Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/k-C92F5fBC7tzidpGResaRP_3Y8.roa
File:                     k-C92F5fBC7tzidpGResaRP_3Y8.roa (raw, json)
Hash identifier:          cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=
Subject key identifier:   93:E0:BD:D8:5E:5F:04:2E:ED:CE:27:69:19:17:AC:69:13:FF:DD:8F
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       01942143D6FDC41FC0419A7AB07126F22C5E
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/k-C92F5fBC7tzidpGResaRP_3Y8.roa
Signing time:             Wed 01 Jan 2025 09:48:01 +0000
ROA not before:           Wed 01 Jan 2025 09:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57965
IP address blocks:        45.146.194.0/23 maxlen: 24
                          2a13:47c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:d6:fd:c4:1f:c0:41:9a:7a:b0:71:26:f2:2c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Jan  1 09:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93e0bdd85e5f042eedce27691917ac6913ffdd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:03:71:8e:68:aa:fe:4a:e6:ad:4f:e6:2e:
                    fc:29:c5:77:da:57:f8:69:73:9f:da:75:6c:a6:37:
                    37:f8:f5:de:1d:1e:01:64:31:df:58:50:8f:2a:a9:
                    a4:c2:da:6e:f5:f5:5c:2c:57:6f:7f:7b:af:1e:9c:
                    40:e2:fd:98:d4:e1:30:8c:ae:9e:34:e8:15:b5:12:
                    2c:a8:51:81:bf:58:a2:14:3c:9c:87:35:bc:5b:83:
                    65:cb:46:bd:5c:11:fa:51:43:0f:fa:55:cc:5b:03:
                    c4:34:fd:26:66:f0:d0:5d:27:01:58:66:fc:27:4d:
                    7a:da:e2:31:4b:34:0e:b9:90:55:50:ac:76:58:28:
                    79:86:ca:d9:d5:c1:6e:1a:f1:02:6d:62:ad:73:81:
                    b6:2a:e0:7c:24:54:a7:f6:5b:72:aa:21:a1:68:8e:
                    eb:33:b3:40:d3:b3:c2:83:70:e4:e7:a0:55:38:7b:
                    04:8d:ed:a0:57:42:93:cc:04:3a:7f:cd:cd:6e:fe:
                    ba:82:da:de:8c:f5:b3:7d:37:04:0b:25:f9:9a:a7:
                    8d:aa:37:49:bf:b0:a4:30:0e:cd:89:e4:78:7b:1d:
                    ce:f6:52:65:49:f5:eb:e0:e7:65:d0:22:cd:53:b3:
                    74:d0:4a:95:71:d6:05:9c:03:e5:5c:8f:c7:19:f0:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:BD:D8:5E:5F:04:2E:ED:CE:27:69:19:17:AC:69:13:FF:DD:8F
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/k-C92F5fBC7tzidpGResaRP_3Y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.194.0/23
                IPv6:
                  2a13:47c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         df:24:b6:83:44:7b:96:75:f3:bc:ad:02:c9:15:5b:6a:4b:a0:
         83:22:92:4a:d5:59:e7:ad:c2:b2:90:8d:1d:09:e6:ec:e4:58:
         7a:a1:9c:b2:bc:61:37:19:c3:bd:f0:7a:4d:45:be:b2:a4:e4:
         26:4b:ef:80:8b:89:cc:63:39:5f:f4:f9:45:46:ef:14:84:1d:
         a5:de:a6:5b:65:e6:15:c3:59:68:56:46:ef:76:42:e1:ea:c3:
         0b:a9:f1:d6:ec:7a:3b:20:3f:31:ed:11:62:20:87:1c:1f:dd:
         9e:d6:06:17:96:0f:3f:54:d7:1d:1c:11:8c:d1:5c:fd:e9:bd:
         28:89:ac:ef:34:42:b2:80:ca:66:e6:97:f0:e1:74:18:d8:83:
         45:6e:bd:8e:5a:f7:10:d3:53:cd:1d:3e:06:a3:0d:4c:92:f4:
         14:98:0a:cd:bb:43:5b:ca:cd:b7:f6:28:1d:71:76:24:9a:99:
         33:fa:a6:51:23:77:0c:63:de:41:0b:20:78:19:81:d2:9e:1f:
         31:13:cc:18:8d:4b:f7:79:95:96:e8:1a:13:0d:72:09:f3:48:
         a7:ac:d9:cd:88:be:09:ce:97:9f:2c:d9:dc:74:5b:6b:61:31:
         34:01:5c:7a:ee:ec:76:e9:e9:a1:03:c5:26:b8:26:2c:29:cf:
         cf:19:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----