Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/JQFRevUesYnGzWy86if_lRLWdpc.roa
File:                     JQFRevUesYnGzWy86if_lRLWdpc.roa (raw, json)
Hash identifier:          t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=
Subject key identifier:   25:01:51:7A:F5:1E:B1:89:C6:CD:6C:BC:EA:27:FF:95:12:D6:76:97
Certificate issuer:       /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial:       01942143E324E0D66BDD01419D43D616414F
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/JQFRevUesYnGzWy86if_lRLWdpc.roa
Signing time:             Wed 01 Jan 2025 09:48:04 +0000
ROA not before:           Wed 01 Jan 2025 09:48:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201535
IP address blocks:        185.71.164.0/22 maxlen: 22
                          2a05:34c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:e3:24:e0:d6:6b:dd:01:41:9d:43:d6:16:41:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
        Validity
            Not Before: Jan  1 09:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2501517af51eb189c6cd6cbcea27ff9512d67697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:e4:50:2a:6f:3e:93:d8:d5:9e:2a:c4:c8:
                    b9:e1:7c:ed:69:40:98:7f:34:f0:cf:9a:10:d6:af:
                    d5:09:b5:9b:37:02:0b:e5:8e:86:4d:29:32:09:ed:
                    08:7a:77:0d:de:66:2a:86:b4:74:77:9c:3e:f9:25:
                    59:ac:34:7f:b6:97:77:b1:5e:cb:0d:08:76:0a:55:
                    9f:24:01:ef:7a:c7:70:fb:b6:b2:f4:44:10:c3:0f:
                    91:70:8a:4c:db:e9:ea:47:03:f3:7e:f4:b7:7b:43:
                    99:78:98:59:0d:80:72:a7:72:15:a2:69:6e:0a:7b:
                    98:91:ef:67:08:4e:55:cb:7a:9a:ba:20:5e:3c:0d:
                    e6:f6:eb:45:ff:12:a7:5f:23:ff:cb:4e:c8:5c:c4:
                    0e:17:1c:bc:7d:03:12:30:4d:f8:0e:a6:34:7f:82:
                    ff:47:9c:75:f2:f1:b2:d5:63:9a:f2:71:2d:b4:22:
                    54:e2:83:3b:51:bb:da:d2:c5:8a:77:e1:b7:2c:ff:
                    1c:0c:e5:f1:12:a0:6b:e0:f0:3b:20:13:96:9c:4c:
                    7c:53:34:00:e0:9d:2e:71:cd:c9:58:07:7a:e7:f2:
                    10:c1:9a:34:22:e6:d3:9c:bb:28:50:50:52:b3:a3:
                    38:ce:7c:b2:aa:e8:a8:6d:1a:fa:db:1c:b7:24:da:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:51:7A:F5:1E:B1:89:C6:CD:6C:BC:EA:27:FF:95:12:D6:76:97
            X509v3 Authority Key Identifier:
                keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/JQFRevUesYnGzWy86if_lRLWdpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.164.0/22
                IPv6:
                  2a05:34c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:e0:12:40:8b:c2:62:9b:6e:64:93:77:b8:54:99:5e:b0:2e:
         39:9a:7d:63:bd:f9:e4:fc:98:ee:1c:0c:ab:4d:c0:68:a2:fc:
         3d:ff:5c:f6:5e:9c:33:21:96:72:2d:bf:4e:33:f4:91:dc:1a:
         1a:52:c2:31:e4:66:bc:d9:be:e8:a0:62:11:4e:91:e8:85:93:
         90:b2:b9:bb:24:a8:0f:9b:f4:1b:4f:46:e8:af:0f:85:e2:bf:
         d0:50:6e:ca:b8:6d:40:21:47:c1:ce:a2:f9:3b:37:e4:07:a8:
         5c:ff:ee:71:8b:eb:d7:a9:d0:54:90:c4:d1:60:7f:59:ac:1c:
         e0:87:6d:fd:c0:45:4a:01:c4:1f:4e:c8:64:b7:f2:4d:26:b9:
         5f:a6:c7:62:0c:a1:c4:e2:f0:96:a9:06:ca:fd:62:d7:ae:7e:
         69:6c:24:0d:df:b3:c1:4a:75:7b:76:4f:4c:e3:cf:0e:93:0d:
         f9:88:df:be:29:b8:87:1e:a0:b6:8d:31:61:f7:3f:60:43:d2:
         cc:c8:10:16:a9:69:5a:b4:2e:30:16:9d:84:f3:55:6e:ba:0d:
         ff:8f:ba:b5:65:24:ed:f8:fc:29:94:1d:54:dd:56:d2:ce:31:
         6e:6e:27:ec:ca:bb:27:c0:ee:03:74:23:53:94:43:09:12:27:
         34:45:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----