Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/BP3U6kFnmdq-Ooz7okVHVreJwX4.roa
File:                     BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (raw, json)
Hash identifier:          8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=
Subject key identifier:   04:FD:D4:EA:41:67:99:DA:BE:3A:8C:FB:A2:45:47:56:B7:89:C1:7E
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       019425FC3566E2B0197189B36B547F86251A
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/BP3U6kFnmdq-Ooz7okVHVreJwX4.roa
Signing time:             Thu 02 Jan 2025 07:47:53 +0000
ROA not before:           Thu 02 Jan 2025 07:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201115
IP address blocks:        45.157.175.0/24 maxlen: 24
                          2a13:3840::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:35:66:e2:b0:19:71:89:b3:6b:54:7f:86:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Jan  2 07:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04fdd4ea416799dabe3a8cfba2454756b789c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:eb:9a:ec:89:ea:fd:c6:00:87:58:dc:e6:
                    82:72:20:c2:a0:7d:57:59:40:7e:83:80:36:c2:32:
                    50:a2:b6:25:ea:56:3e:b1:04:db:45:31:6d:b8:39:
                    74:5a:f3:f6:f9:03:58:c8:03:01:e2:3e:6f:e8:3e:
                    5e:ee:c4:7f:50:b6:c1:3e:fc:c9:08:38:fa:c4:87:
                    1f:90:33:db:c8:b3:f5:6f:a9:2f:e9:2e:ae:6c:b5:
                    15:ca:1f:21:68:c5:d7:3c:5a:86:9f:f3:31:c0:36:
                    e0:db:8d:c1:79:04:a6:bb:65:cb:9e:e7:46:9f:9f:
                    a3:a2:f0:01:54:a2:62:ae:00:d9:37:db:f4:d9:6d:
                    0c:6f:0f:df:b0:eb:e6:08:53:9c:f8:b2:ad:73:58:
                    af:46:6d:23:cd:19:43:46:76:21:ed:05:7a:80:c9:
                    d9:3e:d6:4b:10:c6:b8:93:20:2f:8e:f8:8f:b1:a8:
                    1e:b8:4e:ee:d1:a3:a0:76:d9:c9:bd:66:d2:5c:65:
                    83:15:97:8c:62:32:f3:0c:63:35:be:5a:75:32:d1:
                    ba:04:78:e0:28:d2:e7:6f:ee:99:b0:ec:e1:29:10:
                    23:48:8b:3b:11:14:44:8e:42:e4:28:2d:40:65:18:
                    de:dc:a8:2b:32:0e:17:1d:3b:aa:93:22:a4:5b:61:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:D4:EA:41:67:99:DA:BE:3A:8C:FB:A2:45:47:56:B7:89:C1:7E
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/BP3U6kFnmdq-Ooz7okVHVreJwX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.175.0/24
                IPv6:
                  2a13:3840::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:8f:6e:8f:90:13:6e:7a:11:a3:29:23:a3:c8:e4:20:fb:
         eb:f6:bb:24:2d:54:1b:1a:f7:6f:f6:17:da:57:91:63:2c:64:
         34:f7:21:52:5c:1c:a8:3a:ed:9d:ba:36:2e:61:6f:2b:da:a5:
         9d:69:09:2a:6a:da:a5:b5:df:9b:91:7e:fa:37:84:e3:d9:d5:
         c5:1d:ad:fd:a3:28:52:44:28:34:38:59:db:ae:52:9c:f2:ac:
         0c:0d:44:07:33:1a:87:e4:05:7a:a6:2b:3c:d3:18:65:1a:ad:
         54:7d:c9:22:78:34:cc:48:f0:49:5f:13:af:14:48:a0:a0:b7:
         63:8a:ba:08:92:38:31:63:66:1c:21:69:6a:e9:d4:15:b5:28:
         88:0b:f8:c5:03:36:90:16:8d:5d:21:bd:0b:6b:45:e9:f2:25:
         8a:84:cc:c5:e3:b9:8b:d7:b3:02:dd:ad:e1:7b:ad:d2:61:2a:
         3b:ac:91:b4:ad:27:b2:c9:bf:86:30:c2:ad:22:4c:f7:15:ae:
         59:89:18:79:7b:a6:e6:5f:e0:7a:9e:b8:c6:85:be:5a:3c:6a:
         42:54:c9:64:f8:3b:70:d7:24:8b:5f:8d:38:f4:c6:18:c1:b8:
         ba:d4:68:c3:19:5e:31:ff:db:9e:1f:a2:88:d5:9e:be:12:20:
         8f:c7:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----