Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa
File:                     1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (raw, json)
Hash identifier:          wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=
Subject key identifier:   D6:F5:1F:61:AE:E8:86:85:5B:4B:01:A0:6B:12:12:60:D4:09:E2:B5
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       01942445029F0C71B098ED61D733C016E75F
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa
Signing time:             Wed 01 Jan 2025 23:48:09 +0000
ROA not before:           Wed 01 Jan 2025 23:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42037
IP address blocks:        185.155.182.0/24 maxlen: 24
                          2a00:8c40:238::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:02:9f:0c:71:b0:98:ed:61:d7:33:c0:16:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Jan  1 23:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d6f51f61aee886855b4b01a06b121260d409e2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:06:5c:f9:fb:8c:04:eb:50:1f:40:93:cf:
                    3f:86:2f:c1:59:20:bb:08:85:2c:e4:c4:8d:a6:46:
                    fe:c9:8e:fe:db:58:10:35:07:a8:6c:04:37:50:1f:
                    3f:cd:75:fe:54:60:55:72:86:99:ff:e9:68:dd:ee:
                    6c:c3:ce:b4:f9:a6:10:70:f7:a2:ea:87:c6:e5:8c:
                    28:b2:cb:03:5d:d5:6f:0b:df:e4:cb:56:05:9b:2d:
                    27:79:f7:0a:95:46:93:90:a1:4b:e9:60:00:04:9e:
                    1c:63:02:ac:6f:16:84:e9:1a:1b:e3:d9:95:80:45:
                    c0:03:e8:25:34:28:ba:b8:3e:1e:59:87:e0:e9:24:
                    cf:8f:12:ed:98:5b:02:8f:e8:12:f1:8b:0e:6f:58:
                    14:2f:84:c5:10:55:bf:33:79:9e:3a:c5:63:97:e8:
                    44:26:31:35:90:19:cd:e1:20:b7:07:c4:36:06:e9:
                    81:d2:40:91:5b:53:78:43:2d:91:d3:46:58:41:9c:
                    32:d7:d2:7a:01:c7:6c:39:39:46:4f:4a:b6:5e:9c:
                    2f:36:54:9e:48:5f:e5:cb:28:f6:3a:38:27:8e:a0:
                    51:35:5e:ad:a8:a8:a8:62:56:c3:b1:0b:ef:12:8c:
                    8c:c9:58:3f:cc:4b:00:08:50:92:15:fd:8c:08:bd:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F5:1F:61:AE:E8:86:85:5B:4B:01:A0:6B:12:12:60:D4:09:E2:B5
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.182.0/24
                IPv6:
                  2a00:8c40:238::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:af:25:2e:f3:a6:dd:17:1c:91:62:02:5a:d1:7d:59:af:7c:
         19:74:ce:2b:cd:ed:0d:e0:dc:47:6b:43:5d:a9:61:ed:bc:17:
         eb:34:b7:4e:14:79:cc:73:ff:54:c8:37:70:02:8b:ec:20:2a:
         8b:ab:6c:d7:e6:78:b2:e9:5e:2d:5f:7d:4a:0c:f8:b4:a0:31:
         5a:71:01:6d:57:d6:87:98:1f:bf:40:e9:59:3a:e6:f9:3f:db:
         2a:11:a3:9c:14:3f:d5:99:53:e1:80:a7:f6:6b:cd:ce:e4:cf:
         86:0d:74:74:6b:e6:0c:92:8f:f7:89:24:11:ca:28:77:d6:48:
         21:db:c5:c2:88:e9:eb:e5:7f:cf:ab:9e:e5:ee:db:20:6e:05:
         03:df:c8:4b:bd:2e:45:d2:30:0c:34:23:da:dd:86:d0:25:4c:
         68:48:7c:58:b0:16:cc:34:12:28:db:ff:59:4e:20:fa:0d:4f:
         f3:d2:19:ee:38:cb:60:e2:1c:dc:d1:b2:5b:a5:86:f5:df:5f:
         21:ed:c7:7d:27:c2:9a:8f:23:5d:d0:76:b3:d1:a4:12:92:d3:
         d5:cc:0c:d7:d5:33:27:a3:a1:63:41:89:96:8e:4e:db:76:f7:
         5b:44:1c:bb:42:02:42:6c:7f:86:06:e9:c3:aa:06:b3:cf:e9:
         3b:0c:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----