Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/P79ilXjNNqLG_ABRYWZBAk8XzIM.roa
File:                     P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (raw, json)
Hash identifier:          z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=
Subject key identifier:   3F:BF:62:95:78:CD:36:A2:C6:FC:00:51:61:66:41:02:4F:17:CC:83
Certificate issuer:       /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial:       01942823FCBEFDA473C5E9E9D4EF0FCF19CC
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/P79ilXjNNqLG_ABRYWZBAk8XzIM.roa
Signing time:             Thu 02 Jan 2025 17:50:34 +0000
ROA not before:           Thu 02 Jan 2025 17:50:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21478
IP address blocks:        213.129.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:fc:be:fd:a4:73:c5:e9:e9:d4:ef:0f:cf:19:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
        Validity
            Not Before: Jan  2 17:50:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3fbf629578cd36a2c6fc0051616641024f17cc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:69:c5:db:4e:08:72:a8:16:e0:9a:3a:ce:
                    49:5e:a9:3e:74:a5:2f:59:2c:29:86:83:90:3d:a5:
                    a1:2d:e0:3a:f7:75:33:47:8e:a2:1d:a7:38:cc:57:
                    15:2d:42:f3:6f:9b:ec:f8:c0:70:e1:5e:ab:51:0c:
                    ca:fc:9e:39:f3:2a:45:8a:3f:24:26:66:c0:f6:f3:
                    f9:a1:64:36:7b:93:b9:96:15:31:49:57:1d:82:09:
                    af:2c:fb:91:f3:6d:c0:b6:ea:50:ff:9c:cc:d2:d0:
                    c5:7e:64:04:11:15:22:33:02:56:60:b9:71:7c:92:
                    7d:b3:1c:31:2c:bf:45:78:ee:e7:c5:53:1f:14:6b:
                    31:66:34:d8:08:90:8a:68:2e:b7:d0:34:3d:fe:54:
                    a5:dc:93:9e:8d:dd:d8:bb:34:03:d3:57:37:d9:99:
                    f0:42:d3:90:34:4a:d7:7f:d1:21:18:99:16:4b:52:
                    4d:e8:33:82:bd:20:70:fa:de:83:3d:94:02:cd:8d:
                    4c:a1:a8:35:bc:db:11:be:7c:24:87:48:69:36:30:
                    fb:46:7c:5d:a8:6d:6d:d3:a7:06:98:a8:1c:b3:e7:
                    89:57:0b:e9:0f:29:5a:2d:2e:08:02:15:ec:47:3b:
                    46:9d:f0:00:e8:19:45:32:6e:ac:4d:1a:9a:74:9d:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:62:95:78:CD:36:A2:C6:FC:00:51:61:66:41:02:4F:17:CC:83
            X509v3 Authority Key Identifier:
                keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/P79ilXjNNqLG_ABRYWZBAk8XzIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.129.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:63:c9:49:db:b4:0d:d9:09:80:55:96:5b:2f:6a:71:96:08:
         75:3f:ea:fb:95:f8:28:eb:9b:b0:e8:df:c4:dd:42:41:f8:ce:
         95:52:24:1b:26:4f:c7:14:04:ff:e0:12:70:a7:52:20:64:86:
         b0:c2:0d:03:2f:df:8e:8d:e0:cb:e8:e8:23:27:35:e7:92:a5:
         1f:72:2c:e5:d0:bf:30:e2:3d:44:d0:11:6d:47:74:9e:81:4d:
         ad:82:5d:7b:0c:98:83:f5:b2:61:84:c1:87:4d:9c:d9:33:6a:
         0b:a8:0b:a6:fc:be:d2:68:81:81:9b:08:27:99:de:5c:9a:1a:
         e6:5d:a6:a1:81:b9:4a:a0:f5:4d:59:6c:37:ca:31:6d:76:88:
         27:d5:30:32:49:2f:8a:0c:29:4c:20:0c:18:f7:90:61:54:b1:
         0b:99:a8:5b:31:d7:b9:61:3e:30:7e:d4:68:2e:4a:ed:82:a7:
         55:aa:a4:00:1c:17:cb:8c:de:34:da:dd:3e:03:5f:34:e0:8e:
         c7:a3:f2:47:5b:3b:65:84:bb:8a:b9:dc:48:5d:31:68:17:6e:
         fb:dc:e9:08:91:19:1f:6f:a3:8e:7a:32:e4:9e:72:e9:af:9f:
         30:ed:53:a0:18:6c:75:6c:cb:71:0f:ee:3e:8e:31:fa:c3:1d:
         7d:b7:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----