:9c:85:9a:7d:0d:25:
                    cc:1d:6f:f3:bb:9e:e5:77:3d:64:2e:5b:be:b1:20:
                    b9:3f:79:61:17:06:5c:26:12:7b:9b:0b:0f:5f:5c:
                    b2:44:c5:e5:f4:37:16:e7:d4:98:24:cc:a8:d7:48:
                    9d:23:0a:d6:79:76:ca:5f:a5:94:2d:df:f3:9b:63:
                    51:92:e3:a7:73:2a:7c:84:75:50:0e:5e:56:65:c4:
                    03:0a:df:63:17:35:3e:db:c6:80:fe:32:14:07:92:
                    a8:4a:47:f4:0d:d7:ab:eb:d4:58:45:50:85:80:f3:
                    4d:28:37:1e:56:8d:30:62:4c:8b:5d:e7:c4:ce:47:
                    ad:23:04:a3:be:3f:92:f8:91:72:83:55:a8:86:e0:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:2F:13:C9:51:4A:A4:3E:73:89:F9:DC:50:DF:7C:19:04:AF:1F
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:ff:3b:63:c4:77:1a:27:59:69:a6:0c:40:77:df:9c:d6:
         03:5a:ee:e2:ca:d4:0b:a8:e9:20:14:22:c9:ee:b0:f2:ae:58:
         51:a3:8e:4f:5b:3d:42:73:00:98:ff:2c:c0:56:77:7c:79:8c:
         0d:aa:2f:e0:80:3f:6f:79:a9:5d:2d:24:4d:26:9b:47:c3:04:
         58:cf:9a:f6:4a:09:10:90:e4:e2:54:00:72:6d:00:54:c2:c0:
         ea:b5:d5:cb:47:b5:86:18:bb:76:e5:55:23:0e:5f:07:0c:cb:
         ae:83:37:36:31:73:e8:70:b1:39:32:de:7b:8e:4f:fd:6f:1c:
         c4:a0:ab:fe:46:c5:3d:00:97:33:c4:e3:32:da:c4:1c:fa:b9:
         af:ff:bf:aa:6c:23:fb:05:2a:ff:6c:a1:00:d1:57:c2:03:cb:
         64:3d:26:5c:64:94:56:00:dc:23:8d:50:a1:e0:f1:7f:0a:0e:
         bc:62:bb:ed:ac:79:cb:3d:06:10:43:9e:79:7f:52:75:32:51:
         04:1f:e8:4b:67:d6:64:f0:b7:d1:2e:dd:12:b0:a3:ed:c2:81:
         61:77:01:6f:46:b2:e1:d9:d5:94:20:fc:07:a8:63:da:4a:37:
         5b:5c:a0:2f:96:d5:48:53:83:75:52:0d:56:1b:3f:79:32:17:
         81:1e:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----