Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa
File:                     _iwCmsjTAlw634BVcFH9x4y6od0.roa (raw, json)
Hash identifier:          sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=
Subject key identifier:   FE:2C:02:9A:C8:D3:02:5C:3A:DF:80:55:70:51:FD:C7:8C:BA:A1:DD
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       0194228E01D4ABF541B2F63C55B551BE1663
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa
Signing time:             Wed 01 Jan 2025 15:48:39 +0000
ROA not before:           Wed 01 Jan 2025 15:48:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212417
IP address blocks:        37.77.136.0/21 maxlen: 24
                          2a09:9a00::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:01:d4:ab:f5:41:b2:f6:3c:55:b5:51:be:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: Jan  1 15:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe2c029ac8d3025c3adf80557051fdc78cbaa1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:e4:8d:a9:2f:a5:f9:77:70:f0:10:c3:df:
                    92:e9:88:91:3c:16:28:de:9e:c9:f7:9d:26:93:8f:
                    a5:5b:99:ce:1f:9e:af:b0:1e:15:34:d6:e2:7e:67:
                    95:b9:3d:e3:db:d5:48:5e:15:cc:80:0c:fd:06:97:
                    cf:43:3d:ed:5d:85:94:c9:35:93:79:a7:db:d2:d5:
                    c3:92:37:aa:d5:a5:de:6e:a9:b7:c4:f5:5c:54:98:
                    f7:d8:ea:56:45:06:98:4e:70:9b:d9:c9:70:12:2a:
                    f9:88:8f:80:aa:6e:9a:14:58:42:f9:bc:77:e7:76:
                    2d:49:22:ae:e6:b9:fb:ad:1f:d0:75:b1:d8:29:a5:
                    a4:8e:77:b7:b7:00:12:26:61:9b:c9:5c:ec:d3:0b:
                    31:8d:1b:cf:4e:70:bc:71:71:58:43:55:0c:bd:62:
                    75:e8:ee:f6:75:6c:97:8a:76:ae:d1:64:14:68:97:
                    e1:70:c4:60:fc:77:1f:d6:b2:b1:13:d5:e0:b3:fa:
                    ac:21:c7:62:20:2f:cf:26:10:6b:05:28:c2:07:63:
                    2e:cb:62:c2:d0:04:e7:24:67:ec:1e:92:36:21:7e:
                    ca:00:b3:88:1c:91:01:53:aa:53:f9:80:2d:68:c0:
                    c8:f2:84:5a:48:17:1c:53:e5:42:63:c1:40:91:da:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2C:02:9A:C8:D3:02:5C:3A:DF:80:55:70:51:FD:C7:8C:BA:A1:DD
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.136.0/21
                IPv6:
                  2a09:9a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:1f:ec:48:5a:ac:8c:99:7c:c1:1d:82:78:f2:65:16:23:
         59:1b:3e:32:72:8e:bc:1d:cc:4f:a5:76:a9:eb:bb:cc:0b:f8:
         32:a2:28:04:76:18:12:bd:86:d9:d8:c6:ca:2e:07:15:3b:39:
         bb:77:91:4d:68:24:08:c0:81:d1:2b:5c:46:c3:34:d1:6c:fe:
         5b:c6:4f:0b:40:13:ef:5c:38:7a:8e:6f:e1:2f:b2:29:ce:bc:
         8c:8e:7f:10:d2:14:28:a2:d7:08:2d:fe:4d:db:3c:8e:96:fb:
         93:88:27:44:58:0c:5f:48:5d:b0:4c:7f:4f:e5:dc:45:80:6b:
         1f:f1:79:c2:af:bd:86:0c:bf:73:d2:e7:da:37:ae:e3:45:40:
         88:ef:d0:5c:72:2d:dd:02:fa:f2:65:bf:50:8b:32:fb:57:c6:
         47:83:84:f8:d7:44:43:11:c5:04:7a:7d:fc:47:9d:c7:01:e4:
         40:f9:db:4f:03:31:fc:af:27:5e:d1:b6:95:47:28:b0:80:cd:
         ef:36:57:b5:c7:00:91:e8:b6:fe:59:f2:01:c8:77:17:dd:42:
         de:2b:f5:77:db:58:68:43:ef:86:ef:e6:00:41:10:3c:40:1e:
         f0:3a:e0:bf:e3:06:0f:7c:16:06:a3:66:9d:da:ea:06:d0:ae:
         92:40:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----