Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa
File:                     Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (raw, json)
Hash identifier:          cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=
Subject key identifier:   16:FC:7F:8C:90:9D:4C:5F:E9:BE:ED:8B:6D:65:37:2E:61:F4:1F:CA
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       019424450301A5E1F3ACEB2E2E12EB776849
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa
Signing time:             Wed 01 Jan 2025 23:48:10 +0000
ROA not before:           Wed 01 Jan 2025 23:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202751
IP address blocks:        185.155.180.0/24 maxlen: 24
                          2a00:8c40:239::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:03:01:a5:e1:f3:ac:eb:2e:2e:12:eb:77:68:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Jan  1 23:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16fc7f8c909d4c5fe9beed8b6d65372e61f41fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:70:4f:c7:c2:05:37:ce:94:7d:90:4c:25:
                    f6:11:e7:d3:6b:d1:86:9f:28:b0:b7:01:e1:f6:9a:
                    b0:5a:49:8e:7f:12:65:17:71:a7:fb:35:8f:bd:37:
                    13:d3:1e:d6:8e:94:2a:c5:28:10:17:29:70:1a:c6:
                    11:be:6d:97:62:29:9e:09:92:ec:dc:8c:6d:77:2a:
                    ab:a7:77:f1:51:8b:bb:9b:05:78:50:e4:a3:65:8b:
                    94:7f:fd:6c:5b:03:98:46:bb:c9:3e:27:e7:de:7d:
                    6d:84:9f:9f:04:be:4c:9e:9a:3e:54:83:3d:62:6d:
                    23:0a:59:c1:81:2b:00:0f:3b:01:68:c4:77:74:63:
                    bd:da:f0:28:30:4f:74:d7:1f:4e:e3:7a:e4:70:c3:
                    bc:36:bb:45:ad:d9:45:61:fa:b5:bf:80:79:92:4f:
                    9f:bc:dd:0b:c4:26:83:78:b9:42:38:78:88:84:46:
                    a0:bc:3b:95:e2:00:64:56:73:a1:96:b5:05:03:7c:
                    ce:e9:dd:3b:05:0e:aa:bb:0c:92:f2:3d:33:07:4c:
                    fd:66:96:fc:06:2e:a9:bb:b8:92:9b:38:2d:ba:55:
                    64:1b:e9:59:83:ab:3b:af:01:4b:67:e1:78:05:c8:
                    7a:d4:23:92:20:a3:0d:67:c0:0d:1c:17:8c:0d:7a:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:7F:8C:90:9D:4C:5F:E9:BE:ED:8B:6D:65:37:2E:61:F4:1F:CA
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.180.0/24
                IPv6:
                  2a00:8c40:239::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:1c:01:02:a8:cb:b3:5d:81:79:de:27:2b:a8:d4:d6:40:9d:
         bb:1d:6b:50:78:b6:82:52:34:f5:82:d3:38:4d:eb:57:ad:b3:
         a6:a5:b3:27:fe:70:95:db:e2:78:63:ec:c4:d5:66:f2:ff:a9:
         ae:67:4d:c9:2a:c8:e5:00:16:30:41:7e:80:a2:bd:07:62:e5:
         e6:8c:1b:7f:47:05:3d:d1:b2:9c:d8:d2:80:67:fd:97:08:35:
         de:e3:8d:67:ac:5d:bc:8a:12:83:76:cd:7d:47:6a:3e:ec:23:
         53:40:89:33:13:9b:9b:e0:1e:e2:93:a9:f5:a2:16:97:36:16:
         e0:94:ca:b1:a5:e3:7a:1a:73:5a:29:f4:a9:9a:c1:6a:15:94:
         b1:f2:80:d0:b8:d8:a0:2d:35:fa:c6:4c:09:53:0f:73:05:04:
         55:39:26:51:f7:13:0b:61:3b:b7:16:40:84:40:ab:c6:71:78:
         11:f2:5a:49:d3:e8:e6:bb:c3:6c:93:32:08:9e:0d:e6:7c:55:
         9e:5a:5c:3e:27:98:9f:3e:61:cb:b5:d7:cc:56:28:84:64:ad:
         11:82:f4:28:56:98:c2:5b:bb:b2:e5:b4:b1:a6:6c:94:00:b0:
         d7:a1:ed:16:c6:d5:e9:81:3b:dc:e8:93:24:bb:47:95:95:47:
         93:27:9b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----