Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa
File:                     pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (raw, json)
Hash identifier:          4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=
Subject key identifier:   A7:0E:08:0F:42:6F:50:2B:34:D4:1B:28:E0:8E:DB:F1:A4:02:DC:A9
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       019426D955B6EF2A6D51E90A6F6CA5D9CA3A
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa
Signing time:             Thu 02 Jan 2025 11:49:24 +0000
ROA not before:           Thu 02 Jan 2025 11:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9136
IP address blocks:        143.163.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:55:b6:ef:2a:6d:51:e9:0a:6f:6c:a5:d9:ca:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Jan  2 11:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a70e080f426f502b34d41b28e08edbf1a402dca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:5d:e0:41:78:cd:ef:20:75:4b:20:cf:15:
                    43:54:e7:31:82:5a:e9:6b:58:65:c3:94:d8:b7:2c:
                    d4:88:9b:39:b0:78:ae:67:16:5c:6a:ac:80:37:fb:
                    02:3e:84:20:1c:1f:52:5a:24:ae:6c:24:8a:4c:20:
                    00:38:82:6f:b0:88:66:c5:ba:fb:c9:4d:0c:1d:3f:
                    fa:56:6e:98:42:39:3e:1c:e8:57:b8:53:2d:5c:78:
                    b6:14:28:a1:43:1b:33:d6:3a:5f:b5:9a:4f:9e:7b:
                    f4:4a:44:f1:78:a2:f5:14:ed:0d:62:a0:7b:01:88:
                    75:52:d1:44:a3:fc:97:fb:c4:08:b1:2e:38:88:20:
                    64:a1:63:76:1d:f5:30:39:7a:6c:05:e3:3d:76:ab:
                    65:09:15:db:d6:ed:91:a8:75:08:05:ed:2f:dc:5a:
                    07:ec:66:f1:2e:7b:d8:0f:1c:b0:a8:ea:5a:ae:22:
                    a3:b3:26:c8:2d:92:e7:05:0b:25:0f:d5:0b:6d:14:
                    b1:a6:67:cd:7d:fa:8e:78:dc:0f:1a:b1:1b:a6:ee:
                    78:0a:48:5c:33:cf:c8:f4:77:56:97:ae:e6:ea:45:
                    0c:94:38:db:fa:b1:6a:2d:d5:c8:aa:71:f3:ad:36:
                    99:4c:6c:ef:8b:b4:d1:6a:96:b9:20:15:ea:b9:86:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0E:08:0F:42:6F:50:2B:34:D4:1B:28:E0:8E:DB:F1:A4:02:DC:A9
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.163.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:a5:02:89:fc:42:b8:bc:e1:c5:39:6d:5f:71:3d:11:da:
         ed:a0:10:f0:66:73:1d:4a:57:1c:84:94:dc:2c:b8:2c:bb:1d:
         04:87:5a:1c:4a:62:85:34:73:30:96:c2:39:ff:98:79:0a:cd:
         7b:18:48:0f:dd:e2:c6:3d:e2:12:6b:be:1d:f6:92:c1:fc:26:
         c1:bd:72:a0:66:bc:2a:a9:5a:e6:3c:1b:95:d1:ab:72:1f:f8:
         10:7e:9d:77:22:68:9e:fb:73:9b:a9:76:f4:8c:a2:af:da:ef:
         8f:a2:92:38:59:a5:d3:01:bb:3f:5a:c4:e5:07:de:8c:92:af:
         30:81:6f:2e:55:ff:72:e6:fa:27:5a:57:8a:d1:20:15:fa:65:
         f1:4c:c3:45:d0:6a:07:46:89:a6:4b:18:66:02:b1:e7:b6:b9:
         80:1d:ec:21:19:7b:92:11:1e:86:43:6a:dd:94:e9:68:80:d1:
         db:b6:b6:43:03:35:ee:c2:84:ec:42:5d:e1:22:5f:5a:1c:ef:
         e4:0d:dd:cf:b3:72:ab:45:48:f5:eb:c4:fd:ac:98:c5:4c:57:
         c8:52:0d:b7:53:0e:a6:0e:75:3e:28:df:47:b0:3a:30:50:e8:
         65:31:88:4b:6d:c3:1a:7b:76:a3:b0:8b:c3:ad:f2:66:63:dc:
         a4:aa:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----