Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/MSireW0ZSFLXi4hZyDwzhEe__YU.roa
File:                     MSireW0ZSFLXi4hZyDwzhEe__YU.roa (raw, json)
Hash identifier:          O2aKsS3fIrh6CwQIbUewE6uyCkwWy633kqbyFiBkW04=
Subject key identifier:   31:28:AB:79:6D:19:48:52:D7:8B:88:59:C8:3C:33:84:47:BF:FD:85
Certificate issuer:       /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial:       0194252206586A7BDB692A9EDD5F5D2C8C36
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/MSireW0ZSFLXi4hZyDwzhEe__YU.roa
Signing time:             Thu 02 Jan 2025 03:49:34 +0000
ROA not before:           Thu 02 Jan 2025 03:49:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49696
IP address blocks:        45.94.84.0/22 maxlen: 22
                          2a0e:3040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:06:58:6a:7b:db:69:2a:9e:dd:5f:5d:2c:8c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
        Validity
            Not Before: Jan  2 03:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3128ab796d194852d78b8859c83c338447bffd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:d4:b1:94:c5:ca:bb:2c:f8:4e:b0:07:b8:
                    0a:2c:b4:74:ef:cf:b0:8f:44:48:eb:73:96:58:6e:
                    ae:c8:b7:5d:21:bb:dc:45:43:59:82:a6:9a:fc:d2:
                    be:04:0e:48:92:55:a5:cf:b6:9e:6e:e4:35:51:22:
                    be:18:82:68:08:c5:d1:f6:fe:8d:53:6f:41:94:e6:
                    cf:b9:4d:96:3c:13:08:7c:4f:00:8d:d3:a1:b4:76:
                    5b:c2:a4:e6:c5:f7:cb:bd:9e:8d:61:9e:d2:54:b4:
                    ba:e6:01:d6:2d:5e:ec:02:7b:7a:bb:0c:18:ce:ca:
                    61:24:62:9f:a8:d5:00:e6:31:1a:f5:6e:7b:3c:f8:
                    32:a7:49:1b:57:8d:4e:d6:52:14:ce:57:b9:cf:0e:
                    47:e0:1c:1e:b5:68:d6:fd:11:f6:61:4c:c1:29:75:
                    49:20:b8:c2:43:a8:62:17:69:2c:88:ec:25:e5:a2:
                    88:d6:c9:5a:5a:4e:f8:e4:e9:97:30:9f:fc:f4:d4:
                    44:fa:14:15:79:f1:1e:b6:4f:56:06:cc:74:3f:35:
                    43:3d:6f:25:c7:82:e3:cf:b5:c1:72:57:51:8a:9c:
                    07:58:ac:9d:0a:49:64:82:a8:cf:08:4a:46:46:6c:
                    e1:61:11:24:da:9c:9a:af:11:9e:ac:7f:b6:2c:14:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:AB:79:6D:19:48:52:D7:8B:88:59:C8:3C:33:84:47:BF:FD:85
            X509v3 Authority Key Identifier:
                keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/MSireW0ZSFLXi4hZyDwzhEe__YU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.84.0/22
                IPv6:
                  2a0e:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:62:99:a1:dc:ff:52:0a:59:93:17:47:d9:a6:14:68:5c:49:
         4f:43:b1:da:9f:74:a2:2d:87:91:a6:05:6e:83:1c:dd:ad:b6:
         82:b2:6c:d5:7d:0f:2f:04:a4:c7:00:5a:5e:5d:32:70:93:91:
         7b:fb:70:d0:c3:f6:f4:e1:3c:38:b3:b9:f1:50:80:c7:07:52:
         fa:5a:d2:22:9b:fe:fe:aa:f6:1c:f4:ad:88:db:b8:a3:ae:f3:
         f8:9f:66:e5:91:d1:d0:0c:63:d5:88:29:72:e3:81:65:9d:dd:
         8a:c8:00:bd:c0:5b:0c:fb:a9:91:46:3b:96:1f:55:b8:75:8b:
         27:cc:95:50:02:34:cd:cb:55:98:6a:9a:05:f9:56:e6:16:0a:
         f9:8a:bd:56:e1:d5:7d:ab:40:c0:34:3d:58:b4:d9:d1:90:69:
         92:4f:ec:05:3b:6c:a8:9d:c3:d4:cf:f7:64:30:97:37:b3:b4:
         63:e5:ec:09:fc:2c:ab:4c:0c:e6:24:3b:14:5b:b3:f7:55:01:
         02:77:aa:85:dd:d5:54:8b:cb:d0:e0:42:f5:6d:53:75:66:bc:
         90:a0:e3:a9:d1:6d:22:7d:d0:5e:c3:10:d3:03:6f:5e:47:17:
         a3:9f:c3:d0:59:bb:bb:58:6a:47:12:8c:08:d9:a9:82:78:8c:
         b3:d2:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----