Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa
File:                     zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (raw, json)
Hash identifier:          ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=
Subject key identifier:   CD:BA:F6:F2:1E:86:EB:90:67:D5:0E:99:5F:F0:66:22:79:92:29:31
Certificate issuer:       /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial:       019421443CB1871F20A8DAAC9E4FCB25D936
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa
Signing time:             Wed 01 Jan 2025 09:48:27 +0000
ROA not before:           Wed 01 Jan 2025 09:48:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15907
IP address blocks:        185.114.188.0/22 maxlen: 22
                          2a06:7140::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3c:b1:87:1f:20:a8:da:ac:9e:4f:cb:25:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cdbaf6f21e86eb9067d50e995ff0662279922931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:47:18:1f:b7:25:18:5f:5e:24:ec:5d:be:91:
                    28:7d:67:18:e5:86:ff:fc:81:92:7c:fb:42:46:23:
                    4c:1d:bf:10:af:90:1a:ce:d8:3a:d0:82:73:5a:dd:
                    06:77:bf:7d:15:7b:37:3e:e4:3e:10:2b:3c:b9:0c:
                    e7:b7:fb:79:f7:d7:f1:35:fe:37:84:92:ea:89:fc:
                    5a:2f:21:d1:30:31:48:08:6c:fb:f9:29:3c:13:3a:
                    d4:78:87:6c:3b:f5:ae:3a:56:35:d3:f7:38:8b:a9:
                    34:58:58:dd:7b:53:e6:33:34:d6:37:53:50:88:37:
                    d4:95:a6:2b:73:ac:90:72:af:f0:63:85:49:74:12:
                    1f:0b:57:6d:41:36:48:5e:56:79:74:77:22:1d:7d:
                    13:c1:9a:00:8f:e4:fd:29:03:07:0b:d9:32:d4:07:
                    0b:f7:9e:7b:b9:13:aa:99:06:d2:a6:ec:6e:9b:f0:
                    e3:90:1e:35:b1:f2:63:32:ee:2a:b3:51:dd:ba:06:
                    e3:4d:41:1a:ae:a2:b0:dd:9c:a8:fb:6b:d6:ff:6c:
                    6c:1b:d7:03:87:a5:e5:d5:61:3b:d3:12:9f:b2:03:
                    ba:f3:fa:96:52:1f:b7:00:41:5a:20:b6:04:48:87:
                    a3:35:43:ed:42:c0:aa:c2:ad:1d:b7:81:64:e5:82:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:F6:F2:1E:86:EB:90:67:D5:0E:99:5F:F0:66:22:79:92:29:31
            X509v3 Authority Key Identifier:
                keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.188.0/22
                IPv6:
                  2a06:7140::/29

    Signature Algorithm: sha256WithRSAEncryption
         bd:7d:9c:28:4d:28:ed:e9:25:eb:ca:69:aa:22:6c:22:07:22:
         0a:10:e3:7f:99:e1:51:7a:67:92:41:35:ba:a3:7e:88:20:52:
         22:6d:e2:ff:6d:8c:3b:c6:c8:87:bc:12:83:84:ea:c8:ab:03:
         a9:71:84:dc:bb:81:40:49:4a:8f:73:6f:20:44:07:a5:bf:71:
         08:5e:e0:b2:b4:55:9d:5e:dc:02:f0:6c:a5:5e:93:6e:49:79:
         c5:75:fb:9c:64:45:7b:dc:41:3c:1d:77:cc:c9:a4:08:05:46:
         fc:ad:bb:93:e4:28:5b:d3:fc:84:c9:72:fc:4e:2b:6e:f7:fa:
         31:6d:97:3d:0e:57:fa:cd:5e:90:13:c3:f3:e9:59:12:08:3d:
         72:b5:00:f2:f8:31:39:25:e3:16:b1:7a:a3:29:15:b8:a0:04:
         c0:e1:62:27:fd:5d:68:a4:7f:b6:1f:33:89:f8:90:87:7d:90:
         cc:b8:78:ff:68:ff:12:8f:ee:d4:f0:3b:c7:48:e7:61:08:d6:
         c5:39:ed:e2:5d:b2:8f:a1:a1:80:86:28:43:b5:e5:23:3a:ed:
         d1:17:7e:ae:db:85:3a:27:27:00:8d:4f:c1:4c:ee:91:93:20:
         13:03:53:75:70:04:5b:58:9e:be:63:94:70:a4:4c:28:10:31:
         98:5b:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----