Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/vLdBJDezpJno-D8_Q7lIDU0Du3U.roa
File:                     vLdBJDezpJno-D8_Q7lIDU0Du3U.roa (raw, json)
Hash identifier:          dLqRsVS/QG1E17yczM1Bj1D5q8gcGXc21nKm6H/uN8g=
Subject key identifier:   BC:B7:41:24:37:B3:A4:99:E8:F8:3F:3F:43:B9:48:0D:4D:03:BB:75
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019425FC3E9566AA2CCF6CE60ABE80E3E91C
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/vLdBJDezpJno-D8_Q7lIDU0Du3U.roa
Signing time:             Thu 02 Jan 2025 07:47:55 +0000
ROA not before:           Thu 02 Jan 2025 07:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15663
IP address blocks:        185.203.76.0/22 maxlen: 22
                          212.39.0.0/19 maxlen: 24
                          2a00:aa00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:3e:95:66:aa:2c:cf:6c:e6:0a:be:80:e3:e9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Jan  2 07:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcb7412437b3a499e8f83f3f43b9480d4d03bb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:36:a2:a5:d9:f1:f3:19:61:ee:f2:62:9f:
                    a1:ab:0f:bd:09:93:a6:74:04:a1:3c:43:19:fe:1e:
                    88:97:ee:b5:b6:76:20:5e:7f:1c:de:4a:7e:4d:72:
                    ab:03:d5:ee:d7:c4:ff:6e:ad:a9:c1:17:fc:95:f2:
                    7d:a4:0e:67:4d:43:92:b1:18:f2:a6:43:4b:bd:d7:
                    4d:aa:61:32:af:da:25:03:7f:92:72:b9:8c:40:2c:
                    bc:15:9c:12:c4:6b:d4:26:d3:a3:90:13:9a:f0:79:
                    58:7b:8c:c1:56:e8:ad:13:4f:a5:c1:00:4c:61:6c:
                    60:92:30:87:0d:20:cc:7d:f9:a9:92:43:d8:5a:4d:
                    d6:f2:55:98:b0:b5:41:14:5a:a9:a4:50:83:6f:53:
                    76:a6:44:78:cc:61:de:4e:d2:9e:af:0d:95:36:89:
                    a3:32:c5:b7:b3:64:dc:90:43:33:15:e9:cf:12:da:
                    7c:d6:e1:29:6e:6e:08:d9:9c:49:16:8b:53:4f:53:
                    4d:17:23:73:ca:02:ed:ad:34:6c:03:49:48:66:c7:
                    7d:9e:b4:95:16:5c:e4:da:24:31:00:2c:e7:89:15:
                    88:b2:a6:3a:25:7d:e2:82:fe:a9:42:e1:ad:d1:8a:
                    d2:71:60:8b:a6:dc:48:85:86:6e:c4:b2:bd:95:d6:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:41:24:37:B3:A4:99:E8:F8:3F:3F:43:B9:48:0D:4D:03:BB:75
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/vLdBJDezpJno-D8_Q7lIDU0Du3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.76.0/22
                  212.39.0.0/19
                IPv6:
                  2a00:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:41:09:3f:2a:da:ff:cb:89:e1:35:26:0e:07:14:b1:99:
         97:54:b8:d5:fa:5b:12:1a:87:2a:6a:91:22:06:66:71:b3:d3:
         87:d2:80:80:b9:b1:84:aa:c3:fe:8e:93:48:24:88:20:eb:e3:
         35:73:83:61:e7:2b:18:fd:5f:cc:f5:fc:d6:0c:c0:63:e9:a2:
         a9:53:a5:5b:e8:4d:1d:41:5d:ae:b0:1b:c0:e7:d9:b4:d7:f4:
         82:0c:ac:20:18:cc:7e:76:29:fc:89:75:03:e1:d1:72:93:aa:
         c6:74:48:4a:07:4d:7c:dd:94:19:6c:1b:c2:b5:08:2c:64:6e:
         59:16:0f:a6:f5:c7:cf:cc:f9:30:02:8a:4f:95:f2:cf:4c:b9:
         7c:58:5a:a3:ec:c0:8f:a2:a3:a6:40:d7:df:40:e4:d1:e4:e0:
         71:d5:dc:1c:57:ad:f9:b8:06:af:d7:95:31:58:26:2f:58:cb:
         ab:78:3a:e5:63:4e:39:fb:d3:53:04:b7:0d:40:ad:58:c4:e0:
         d2:80:86:59:fd:24:81:48:ca:98:41:24:bd:77:3a:07:97:31:
         03:00:2c:2c:ff:42:e9:c7:d6:42:5b:06:7b:3e:bd:5a:2e:75:
         a3:44:21:be:85:1b:72:ae:09:ba:c3:c8:14:5c:59:52:32:3e:
         94:b5:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----