Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/y4nRX2MR29nhRNB-8qKuPT5GKso.roa
File:                     y4nRX2MR29nhRNB-8qKuPT5GKso.roa (raw, json)
Hash identifier:          KPjY3F6wNY99Qei7P9FnZL2mNKxujn8hAQHxPf7AHds=
Subject key identifier:   CB:89:D1:5F:63:11:DB:D9:E1:44:D0:7E:F2:A2:AE:3D:3E:46:2A:CA
Certificate issuer:       /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial:       01951670BF846E088BB86279730568794CB4
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/y4nRX2MR29nhRNB-8qKuPT5GKso.roa
Signing time:             Tue 18 Feb 2025 00:24:02 +0000
ROA not before:           Tue 18 Feb 2025 00:24:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44806
IP address blocks:        31.24.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:16:70:bf:84:6e:08:8b:b8:62:79:73:05:68:79:4c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
        Validity
            Not Before: Feb 18 00:24:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cb89d15f6311dbd9e144d07ef2a2ae3d3e462aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:5c:43:4c:b6:6e:3b:45:ca:b4:35:11:e1:
                    bc:19:45:d9:5f:8e:d0:fe:23:f8:4f:dc:8c:e9:9d:
                    82:21:e5:de:05:d2:11:be:6c:91:3f:59:d5:e2:51:
                    20:b5:e7:3b:64:7c:ad:ef:d6:b1:d8:5f:cb:eb:66:
                    65:71:bb:ba:ed:cc:4b:4f:fd:b6:3a:1f:70:56:b8:
                    c8:43:57:94:68:eb:7a:75:0a:50:79:f0:d6:cb:71:
                    d2:77:61:97:56:08:0b:45:6e:00:40:72:f2:f2:27:
                    93:ee:ed:fe:0b:02:a9:74:5f:ea:80:31:c5:fc:02:
                    e5:45:36:05:9c:f4:1d:96:e5:17:de:a7:61:1d:ff:
                    bf:ae:f2:4e:d4:43:b1:70:69:ba:34:43:a2:a1:96:
                    d9:0e:2b:f6:19:8a:a2:72:11:ee:2e:4a:88:71:66:
                    b1:42:ca:77:22:1f:3d:9b:93:5b:cb:70:82:94:81:
                    ea:31:78:d0:d4:13:7f:c6:15:16:03:49:a7:a7:7e:
                    2f:e6:9d:2c:d3:a9:3c:8a:23:16:c2:6f:0f:3b:6d:
                    2a:9f:f6:ac:bf:8e:a1:fb:0d:b4:80:a9:f7:da:bd:
                    2f:0e:15:cb:c8:51:2a:52:5f:6c:c8:fb:ef:f3:4d:
                    e5:31:4d:68:3b:eb:56:66:31:25:fb:a8:26:37:b6:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:89:D1:5F:63:11:DB:D9:E1:44:D0:7E:F2:A2:AE:3D:3E:46:2A:CA
            X509v3 Authority Key Identifier:
                keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/y4nRX2MR29nhRNB-8qKuPT5GKso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:13:c4:bf:9d:a8:b6:65:3f:b2:d1:e7:1b:a4:76:ab:fd:
         72:00:c5:a2:7f:70:89:e2:ba:b4:07:c6:af:ee:25:3a:28:e7:
         a3:8b:f7:e1:77:ca:3e:fc:03:43:f7:cb:37:df:35:2a:16:91:
         93:70:98:d3:ca:82:50:e1:43:cf:8b:5d:ae:67:98:80:19:2f:
         76:b5:41:75:2c:1b:01:8b:87:29:00:e9:12:1b:e1:e1:1e:ac:
         3b:4c:3b:7f:1b:94:91:40:12:30:19:a8:cf:a7:59:c4:ca:35:
         8b:fa:a9:2b:91:dd:db:fb:fb:37:61:61:ca:30:e4:99:94:b4:
         b9:48:02:a3:2e:ff:1c:85:7a:68:2b:76:64:99:b9:47:3d:66:
         ca:08:26:40:df:60:b5:30:a3:41:be:c6:f2:da:c2:ef:6d:01:
         8f:f2:8b:a0:76:c1:4e:88:23:69:ae:c3:93:62:fe:9b:3b:d4:
         3d:89:64:7d:72:23:e8:22:ff:e9:24:c7:81:e6:82:82:b2:aa:
         6a:01:d3:ad:5b:76:4c:94:d1:59:23:1a:ad:c5:bc:95:3d:09:
         12:38:13:00:c5:91:b0:3f:14:6e:68:51:f9:be:c6:5f:43:b1:
         a9:46:5d:c0:02:d9:7f:0c:69:29:86:9e:0a:6f:67:0f:44:fd:
         26:e7:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----