Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa
File:                     q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (raw, json)
Hash identifier:          TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=
Subject key identifier:   AB:A2:3A:81:FD:9C:B2:AC:1A:5A:0D:D1:24:90:54:DE:BF:16:C3:DB
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       0195F097B933EDE832E7AD733C76B49A6CAA
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa
Signing time:             Tue 01 Apr 2025 09:03:49 +0000
ROA not before:           Tue 01 Apr 2025 09:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12971
IP address blocks:        195.110.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f0:97:b9:33:ed:e8:32:e7:ad:73:3c:76:b4:9a:6c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Apr  1 09:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aba23a81fd9cb2ac1a5a0dd1249054debf16c3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:63:3b:1e:16:f4:ec:b3:ee:83:92:b6:11:
                    89:cc:a4:5c:07:a7:22:7f:50:15:73:c0:01:29:e7:
                    e0:5b:39:ce:aa:d5:9c:2d:45:2d:81:a8:5d:a5:69:
                    af:c9:9a:7f:30:73:de:c2:b2:0e:12:7e:4a:94:53:
                    12:47:0b:ee:b5:b0:f1:cb:6a:91:a8:df:6c:89:ca:
                    f7:90:b9:b4:f8:00:5c:71:51:b9:8e:7d:f2:d3:d3:
                    35:bf:f4:eb:f3:fa:33:19:dd:32:a3:b2:aa:c3:de:
                    63:c6:00:2b:50:6c:64:da:97:7a:1d:f5:1f:9a:45:
                    de:ea:94:97:f7:b7:26:78:f8:b1:bd:a3:43:0d:df:
                    72:c3:ce:97:de:eb:ad:c1:5e:1d:48:ec:39:42:23:
                    11:1a:56:c2:25:2f:b9:40:60:4e:2b:24:9e:e0:57:
                    14:ec:ff:81:a3:d5:89:b6:75:a9:33:06:cf:30:8a:
                    79:39:47:3e:54:e7:16:31:7d:f9:dc:ec:ed:f9:3d:
                    38:18:b5:05:aa:6b:5e:bf:c4:16:7c:46:a4:7c:ae:
                    35:f7:f1:7e:51:73:a6:da:fa:0a:1c:2e:16:c0:5b:
                    a1:15:e4:60:29:bf:3e:55:88:e5:07:28:dc:e7:5f:
                    e9:7d:9e:86:a8:13:65:cd:19:66:c4:53:b6:a3:a8:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:3A:81:FD:9C:B2:AC:1A:5A:0D:D1:24:90:54:DE:BF:16:C3:DB
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.110.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:8a:3a:3b:cb:85:85:b9:cc:22:66:1e:3f:b1:ba:f2:ae:
         96:36:49:d3:c0:95:2a:b0:1c:2e:24:77:47:a2:6b:20:44:07:
         26:da:d1:6f:04:d2:f2:c4:98:5f:bb:09:ce:b3:7d:eb:71:6e:
         b1:84:66:ad:40:b6:8b:b6:c7:eb:d2:75:51:f7:a7:a1:78:1f:
         8b:f4:c3:30:b3:f8:0f:ea:df:35:74:c7:77:88:5c:43:68:82:
         46:04:2b:de:d0:c6:c9:e7:b8:04:81:96:1c:3c:18:0e:7e:f5:
         b8:04:1a:2b:68:12:f5:e7:fe:39:38:64:fc:4e:50:e8:2e:8e:
         df:fa:f0:0c:78:c7:16:79:d3:86:9a:70:d9:96:d8:73:82:12:
         cd:62:e6:09:b8:13:e3:47:44:df:d6:18:d0:d5:96:4f:ba:27:
         10:4c:c9:50:e2:35:71:3c:8b:88:ac:0a:43:15:ce:3c:d0:c0:
         53:7a:4a:7f:22:39:07:ad:46:f3:c9:d4:8b:ac:c2:f2:6b:84:
         85:5b:49:ca:88:eb:b2:3f:9a:99:87:a5:61:f7:9e:d3:6a:73:
         dd:20:5e:e9:26:5f:52:a7:92:b1:3d:6f:9a:59:8f:9b:4e:53:
         9d:91:a9:db:4a:79:a7:47:b2:69:c8:3e:71:f0:79:f3:1a:d1:
         4d:5a:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----