Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/mVMhaZyReFl--kv_RJ_-OuFBGYU.roa
File:                     mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (raw, json)
Hash identifier:          IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=
Subject key identifier:   99:53:21:69:9C:91:78:59:7E:FA:4B:FF:44:9F:FE:3A:E1:41:19:85
Certificate issuer:       /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial:       019420D63418C5DDD89471AFD66A89182FA1
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/mVMhaZyReFl--kv_RJ_-OuFBGYU.roa
Signing time:             Wed 01 Jan 2025 07:48:16 +0000
ROA not before:           Wed 01 Jan 2025 07:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210767
IP address blocks:        188.64.139.0/24 maxlen: 24
                          2a11:fc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:34:18:c5:dd:d8:94:71:af:d6:6a:89:18:2f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
        Validity
            Not Before: Jan  1 07:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=995321699c9178597efa4bff449ffe3ae1411985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:0a:8b:31:b2:f3:df:74:33:f2:5c:38:6b:
                    76:d8:eb:c4:8d:2b:07:6e:2e:81:d1:72:93:fd:73:
                    2c:73:56:a8:bf:88:f0:42:78:ce:83:ac:46:ec:6c:
                    1a:57:a3:23:a6:92:47:aa:e9:74:de:3b:49:2b:3c:
                    bc:22:a6:e8:f4:f1:9e:65:7f:a6:64:39:5c:ce:80:
                    7c:15:93:78:d8:62:0a:c1:e2:b5:ff:74:9e:a0:87:
                    2c:1d:94:d6:c0:1b:4a:23:89:e0:9c:21:69:76:a2:
                    9e:68:28:70:df:55:26:96:93:64:29:63:dc:4b:87:
                    9e:20:93:65:c5:06:8d:d8:41:9f:89:10:a4:b5:f9:
                    d9:67:0a:49:18:ce:ba:7b:67:0e:70:55:27:e7:03:
                    b2:1d:a6:29:cc:5c:c8:60:6e:ea:a8:27:14:ed:4b:
                    c4:83:b1:0b:59:1e:92:18:f5:35:d0:6b:4c:19:53:
                    1a:40:1a:cd:83:88:27:17:8e:5a:9e:60:b8:54:ba:
                    7d:ad:c6:10:82:b9:98:bb:9b:b5:17:55:8f:4e:6d:
                    fb:b0:23:20:ca:e6:1d:a2:81:81:4f:8a:69:51:82:
                    98:5e:2e:2c:8a:51:5f:34:e9:59:fe:4f:1d:b2:8d:
                    66:57:32:47:3f:db:d2:42:b5:69:09:12:87:97:23:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:53:21:69:9C:91:78:59:7E:FA:4B:FF:44:9F:FE:3A:E1:41:19:85
            X509v3 Authority Key Identifier:
                keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/mVMhaZyReFl--kv_RJ_-OuFBGYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.139.0/24
                IPv6:
                  2a11:fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:58:75:fb:f5:65:cd:49:f8:79:56:b4:3a:00:46:b9:99:
         92:10:4f:e8:c7:be:9e:00:a9:c3:66:62:b3:f0:58:2e:60:6e:
         b2:fa:cb:8e:77:2e:6f:4c:71:b9:52:0e:97:b6:c1:12:a6:19:
         fb:cd:e6:f7:23:2a:3e:d0:0b:0f:3b:0e:3b:d3:07:d0:2c:be:
         c9:a4:58:ae:fc:a8:d9:33:42:05:3b:45:00:3f:99:d5:95:93:
         df:33:46:96:07:d7:8e:45:23:9e:9b:30:ca:9b:e0:c7:bd:7c:
         73:32:7c:83:a4:62:58:12:26:07:61:f4:01:79:c1:c8:44:da:
         78:05:20:6e:74:dc:c8:c9:bb:39:54:62:08:53:cf:13:87:21:
         ec:7a:ac:2d:c9:68:5e:b5:3e:3b:5d:42:06:f8:e4:0e:a7:66:
         6d:e7:93:8a:b0:cc:e2:2b:64:f3:d1:ed:b5:b1:95:04:03:07:
         f0:e8:8d:ed:5d:22:7b:49:fd:c4:f2:e4:ed:e9:58:65:ce:3a:
         46:73:8c:09:07:a2:71:d2:b9:81:39:11:f1:35:ee:12:96:1a:
         e7:25:3c:f5:8a:c7:0f:3b:4a:00:39:61:89:5d:89:9c:74:c4:
         a4:5e:da:0e:44:12:ae:ce:64:87:cb:ff:ec:64:44:a8:70:33:
         00:e6:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----