Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/3BfIScw6HImdI4whE_vk-buQO8s.roa
File:                     3BfIScw6HImdI4whE_vk-buQO8s.roa (raw, json)
Hash identifier:          G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=
Subject key identifier:   DC:17:C8:49:CC:3A:1C:89:9D:23:8C:21:13:FB:E4:F9:BB:90:3B:CB
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       019427B4193FE33E891DBF4F20F257DFCFB8
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/3BfIScw6HImdI4whE_vk-buQO8s.roa
Signing time:             Thu 02 Jan 2025 15:48:21 +0000
ROA not before:           Thu 02 Jan 2025 15:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200345
IP address blocks:        194.147.24.0/22 maxlen: 24
                          2a0d:840::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:19:3f:e3:3e:89:1d:bf:4f:20:f2:57:df:cf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Jan  2 15:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc17c849cc3a1c899d238c2113fbe4f9bb903bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:69:aa:29:f7:cc:ad:0c:e1:27:c9:8d:47:
                    86:4a:e7:4d:ea:c3:e7:c6:5e:2a:f6:69:eb:72:b2:
                    96:41:08:f4:27:fb:f5:b1:91:04:47:2e:4c:95:97:
                    44:cd:4a:9a:4d:7c:3a:82:eb:53:7c:6d:29:5a:7d:
                    ee:0b:b5:c5:12:0f:eb:c8:54:2d:a4:98:e7:3a:7c:
                    25:71:61:c2:16:62:63:2d:a6:98:17:5d:b1:ea:11:
                    d8:c8:4c:c2:42:6c:1a:a1:d1:e4:05:4c:ef:ea:9b:
                    d3:2b:98:2c:86:91:35:fe:0e:06:d4:18:30:fa:c9:
                    1c:75:71:57:e7:b1:02:45:d9:75:c9:05:a2:d9:27:
                    f5:52:11:1c:ea:60:74:0e:2f:2d:33:8e:5d:60:6c:
                    71:d3:ab:62:86:83:c8:ac:b8:54:be:fe:43:ee:42:
                    3e:48:0e:d9:f9:6d:29:a5:8b:37:81:34:a3:75:28:
                    a9:56:8b:67:1d:0e:81:0a:f6:a4:0d:68:12:d2:a6:
                    3d:64:b7:75:e4:a8:6b:07:e2:a7:77:84:80:9b:cc:
                    6e:02:f8:38:ae:b5:0b:5e:b0:7c:65:78:2c:56:26:
                    f2:c1:76:3b:ba:4f:ca:af:a0:f4:3a:63:94:b2:80:
                    ea:16:38:2e:a6:b8:f3:31:de:e8:6e:27:cd:62:fc:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:C8:49:CC:3A:1C:89:9D:23:8C:21:13:FB:E4:F9:BB:90:3B:CB
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/3BfIScw6HImdI4whE_vk-buQO8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.24.0/22
                IPv6:
                  2a0d:840::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:0f:a1:68:1b:df:4a:8d:26:d8:92:88:6f:8b:25:65:d3:
         87:83:d1:bc:d3:20:a0:78:5b:9a:be:bb:af:17:db:01:75:60:
         a5:45:c5:62:10:be:a6:d7:cd:5e:d1:27:d5:1c:35:34:51:bb:
         f8:57:46:bf:66:78:06:d1:a0:4f:be:fa:f6:a8:72:5e:78:f2:
         82:f5:e2:d2:0a:06:46:11:14:38:fa:67:a7:50:4e:76:fd:56:
         ee:c9:c4:0c:8d:d4:cc:7b:85:43:b3:a1:41:4e:6c:e5:6a:8d:
         d0:8d:71:fd:85:56:da:00:82:b4:1c:e8:bf:d2:12:fd:f8:c1:
         49:6a:cc:32:82:ca:4c:88:e3:65:d4:81:c6:ff:4b:ee:7f:9d:
         48:fa:11:92:db:a8:55:7f:f0:3c:9c:90:95:03:24:9a:eb:4b:
         c8:db:d9:f7:42:6c:b1:a1:44:7f:cf:b9:e7:04:f7:f8:68:3e:
         f2:2d:21:33:3e:be:9d:e1:95:c0:5a:ef:8d:1e:cf:ae:45:1e:
         8f:1e:c5:be:92:c2:1a:d7:a0:37:3a:59:0b:b0:57:1d:2d:d1:
         0a:4b:ba:63:64:d8:21:b5:59:19:80:b8:d8:95:eb:7f:67:e1:
         0e:60:9c:8d:06:6c:c0:9d:48:db:5f:14:33:29:5f:e6:d5:41:
         b1:6f:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----