Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/92pgx6QNH23m1sb49k-ykMttkN0.roa
File:                     92pgx6QNH23m1sb49k-ykMttkN0.roa (raw, json)
Hash identifier:          6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=
Subject key identifier:   F7:6A:60:C7:A4:0D:1F:6D:E6:D6:C6:F8:F6:4F:B2:90:CB:6D:90:DD
Certificate issuer:       /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial:       019425FBF47769C9BBC363EC1AE0674AF4CC
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/92pgx6QNH23m1sb49k-ykMttkN0.roa
Signing time:             Thu 02 Jan 2025 07:47:36 +0000
ROA not before:           Thu 02 Jan 2025 07:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64266
IP address blocks:        176.115.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fb:f4:77:69:c9:bb:c3:63:ec:1a:e0:67:4a:f4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
        Validity
            Not Before: Jan  2 07:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f76a60c7a40d1f6de6d6c6f8f64fb290cb6d90dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:35:15:5f:90:81:db:1c:3b:16:6d:72:58:
                    a9:be:7e:7f:33:cd:d6:a2:45:bf:bf:c7:b6:45:e7:
                    10:d6:00:8d:cf:ba:93:fc:10:cd:aa:a7:18:d5:84:
                    5d:8d:a7:c4:f7:73:e8:ca:8b:ab:77:0b:c6:8b:5d:
                    a9:6e:25:91:26:49:16:09:ba:2a:b0:99:d7:17:4c:
                    4d:76:38:58:1a:7f:b9:85:0c:f4:c4:dd:57:9f:77:
                    fd:7e:2d:04:c8:3e:b7:6c:da:6e:89:95:1c:4f:87:
                    21:97:c3:4a:fd:0d:35:ca:f9:05:42:4a:b2:ee:8c:
                    5e:88:83:54:b4:a2:37:6c:05:91:61:08:b3:97:c6:
                    42:bc:f2:76:63:a7:f8:17:21:71:96:c8:74:02:08:
                    95:f9:03:8b:66:62:9c:75:db:2c:14:e2:03:17:a0:
                    fb:97:c1:a0:69:12:9f:69:46:9f:f0:8e:7d:b2:38:
                    30:7d:df:20:22:39:24:88:6b:1e:8a:d5:d9:9d:20:
                    db:ca:9f:9a:81:b4:ff:3e:87:c1:80:fa:f8:46:9b:
                    a3:73:8c:58:b3:fa:9f:57:fe:87:ff:9d:b6:13:8d:
                    9c:fc:dc:1d:a7:f2:81:d4:04:57:d6:75:90:3b:36:
                    9c:a8:0c:18:b4:3d:3b:d9:96:9d:cc:b2:18:57:f4:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:60:C7:A4:0D:1F:6D:E6:D6:C6:F8:F6:4F:B2:90:CB:6D:90:DD
            X509v3 Authority Key Identifier:
                keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/92pgx6QNH23m1sb49k-ykMttkN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.115.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:13:59:34:bd:59:f9:0b:f0:be:07:3a:cf:10:9a:31:e6:
         fd:ac:0f:1f:76:25:fc:a8:10:32:23:1e:66:e7:07:1b:f8:da:
         79:6e:f2:a0:ac:79:5d:20:e3:f6:d4:1c:af:3a:9a:5c:55:65:
         b1:cd:69:28:8f:1b:b8:92:d2:e3:c2:b1:de:7b:b3:61:c2:3d:
         5f:73:5e:f3:40:97:2e:5f:58:69:29:a7:d2:47:66:cf:6b:28:
         93:a2:01:a2:43:65:1e:3b:7f:3e:5a:d4:28:95:50:57:b1:ca:
         d9:30:a9:5f:dc:e5:22:5c:63:62:8b:91:6f:e2:84:aa:0f:12:
         93:bc:27:2e:e3:a3:15:3b:4b:7b:b8:90:44:35:d8:89:5c:8b:
         c3:24:b2:93:26:cc:07:27:d2:cc:99:2a:c0:39:43:f2:d9:55:
         ad:9c:d7:d7:f8:c8:7a:d5:41:9f:06:94:2f:82:f6:21:62:5a:
         c5:bc:b5:0b:8a:c7:89:47:60:63:07:6c:22:90:ef:e6:66:e3:
         88:f3:ae:18:e2:f8:d3:c5:24:86:76:15:94:6e:ee:87:b0:f1:
         08:7c:ab:bd:14:9a:6b:dc:55:09:1b:67:94:8e:3c:8a:5e:bb:
         50:15:5f:81:3a:a0:55:84:a1:78:84:3d:19:2d:59:28:62:a2:
         f5:0b:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----