Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/9EqEs9kwmY_afaGGWiQxlVt0aF4.roa
File:                     9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (raw, json)
Hash identifier:          9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=
Subject key identifier:   F4:4A:84:B3:D9:30:99:8F:DA:7D:A1:86:5A:24:31:95:5B:74:68:5E
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       019421B1D13CEC58AA6B48CB244E6EC21E72
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/9EqEs9kwmY_afaGGWiQxlVt0aF4.roa
Signing time:             Wed 01 Jan 2025 11:48:09 +0000
ROA not before:           Wed 01 Jan 2025 11:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50293
IP address blocks:        193.39.195.0/24 maxlen: 24
                          2a10:e440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d1:3c:ec:58:aa:6b:48:cb:24:4e:6e:c2:1e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: Jan  1 11:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f44a84b3d930998fda7da1865a2431955b74685e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:e1:d7:b9:1f:6b:3a:54:5e:f9:f4:ea:70:
                    e7:c3:81:e3:80:5c:01:40:6d:79:19:f6:66:02:8a:
                    7d:32:41:fc:63:9b:ac:e4:47:01:9c:e8:58:b0:d1:
                    a4:b2:23:9d:57:a1:1a:f4:b6:51:1f:b2:94:84:cc:
                    da:00:45:4f:70:a0:92:26:cf:f8:69:88:ba:a9:70:
                    b1:7c:05:80:2a:05:31:8e:98:7b:8c:5c:35:4e:3e:
                    f7:c6:33:8b:d2:3c:a5:9d:60:1a:22:05:30:34:eb:
                    2b:4a:46:af:8e:11:45:ac:e4:45:8e:8f:8a:58:77:
                    f1:1f:c7:4d:c0:fe:2c:70:e5:5b:2f:60:f3:72:ff:
                    20:84:a5:fd:53:64:a2:8c:1d:78:59:10:08:ec:77:
                    c9:4a:53:77:80:ab:6b:a6:a8:ca:54:fc:49:59:c3:
                    98:21:fd:2d:5c:bd:85:eb:22:8e:68:49:2a:0a:68:
                    3f:58:25:93:09:07:85:02:42:09:05:52:f8:c7:83:
                    0a:26:e1:3e:6a:7e:6c:46:e5:5c:3e:ad:eb:85:3a:
                    02:b0:87:5b:6b:af:bb:2b:7d:af:8e:28:83:9f:f2:
                    5d:df:4a:df:26:fc:bb:b4:6f:47:67:9d:57:b2:68:
                    34:a6:a3:12:8c:95:3c:f1:11:27:45:7c:95:f1:66:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4A:84:B3:D9:30:99:8F:DA:7D:A1:86:5A:24:31:95:5B:74:68:5E
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/9EqEs9kwmY_afaGGWiQxlVt0aF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.195.0/24
                IPv6:
                  2a10:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:2b:70:cb:26:50:1f:8f:b2:fd:7d:bd:9b:e2:05:37:9f:52:
         e0:8d:f4:c3:01:91:a2:de:0e:a7:8e:bd:19:18:6d:a1:cc:40:
         9f:ba:46:8d:c6:19:74:d3:dd:b4:6b:95:1c:18:d9:21:ca:4c:
         18:10:55:2c:9f:7f:d2:94:b5:81:b4:5a:f1:83:2e:77:85:e9:
         74:73:c6:af:2f:b7:eb:b0:8c:12:2f:fc:56:27:1a:6f:1a:f8:
         50:d2:25:4b:dc:13:88:a8:a3:61:f9:07:2d:b5:cb:e2:e7:1b:
         43:c7:77:09:eb:2c:3c:de:a5:e0:66:92:39:d1:52:c4:47:1e:
         ab:85:2b:f2:45:ea:e2:d7:08:55:f9:d8:11:19:2c:d3:99:8f:
         a6:b4:5c:0b:4a:29:e9:ca:50:17:56:7b:45:05:ca:56:fb:8e:
         6c:8d:c2:1f:9c:00:a9:87:19:04:40:d6:58:eb:b6:fd:41:6d:
         ac:05:cc:aa:77:2f:24:8d:e4:77:64:c0:6e:55:01:f4:f2:12:
         e6:b6:1b:94:ad:3a:91:30:d8:41:8f:d6:3f:d8:a8:48:49:92:
         5a:01:d6:e4:b4:9a:05:14:2a:99:73:a5:73:6b:f0:90:24:3d:
         33:ac:9a:38:83:e5:75:d8:7d:91:35:0f:c0:85:04:7b:24:94:
         68:c5:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----