Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/j-WIU7L2E8S8heDN9-EX8jcj-qg.roa
File:                     j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (raw, json)
Hash identifier:          5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=
Subject key identifier:   8F:E5:88:53:B2:F6:13:C4:BC:85:E0:CD:F7:E1:17:F2:37:23:FA:A8
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       019425FDEE1B1D17757403EF6534FD958099
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/j-WIU7L2E8S8heDN9-EX8jcj-qg.roa
Signing time:             Thu 02 Jan 2025 07:49:46 +0000
ROA not before:           Thu 02 Jan 2025 07:49:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25509
IP address blocks:        213.190.96.0/19 maxlen: 24
                          2a00:5380::/29 maxlen: 32
                          2a00:5380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ee:1b:1d:17:75:74:03:ef:65:34:fd:95:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Jan  2 07:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8fe58853b2f613c4bc85e0cdf7e117f23723faa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:22:f1:34:90:29:6a:7e:fb:b2:13:c0:5e:
                    a7:c6:7a:21:8d:b5:d9:5f:7c:dc:61:ea:af:f2:53:
                    d5:52:6d:9f:56:72:4d:73:5e:1d:19:2f:61:39:04:
                    d0:60:22:b5:ac:22:5a:c6:90:a8:63:ae:b7:c4:7e:
                    e9:63:08:f2:a8:a4:23:be:92:44:c0:df:a2:00:e4:
                    c1:86:56:91:10:c9:e2:fa:7f:69:ce:91:28:9c:88:
                    67:d6:61:13:2a:9a:f4:15:6b:6a:8d:d2:c7:f5:37:
                    78:b0:5c:22:43:1e:91:c9:7a:84:9b:b0:bc:76:ee:
                    28:96:74:3f:7c:9c:9a:c3:dd:51:5d:32:1f:70:0b:
                    8c:b8:cf:42:91:f3:d5:c7:41:f6:24:3b:a8:c5:b6:
                    c6:e4:15:a0:61:94:d3:30:dc:a8:c8:5a:a7:c5:f0:
                    79:24:30:1b:2c:04:a8:41:14:55:04:e0:1d:01:1a:
                    33:46:10:f0:79:37:b7:ea:c3:0c:f9:2e:a5:52:5c:
                    26:0e:5d:47:b5:96:68:d2:09:20:c5:a2:9c:43:21:
                    ed:b5:e9:42:69:6d:45:68:9e:29:dc:3b:6f:3a:61:
                    0b:21:b2:7e:57:b8:8f:fd:08:44:f2:e6:a1:86:fe:
                    63:69:17:f9:9e:5f:90:05:af:fa:af:63:6d:1a:e6:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E5:88:53:B2:F6:13:C4:BC:85:E0:CD:F7:E1:17:F2:37:23:FA:A8
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/j-WIU7L2E8S8heDN9-EX8jcj-qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.96.0/19
                IPv6:
                  2a00:5380::/29

    Signature Algorithm: sha256WithRSAEncryption
         35:dd:e3:c8:c9:e3:7d:83:34:78:dc:0c:2a:e7:84:93:6a:83:
         c4:b5:d3:6b:39:b1:fa:3c:fb:d8:8b:e9:15:d6:96:2e:d2:cc:
         a3:25:f3:38:6f:60:f4:4d:ac:e9:e6:2b:aa:9e:90:93:94:50:
         fa:26:61:f7:22:77:a4:ef:27:d8:c3:43:23:87:87:ef:0b:96:
         85:54:22:91:d4:30:dc:f9:6d:c0:05:c4:e6:72:26:7b:70:2c:
         a2:04:10:53:71:79:7c:de:56:2a:35:4c:29:2a:4a:21:0d:a0:
         85:c6:87:06:74:a0:04:aa:b8:eb:41:64:a7:01:6f:cf:50:21:
         5e:08:b0:5a:e1:e4:14:51:1a:b8:a2:14:37:4b:02:f2:7a:09:
         10:04:0a:84:83:d0:c7:d2:37:77:ed:a0:f6:8e:bb:04:36:f2:
         95:ec:5f:96:65:48:5e:88:53:ad:e9:bc:c7:48:5e:ba:46:78:
         30:9d:77:91:1f:6c:e4:6b:a0:a2:5a:60:7c:58:01:05:6f:cd:
         12:63:ce:05:cb:8a:8d:11:87:70:38:25:8f:97:17:6b:9b:44:
         40:cd:88:2b:a2:e9:4a:cf:07:d1:3a:70:ae:7d:bc:93:2f:8a:
         a8:8b:49:95:b7:82:02:66:8d:d5:70:86:fe:0d:dd:3c:42:e1:
         10:3e:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----