Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/FGsyv-avFXn_iimzPOzOCwcPyYs.roa
File:                     FGsyv-avFXn_iimzPOzOCwcPyYs.roa (raw, json)
Hash identifier:          x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=
Subject key identifier:   14:6B:32:BF:E6:AF:15:79:FF:8A:29:B3:3C:EC:CE:0B:07:0F:C9:8B
Certificate issuer:       /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial:       019426D999FB329FEE985C22407D0D513801
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/FGsyv-avFXn_iimzPOzOCwcPyYs.roa
Signing time:             Thu 02 Jan 2025 11:49:42 +0000
ROA not before:           Thu 02 Jan 2025 11:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62254
IP address blocks:        185.41.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:99:fb:32:9f:ee:98:5c:22:40:7d:0d:51:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
        Validity
            Not Before: Jan  2 11:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=146b32bfe6af1579ff8a29b33cecce0b070fc98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4a:d4:7d:be:91:26:59:0a:5f:33:58:db:ef:
                    fb:72:18:1b:dc:d2:ea:a9:38:a2:14:6c:ef:1b:c1:
                    df:d1:f2:ca:4d:33:41:22:e2:a5:21:b6:88:02:75:
                    7e:95:94:be:f8:b2:c6:6e:72:ee:1c:cf:3b:71:ad:
                    0b:63:1d:9a:10:e0:83:38:97:48:32:35:98:9b:50:
                    e1:2d:bf:c5:74:5e:62:17:f9:f8:5a:9b:3f:13:5f:
                    75:99:97:7b:9e:20:db:52:3d:f4:ef:af:cd:67:78:
                    96:d9:04:df:cc:6b:06:d3:4f:69:c5:c4:42:f5:6d:
                    d5:d3:b8:90:3f:75:70:97:7f:60:bd:45:c2:9f:77:
                    0a:c9:9b:1a:88:c1:a3:c6:3c:38:08:96:71:e0:79:
                    1d:f8:3a:8a:24:fe:14:86:24:df:85:7e:31:e1:95:
                    e1:94:62:b9:58:d7:e4:13:09:85:34:86:a5:a7:60:
                    e4:35:c8:bc:b4:7d:6f:0d:e5:73:f6:b5:07:03:26:
                    ab:fd:c1:de:ba:97:e3:14:a7:50:62:0d:4e:89:56:
                    f2:a9:2a:6b:b5:17:62:d5:53:b7:c3:dc:28:ea:fe:
                    db:76:d2:74:19:46:3d:f0:94:12:ba:9a:f6:b0:4b:
                    ad:b0:62:3b:5c:bf:69:11:90:ce:96:94:be:99:c0:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:32:BF:E6:AF:15:79:FF:8A:29:B3:3C:EC:CE:0B:07:0F:C9:8B
            X509v3 Authority Key Identifier:
                keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/FGsyv-avFXn_iimzPOzOCwcPyYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:8e:45:c4:b2:8d:98:f4:bf:ac:ea:06:b1:76:e6:f7:6b:
         0c:f5:04:2d:57:57:93:19:bd:01:db:71:36:75:bf:94:ad:a4:
         75:0d:6b:3d:4e:b4:e8:a5:60:cb:81:48:90:64:1e:da:44:58:
         82:ac:aa:5a:0a:b5:73:73:c7:c2:e0:11:98:50:29:89:ca:c8:
         d3:bf:3b:f7:e3:3a:f2:bd:b9:51:cf:63:cc:0d:51:32:90:8d:
         a4:67:41:15:d2:41:bf:c2:47:b2:3f:82:3a:aa:45:27:df:98:
         3c:6e:6c:d3:f2:4f:17:6b:2f:d4:76:92:b4:d0:0c:fa:9d:49:
         fb:f2:dd:2d:0e:d1:c2:1b:0e:d2:8e:5e:9d:73:e7:c9:86:0e:
         32:fb:08:6d:62:5b:27:e9:f3:22:1c:6b:05:ad:d6:e5:b5:b2:
         c6:13:6d:16:2b:2a:00:a5:00:a9:37:ab:cb:09:47:3c:a2:1b:
         5e:cc:13:aa:68:98:a5:ff:5e:11:40:26:c6:d5:d1:24:9b:f6:
         f4:99:de:f0:ed:4c:6e:3d:b6:29:cd:72:5a:39:e2:4b:c2:83:
         e4:9a:96:5b:38:c0:55:b9:e5:14:70:ff:9c:41:6c:26:4d:03:
         e9:d0:45:e9:00:1c:85:8b:6d:8a:d1:21:9c:87:5d:bd:6a:21:
         11:73:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----