Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa
File:                     J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (raw, json)
Hash identifier:          Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=
Subject key identifier:   27:81:D6:DA:66:12:E9:A5:3A:2D:F4:11:80:E9:58:44:36:CB:A7:99
Certificate issuer:       /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial:       0194252195D75DCDA4A2CF46A1EABCF062A3
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa
Signing time:             Thu 02 Jan 2025 03:49:05 +0000
ROA not before:           Thu 02 Jan 2025 03:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57824
IP address blocks:        176.109.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:95:d7:5d:cd:a4:a2:cf:46:a1:ea:bc:f0:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2781d6da6612e9a53a2df41180e9584436cba799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:4b:42:c0:a7:37:02:36:07:2f:b7:e9:0b:
                    cd:34:95:ed:c4:80:88:58:f2:b1:48:ab:ce:d2:81:
                    c9:48:7b:ed:f9:80:dc:2b:72:c1:43:f8:c8:cb:30:
                    cb:66:72:20:a3:0f:e5:37:89:f6:83:b9:05:34:60:
                    68:0d:13:a1:3e:d3:32:e6:ca:6c:d0:54:ee:84:57:
                    1a:9e:65:1c:b7:42:df:9d:76:4f:96:d3:a0:c9:36:
                    bf:46:fc:d6:3e:6d:8c:5f:31:d9:e1:29:75:51:40:
                    42:f1:73:69:44:94:87:7e:53:a2:66:ee:d8:6d:79:
                    be:d9:90:14:8f:da:27:d9:da:11:d0:1c:f8:86:fe:
                    a5:74:8e:9c:f2:86:ae:84:68:5c:fe:c6:4e:3b:c3:
                    3d:8f:05:a3:9c:7e:5f:ec:af:25:87:52:ea:aa:97:
                    dc:a3:5d:78:d9:46:c2:b3:7c:9a:51:a6:b1:b0:19:
                    06:9b:0c:11:a5:5b:ba:15:96:2b:d4:92:60:e6:5a:
                    fe:a6:41:cb:41:f5:28:84:10:e5:25:69:e6:6e:d1:
                    80:f6:de:e7:fd:12:1f:3b:12:0a:a5:c3:14:c1:5d:
                    23:ea:d7:ac:e0:f7:56:45:96:3a:ef:fe:fd:26:84:
                    e3:06:a8:7c:f7:36:56:4f:26:79:12:57:b9:01:8f:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:D6:DA:66:12:E9:A5:3A:2D:F4:11:80:E9:58:44:36:CB:A7:99
            X509v3 Authority Key Identifier:
                keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.109.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:30:52:13:54:39:b0:72:17:bc:f6:27:dd:50:a5:e4:32:
         10:2c:9d:d0:7b:0d:15:da:2e:33:a1:4b:d6:4b:71:85:72:d6:
         2a:43:d6:a5:f3:ab:1b:aa:93:fc:57:90:9d:91:80:82:dc:84:
         5d:81:8d:a5:ac:86:01:fb:52:5e:17:43:c9:f2:5f:29:21:76:
         ef:47:3e:06:eb:e4:6c:13:93:40:b9:e1:5e:3e:cb:7d:08:57:
         bd:f9:aa:eb:1b:e9:00:0a:8a:56:bd:13:94:24:ff:1b:2d:bf:
         3d:dc:e2:d0:cb:18:fd:56:66:3c:73:89:24:d3:a6:e4:92:7b:
         48:91:69:af:70:28:28:70:3c:43:a6:e2:e5:b7:3d:f3:0c:a8:
         5f:20:00:da:46:41:06:9e:28:9e:63:75:d5:75:09:b3:59:cd:
         77:40:38:a3:3d:81:49:1d:c7:3d:60:97:db:59:d4:2a:eb:0e:
         81:89:af:89:e8:7d:84:55:ac:97:a2:a4:df:a2:8b:a6:bd:57:
         6b:83:10:13:f0:cd:2c:c0:01:34:bd:8d:5b:0f:60:ab:35:50:
         e8:48:90:72:52:42:b5:26:aa:8c:40:88:ca:1b:f4:16:35:32:
         4e:e6:a7:24:bf:14:10:a7:19:f0:d3:cc:29:f5:d9:15:68:52:
         d0:c9:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----