Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/mm8C4Ou63If70LPWFRCmCNEI28c.roa
File:                     mm8C4Ou63If70LPWFRCmCNEI28c.roa (raw, json)
Hash identifier:          g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=
Subject key identifier:   9A:6F:02:E0:EB:BA:DC:87:FB:D0:B3:D6:15:10:A6:08:D1:08:DB:C7
Certificate issuer:       /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial:       01956C4CFDD1C478B387EA6503EC644FDD6B
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/mm8C4Ou63If70LPWFRCmCNEI28c.roa
Signing time:             Thu 06 Mar 2025 16:32:19 +0000
ROA not before:           Thu 06 Mar 2025 16:32:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213593
IP address blocks:        198.212.48.0/24 maxlen: 24
                          2001:678:d2c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6c:4c:fd:d1:c4:78:b3:87:ea:65:03:ec:64:4f:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
        Validity
            Not Before: Mar  6 16:32:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9a6f02e0ebbadc87fbd0b3d61510a608d108dbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:6b:d8:64:cb:9c:12:56:da:82:38:f7:fa:
                    17:42:62:87:3b:23:26:ca:5c:cc:ae:91:ad:2a:d6:
                    5f:a5:ca:11:4a:10:cc:60:63:2c:65:24:89:8b:23:
                    70:23:dc:0c:0b:37:7c:d2:45:44:bf:21:73:21:ed:
                    a1:3b:d1:b7:25:d5:e7:54:d1:17:ff:d7:d4:a0:e0:
                    81:85:1d:1e:8e:0d:78:8c:3d:dd:cf:5f:16:ce:43:
                    3c:2c:67:86:e2:e4:f2:41:59:10:bb:63:bb:a7:34:
                    fe:89:6c:ee:e3:b7:f8:12:6e:1f:5d:27:82:80:ac:
                    f5:7c:1e:d6:1f:bb:76:2c:26:ec:57:9a:e7:4d:1f:
                    75:b2:32:58:3e:c0:57:93:c3:56:bd:43:40:69:2c:
                    34:40:71:61:b9:b6:ce:43:a1:f9:94:14:2b:82:d4:
                    7b:0e:33:a4:81:83:ed:1a:a1:d9:70:e9:6f:6f:35:
                    e9:cc:f7:ce:3b:fe:bf:5a:3b:ca:f6:a3:c1:55:d1:
                    6d:4e:ca:a2:fd:2f:96:c9:48:a9:de:7f:2a:9b:b2:
                    7e:cd:4e:31:22:96:18:e5:90:7d:83:81:0e:6c:b3:
                    3f:ac:1a:de:a8:2e:01:1d:76:5d:33:ce:aa:22:b7:
                    c7:53:42:de:1f:42:a9:0a:63:af:7c:5b:02:50:0c:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:02:E0:EB:BA:DC:87:FB:D0:B3:D6:15:10:A6:08:D1:08:DB:C7
            X509v3 Authority Key Identifier:
                keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/mm8C4Ou63If70LPWFRCmCNEI28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.48.0/24
                IPv6:
                  2001:678:d2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:7f:02:2a:6a:54:ed:e7:07:ce:e1:ad:0b:4e:7e:41:99:
         e5:44:7a:d2:06:e6:44:fb:e4:ab:67:5e:6e:e3:fe:6a:5c:76:
         0c:a7:4c:85:b0:29:aa:de:dd:3c:90:5e:ad:ea:2c:cf:23:e2:
         ac:c6:18:9e:23:f6:8d:ea:08:2d:c3:12:d4:d7:36:43:47:e8:
         67:91:37:9a:1f:07:e5:39:d9:03:b6:9d:ad:de:16:f3:21:d1:
         f2:44:45:3b:9e:3d:91:de:ad:ac:d8:10:4c:43:80:2d:5f:18:
         51:13:00:04:1b:f3:aa:8e:7e:b8:3f:26:68:b0:cc:e2:e2:f0:
         11:ab:45:66:c2:9b:98:42:cc:ad:4d:62:58:56:f2:89:81:85:
         db:db:a9:df:19:a5:26:12:f9:e2:30:a7:5a:a0:95:26:eb:a9:
         d6:1c:a0:dd:a2:74:1b:58:b3:17:a5:e1:ce:47:41:a5:1b:7c:
         4e:32:b8:fc:88:ee:3a:82:ce:5a:7a:63:76:02:2d:6c:d9:1b:
         a5:f2:fb:cf:2b:a1:33:69:81:43:55:e3:0e:11:94:fa:e1:58:
         92:dd:c9:41:c0:88:f3:af:e7:82:90:36:5c:4e:09:69:ae:b5:
         7a:13:89:86:38:62:75:c7:2b:a2:f3:9d:12:f3:fa:3b:00:26:
         71:d4:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----