Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/Bau5NB87xp4G_sK_pyp-Qe_g9KQ.roa
File:                     Bau5NB87xp4G_sK_pyp-Qe_g9KQ.roa (raw, json)
Hash identifier:          EsvvIk485f44JEflqBQaLWasjostzivyvUes3GWmJiY=
Subject key identifier:   05:AB:B9:34:1F:3B:C6:9E:06:FE:C2:BF:A7:2A:7E:41:EF:E0:F4:A4
Certificate issuer:       /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial:       01942444E29A312BD5D92686232C442B2F94
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/Bau5NB87xp4G_sK_pyp-Qe_g9KQ.roa
Signing time:             Wed 01 Jan 2025 23:48:01 +0000
ROA not before:           Wed 01 Jan 2025 23:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50643
IP address blocks:        195.191.200.0/23 maxlen: 24
                          2001:678:b4c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:e2:9a:31:2b:d5:d9:26:86:23:2c:44:2b:2f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
        Validity
            Not Before: Jan  1 23:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05abb9341f3bc69e06fec2bfa72a7e41efe0f4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:56:ca:8f:eb:f5:f2:04:81:1f:df:61:7c:
                    84:4a:5b:52:fc:c4:46:cc:6f:2b:af:fd:77:56:4c:
                    f1:dc:5f:70:b1:35:96:39:9b:9d:2f:14:71:f7:90:
                    da:ac:ab:35:72:51:c0:57:cb:af:24:c4:8d:30:d1:
                    61:24:16:81:52:82:b3:e0:13:b0:68:4e:e9:0c:e8:
                    05:6f:02:01:94:23:5e:6c:c5:17:0f:2e:3a:64:d1:
                    2e:2d:da:c3:d0:2e:95:6f:89:f7:37:52:1e:aa:96:
                    ef:73:31:17:91:f0:65:72:43:ff:c5:4a:7f:3a:0d:
                    79:15:81:a1:d4:e1:01:18:2e:83:56:f4:cf:6c:cc:
                    63:25:1b:fc:39:c7:33:88:cd:e6:1f:a4:2d:80:51:
                    66:9f:14:e7:f1:b3:c2:b2:1f:45:62:e1:a9:1d:5a:
                    90:42:b6:89:ce:1a:31:b1:a0:1f:92:4e:ff:9e:a0:
                    21:b3:75:13:5f:ba:b7:60:8c:12:2b:1e:7a:6c:dd:
                    0e:6e:22:da:9b:e8:44:6f:b0:f3:b3:6d:00:23:f1:
                    2b:95:c6:d5:d1:4d:81:e2:72:f4:76:61:a4:91:b8:
                    53:be:8e:1f:08:63:2c:c4:8c:15:f3:d5:97:5d:13:
                    1a:2f:94:b5:d1:ae:50:7e:1d:c5:76:e1:76:8d:ac:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:B9:34:1F:3B:C6:9E:06:FE:C2:BF:A7:2A:7E:41:EF:E0:F4:A4
            X509v3 Authority Key Identifier:
                keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/Bau5NB87xp4G_sK_pyp-Qe_g9KQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.191.200.0/23
                IPv6:
                  2001:678:b4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:40:4e:62:7c:d9:81:9a:ec:35:a1:b2:4e:8f:43:3b:67:
         b6:89:5c:9c:34:78:3c:fb:1c:b0:47:4c:89:34:1c:a7:a6:31:
         5a:eb:f9:1f:29:d7:1e:87:f4:c7:9e:8e:7f:88:df:1e:93:67:
         98:22:a1:1d:39:7e:c4:da:3a:25:f8:57:14:99:5f:dc:93:3d:
         15:9a:81:93:c0:a0:84:9b:68:31:e3:46:d5:88:5e:07:f3:1b:
         78:7c:23:7a:5a:c1:5d:00:0f:f0:54:57:48:20:75:f9:3b:47:
         5e:b1:9e:91:d6:3b:c5:da:2c:89:b6:d9:4e:87:2e:96:9b:4b:
         12:f3:8a:ee:76:da:7a:03:2d:14:a2:1f:1f:38:ee:2d:7a:1b:
         5e:00:10:6c:f4:cc:15:7e:77:96:c7:cd:a5:57:7a:31:6a:34:
         23:f3:00:79:cb:77:4c:b9:45:da:6b:d5:27:62:3f:47:dc:f7:
         b4:a3:ae:c0:ae:3c:4d:07:6e:00:b0:52:a4:52:bd:5f:fd:0c:
         ca:3c:3e:18:10:11:4f:ac:c4:23:a9:3e:fc:0e:e1:e7:3d:2b:
         36:c5:7e:86:59:d6:ca:b8:77:d3:4c:00:e7:54:c9:9d:74:87:
         c3:d7:07:42:96:52:aa:77:fc:1e:bf:1d:40:5f:31:01:54:1d:
         02:15:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----