Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ydjj493UN6JAAmZf6D9xQrp5Fuc.roa
File:                     ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (raw, json)
Hash identifier:          r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=
Subject key identifier:   C9:D8:E3:E3:DD:D4:37:A2:40:02:66:5F:E8:3F:71:42:BA:79:16:E7
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01942143C32B3EC847DA695796A0D3FC992C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ydjj493UN6JAAmZf6D9xQrp5Fuc.roa
Signing time:             Wed 01 Jan 2025 09:47:56 +0000
ROA not before:           Wed 01 Jan 2025 09:47:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211155
IP address blocks:        193.59.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:c3:2b:3e:c8:47:da:69:57:96:a0:d3:fc:99:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 09:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9d8e3e3ddd437a24002665fe83f7142ba7916e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:06:3d:a6:e9:68:b2:2f:cf:57:a3:58:e7:
                    d8:d0:58:14:17:4b:3f:76:05:2f:b3:d4:3e:e0:11:
                    a1:94:01:aa:dc:22:81:7a:57:cb:e2:09:b9:fc:a2:
                    9d:36:0e:8f:e8:a6:f0:b3:c8:7e:23:04:a4:5e:c1:
                    bb:ac:6b:3a:58:ea:e5:95:86:93:e9:96:fa:dd:92:
                    61:17:30:41:1f:14:c6:b4:ee:7d:71:41:e3:a5:d1:
                    25:ba:a0:4c:c7:e1:e4:be:4a:07:a7:90:29:16:b3:
                    1f:ad:16:b0:2b:95:fe:69:a5:f3:23:41:ad:92:cd:
                    32:44:39:15:c3:74:13:de:62:7f:b5:ec:7e:0f:07:
                    12:a4:22:fa:6f:07:22:be:12:e8:24:19:a0:1e:28:
                    11:a0:f6:cd:7c:92:30:4d:61:24:c3:f3:53:f8:42:
                    9d:a4:8d:f6:f3:12:2e:a5:67:a6:7c:54:7d:c3:ec:
                    6d:27:ea:23:3e:df:16:43:ac:82:b7:ea:03:7a:48:
                    2f:cc:34:91:ba:0f:5e:63:46:08:4b:2a:41:0c:6f:
                    17:8d:11:40:c0:e7:e8:61:42:40:09:14:73:3f:ac:
                    e9:2c:64:0c:be:fb:3b:de:59:bd:d8:9b:37:93:dc:
                    db:20:c9:04:5f:ff:3f:e9:63:7b:8f:42:ef:b5:30:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D8:E3:E3:DD:D4:37:A2:40:02:66:5F:E8:3F:71:42:BA:79:16:E7
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ydjj493UN6JAAmZf6D9xQrp5Fuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:88:f9:e6:0a:d5:2f:12:4f:be:d2:55:bb:c0:ef:98:b4:8b:
         bd:c7:5f:79:e4:79:c2:4a:ac:1c:06:24:11:6c:b2:ad:3b:38:
         96:12:b8:cd:13:7d:6e:cd:f9:30:dc:21:94:4e:a5:07:98:e0:
         d9:a5:71:b5:ed:7f:13:df:06:43:a1:6c:8e:07:9d:20:2c:7f:
         b5:b9:52:0b:73:1c:72:dd:af:74:15:b3:01:e2:83:c4:33:db:
         16:9a:18:cd:94:b0:bf:19:c2:0b:a0:cd:b6:46:26:e2:d3:c3:
         a3:5d:7b:11:d6:b6:79:eb:21:7b:23:29:aa:c4:e0:2c:f2:89:
         3d:e1:66:54:45:15:5f:7a:20:da:36:7e:ba:c1:91:fb:a8:e1:
         0b:1b:37:19:78:b2:54:81:ba:74:58:f8:2b:46:9e:ee:53:5b:
         ac:fa:76:75:7d:dd:11:52:7f:ea:82:b4:19:3a:bd:8f:b7:42:
         9f:f1:ff:12:20:92:31:11:24:d5:a2:55:94:fd:54:6b:bb:b4:
         00:22:e4:de:91:5f:c0:c5:af:7f:c9:ba:8c:93:6c:80:ee:c2:
         df:7c:3b:fb:f6:72:fb:17:0d:06:f0:19:a5:18:be:8a:40:78:
         32:95:d1:3b:f9:30:6f:b8:5e:fc:15:85:25:75:d6:3d:cf:44:
         1c:5b:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----