Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/wTSz4RaVBPCmK0HhyQREVFlvLYM.roa
File:                     wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (raw, json)
Hash identifier:          wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=
Subject key identifier:   C1:34:B3:E1:16:95:04:F0:A6:2B:41:E1:C9:04:44:54:59:6F:2D:83
Certificate issuer:       /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial:       019423D77BD1D4E389D6D07A8A52D2C070C3
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/wTSz4RaVBPCmK0HhyQREVFlvLYM.roa
Signing time:             Wed 01 Jan 2025 21:48:32 +0000
ROA not before:           Wed 01 Jan 2025 21:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3330
IP address blocks:        195.149.75.0/24 maxlen: 24
                          2001:67c:29cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:7b:d1:d4:e3:89:d6:d0:7a:8a:52:d2:c0:70:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
        Validity
            Not Before: Jan  1 21:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c134b3e1169504f0a62b41e1c9044454596f2d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:54:15:49:3f:9f:65:1c:6f:97:7c:ae:ae:
                    0d:e1:a5:8f:7a:d5:b7:71:9d:5a:2f:44:f9:50:31:
                    8a:fa:f8:09:69:2e:d2:6d:27:af:84:05:82:25:1e:
                    f6:16:73:5d:30:be:9a:42:9b:b2:1e:be:99:c1:be:
                    05:8d:ad:73:85:36:52:0d:44:90:f0:aa:ed:95:3f:
                    52:4d:c4:7d:59:3d:5f:b1:38:ca:a3:21:5e:a7:65:
                    e8:40:d7:7f:eb:11:8d:45:f8:af:09:3c:22:0f:72:
                    85:19:94:69:91:be:86:67:25:81:a9:7b:88:07:12:
                    6c:a6:1f:19:16:9e:a3:ac:79:f5:a6:47:18:b6:c9:
                    7f:68:d4:51:0c:91:5c:0f:09:9e:10:c2:4c:72:27:
                    76:94:7b:7f:89:c3:99:c8:5b:5e:03:30:de:81:93:
                    a9:f5:c8:b6:1d:db:75:9a:b9:4c:ed:e0:5d:28:8d:
                    31:da:98:dd:76:e3:f7:e8:f4:b4:65:21:73:ad:64:
                    4c:fc:6e:83:f7:7a:c3:52:95:e7:78:50:2a:bf:3b:
                    aa:e0:12:66:58:be:c0:d7:f1:d3:1e:fa:4f:b5:0e:
                    a7:67:3a:b9:a7:03:f6:1e:19:5b:4f:4f:c8:8c:27:
                    16:fb:e7:a6:c2:16:66:27:34:75:22:17:3c:3d:26:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:B3:E1:16:95:04:F0:A6:2B:41:E1:C9:04:44:54:59:6F:2D:83
            X509v3 Authority Key Identifier:
                keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/wTSz4RaVBPCmK0HhyQREVFlvLYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.75.0/24
                IPv6:
                  2001:67c:29cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:96:56:55:f7:2f:e6:30:da:c4:6f:02:ad:c1:c5:67:b7:cc:
         e1:6d:69:af:a3:a7:d5:3b:c9:05:5c:74:65:e2:17:f7:27:f5:
         36:24:19:6e:12:0f:9f:9e:ad:6d:09:b2:7d:f8:22:c1:42:dc:
         5e:16:f7:68:f5:b0:52:4a:4c:8c:cb:a7:5f:5f:d7:23:b7:cc:
         92:75:bf:c8:d1:5a:39:f1:8e:0c:b2:c4:c0:dd:89:61:e0:3b:
         79:0d:c7:99:13:cb:15:3a:ea:1c:27:0d:a6:05:f9:88:ac:78:
         54:3b:7a:1a:60:f3:16:ff:48:8b:41:16:91:42:40:e8:1a:bc:
         c3:45:a2:08:9a:b9:6d:d9:c1:a3:c3:5b:3d:27:40:00:41:a7:
         84:53:49:42:23:2c:af:be:36:7c:74:f8:7d:e9:4b:5f:ec:1c:
         79:ec:83:9b:3f:4a:91:3d:e4:51:2f:2d:57:ea:9b:9f:71:40:
         73:53:70:31:68:24:46:f4:9c:bd:2e:83:50:6c:96:14:fd:b7:
         e6:c8:57:20:85:45:93:f6:9e:85:2d:a1:5a:96:35:e3:24:3d:
         1a:64:5f:b8:a1:a1:fc:14:7c:a1:79:b7:f4:b7:6b:b7:2e:e1:
         38:dd:67:ab:65:42:95:ac:a7:6b:1e:c7:9e:60:e0:22:92:9e:
         09:08:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----