Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa
File:                     5XqYz3igdHBUJOarhV6UCk20p4g.roa (raw, json)
Hash identifier:          OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=
Subject key identifier:   E5:7A:98:CF:78:A0:74:70:54:24:E6:AB:85:5E:94:0A:4D:B4:A7:88
Certificate issuer:       /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial:       01942521964D4BFC26291CB1DA332FE830C6
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa
Signing time:             Thu 02 Jan 2025 03:49:05 +0000
ROA not before:           Thu 02 Jan 2025 03:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49101
IP address blocks:        46.36.32.0/19 maxlen: 24
                          2a02:25b0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:96:4d:4b:fc:26:29:1c:b1:da:33:2f:e8:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e57a98cf78a074705424e6ab855e940a4db4a788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:f5:22:32:e9:f4:6e:af:00:62:3e:b1:c8:
                    d3:9d:0d:70:12:e4:1d:de:02:ef:67:9d:56:39:62:
                    49:ce:74:6f:6f:e8:5f:b1:1a:f5:72:8c:da:a0:22:
                    b7:52:55:eb:39:66:fd:55:bc:fc:36:5d:fb:fe:aa:
                    ef:1b:97:99:a6:ba:ed:80:17:17:80:29:6c:11:09:
                    df:e0:36:87:5c:77:e9:eb:5b:0b:74:c9:6a:e6:2d:
                    f2:71:37:3a:ae:d3:bc:5c:c1:e0:7c:72:7d:b1:c2:
                    e3:f2:52:0b:8f:de:6a:77:3d:14:44:c0:6d:21:59:
                    23:3c:e3:9a:30:6f:6a:f2:52:6b:7e:63:78:2b:68:
                    3a:8a:2c:34:7f:12:05:b1:e5:42:57:fc:b1:bf:17:
                    c3:35:39:9a:24:0b:b8:1c:51:9f:80:3d:89:eb:4a:
                    e2:ac:7c:96:ba:50:41:7b:11:d3:c7:68:0c:d3:5d:
                    e3:6c:60:91:c1:e8:45:98:ea:e1:12:2e:03:38:44:
                    3d:1b:2f:c3:e1:06:31:6c:e4:c5:2e:d6:44:7c:6f:
                    93:fa:bd:e1:36:e4:17:56:66:73:26:9e:21:cd:9e:
                    a6:15:8c:2b:3c:9b:38:fe:c9:b9:24:10:aa:00:f0:
                    5a:0e:56:2d:37:72:00:8f:79:13:4e:3e:62:45:02:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:98:CF:78:A0:74:70:54:24:E6:AB:85:5E:94:0A:4D:B4:A7:88
            X509v3 Authority Key Identifier:
                keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/5XqYz3igdHBUJOarhV6UCk20p4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.36.32.0/19
                IPv6:
                  2a02:25b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:54:58:1a:53:f7:7d:86:c1:69:97:09:71:c0:63:79:1f:
         e9:82:bf:a3:c2:98:db:f1:f4:4f:2c:74:b3:0a:cd:c8:7c:fe:
         32:bb:c9:11:66:64:dc:47:1b:9c:06:e6:16:fe:da:79:a3:92:
         26:8c:1e:be:47:e0:aa:15:fb:9e:7b:e1:40:3e:f4:90:9e:e9:
         2f:7b:04:f4:76:f3:e7:7c:cc:f1:e2:bd:ee:13:f8:e7:f8:95:
         50:d6:53:fe:ff:dc:17:b2:54:9a:07:e1:62:ce:c4:2c:c3:5b:
         8a:23:ae:34:dc:a5:88:e9:9e:fe:37:ba:fa:ac:bb:cb:00:30:
         d1:d9:59:06:4e:31:5d:15:55:75:71:35:e4:fc:89:7b:3e:8d:
         9b:5c:5b:07:78:f7:3c:ea:f6:70:60:a6:36:de:64:91:e8:bd:
         12:4a:74:ba:44:d7:c6:bc:77:ad:8a:5b:fd:20:cd:81:27:b4:
         12:1e:6c:1b:2d:50:89:7a:a3:60:61:21:94:ca:37:eb:20:50:
         9b:ba:e5:57:0c:0a:e7:d9:37:10:6c:99:4e:14:68:17:50:9a:
         8e:bf:c4:68:55:d9:06:fd:ba:85:87:b9:b6:4a:ab:7e:b4:e7:
         c5:f9:cb:b9:c4:55:5b:58:84:58:fd:c3:3f:6e:03:5b:d1:cb:
         f8:b2:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----