Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa
File:                     x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (raw, json)
Hash identifier:          Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=
Subject key identifier:   C7:D7:7F:65:83:8F:52:05:13:20:6F:DD:53:56:96:2E:1C:C3:EC:BD
Certificate issuer:       /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial:       019425FCC5D81E7359967C972583A4279D3E
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa
Signing time:             Thu 02 Jan 2025 07:48:30 +0000
ROA not before:           Thu 02 Jan 2025 07:48:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208929
IP address blocks:        45.15.88.0/22 maxlen: 22
                          2a0e:2380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:c5:d8:1e:73:59:96:7c:97:25:83:a4:27:9d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92479cae284765d628044119009880d28a7560b1
        Validity
            Not Before: Jan  2 07:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c7d77f65838f520513206fdd5356962e1cc3ecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:1d:6d:6f:15:45:f3:93:f1:b6:2b:da:1b:
                    f7:48:e8:78:2a:99:ef:3d:0c:5d:79:af:45:1b:fc:
                    fa:06:c9:c8:2a:f2:ef:c4:01:b4:0f:c0:ac:8f:74:
                    d2:6f:aa:68:cc:f7:e2:5b:ba:ea:0b:60:73:ef:bd:
                    88:c5:0e:f9:15:27:b7:40:ac:7d:13:04:18:33:6a:
                    f6:7a:5f:10:1d:a2:f1:2e:17:36:23:03:3b:6d:c3:
                    7d:24:d1:74:d9:49:41:08:b1:3e:d7:51:44:1e:9f:
                    d9:3f:7d:bf:08:00:81:3d:93:e9:67:4c:d1:4f:f6:
                    ba:28:da:fc:9a:66:84:fc:d6:61:1a:1e:08:69:7c:
                    fe:81:bd:a7:0c:6a:cc:1d:7b:f6:98:72:b8:a2:a9:
                    bd:f2:78:03:91:ef:cf:82:93:a8:e7:c1:cd:b4:10:
                    57:38:51:42:1a:1b:85:d6:44:a1:17:08:39:98:75:
                    61:9d:0d:db:76:b8:75:e2:4d:6c:6a:cd:bc:a1:68:
                    86:31:0d:da:8d:8a:9f:42:f5:1b:88:d1:33:f2:c6:
                    72:06:ac:1a:11:6f:08:e9:1e:02:75:3c:7f:77:6c:
                    e4:47:14:9f:91:6c:8e:2a:6c:90:7b:90:de:0e:5e:
                    2c:ef:50:24:14:19:b1:df:70:27:4e:fe:81:26:81:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D7:7F:65:83:8F:52:05:13:20:6F:DD:53:56:96:2E:1C:C3:EC:BD
            X509v3 Authority Key Identifier:
                keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.88.0/22
                IPv6:
                  2a0e:2380::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:2f:67:b9:40:d2:1d:94:82:2f:44:da:24:7a:75:a3:c1:
         8e:02:b1:63:0a:21:1a:c1:b5:95:61:10:2c:f1:e7:03:e3:8a:
         76:ae:ff:ee:e6:ac:c6:0c:df:02:16:f1:6f:6c:93:23:f3:1c:
         79:98:08:62:cd:1e:95:39:00:f4:01:97:0b:20:f5:97:13:20:
         07:15:c4:fd:91:83:17:3d:42:1f:b9:30:e8:ee:74:c1:87:42:
         45:e0:53:9d:d2:71:49:4e:6d:68:f6:a1:ba:b9:87:df:c8:5f:
         d7:e0:d8:cb:bd:9a:5e:33:ef:48:7a:5e:b9:20:a9:6e:93:e0:
         7c:16:58:8e:1a:e0:4b:22:38:91:27:3f:6d:b6:ad:57:e2:2a:
         ca:e2:93:4b:c2:51:cd:dd:84:5c:c6:10:f5:2a:b5:de:68:6a:
         40:c5:cd:94:cd:ec:69:3e:08:cb:a4:78:6e:70:91:b6:24:a4:
         14:f4:b8:29:97:d0:04:fa:ce:e5:b0:62:8d:fe:89:87:25:a1:
         94:51:0c:a3:2b:38:b2:c6:e2:23:f8:7b:a5:a8:7f:19:cc:75:
         47:5e:fc:58:1e:c1:c2:6b:2f:cd:eb:0a:b4:fb:d1:5a:b5:27:
         c1:e9:b0:40:70:0b:ea:2e:e1:91:89:44:0f:aa:aa:69:9d:47:
         0c:81:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----