Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/fwoYr1Kqstn23idquOGuF4OaEDA.roa
File:                     fwoYr1Kqstn23idquOGuF4OaEDA.roa (raw, json)
Hash identifier:          15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=
Subject key identifier:   7F:0A:18:AF:52:AA:B2:D9:F6:DE:27:6A:B8:E1:AE:17:83:9A:10:30
Certificate issuer:       /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial:       019420D661F25D247707712FB8B9C8C3AC6C
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/fwoYr1Kqstn23idquOGuF4OaEDA.roa
Signing time:             Wed 01 Jan 2025 07:48:28 +0000
ROA not before:           Wed 01 Jan 2025 07:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208906
IP address blocks:        78.24.232.0/21 maxlen: 21
                          2a0d:8f40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:61:f2:5d:24:77:07:71:2f:b8:b9:c8:c3:ac:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
        Validity
            Not Before: Jan  1 07:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7f0a18af52aab2d9f6de276ab8e1ae17839a1030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:c2:51:25:dc:81:1f:a7:9a:25:fc:c6:13:
                    ba:e2:09:0c:e0:4d:00:9f:22:a6:48:ef:14:5a:e9:
                    f9:da:d2:22:19:2f:5b:fe:5b:9c:66:2c:8c:8f:5d:
                    9e:3f:4d:cb:fc:9f:fa:da:9d:9f:a3:fd:0f:29:f8:
                    e7:99:dd:ee:b7:22:03:00:c0:12:fc:61:13:56:ee:
                    e2:c0:76:d2:ad:06:85:dc:7a:66:d6:f0:0a:85:68:
                    15:36:09:b6:7b:4e:48:fc:a5:a9:47:f8:ed:79:54:
                    be:26:34:d6:9c:cc:75:f8:3f:cd:ec:dc:8c:01:15:
                    ab:f6:18:e7:b9:c1:4b:7c:47:21:12:96:2f:fc:d3:
                    dd:70:2e:28:c5:c2:3a:26:99:ed:f2:b3:73:24:96:
                    5d:17:16:33:aa:f6:f0:a9:c6:dd:bc:28:5d:2b:8a:
                    69:e1:1e:88:60:86:3b:26:52:ee:76:51:1f:61:f1:
                    23:55:f6:2f:27:5a:93:8a:5e:cd:39:ad:b6:38:6b:
                    ee:8a:82:6e:da:50:c4:ea:6a:9d:49:07:66:41:32:
                    c5:cb:eb:dd:a0:96:e2:ca:4e:e9:bb:20:42:ad:38:
                    b3:46:17:4d:61:1a:73:bd:13:ed:db:ee:e8:3f:3a:
                    91:c9:f8:55:72:1d:6f:47:47:f8:0e:ac:14:63:c6:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:18:AF:52:AA:B2:D9:F6:DE:27:6A:B8:E1:AE:17:83:9A:10:30
            X509v3 Authority Key Identifier:
                keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/fwoYr1Kqstn23idquOGuF4OaEDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.232.0/21
                IPv6:
                  2a0d:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:98:24:0f:e0:65:cc:ff:37:1b:57:d7:16:a2:98:2a:b6:66:
         5a:a9:00:a0:cc:9e:dc:a3:f9:4c:c9:5f:e9:7e:90:72:b0:ba:
         ac:27:2d:26:c7:91:de:6d:e2:0f:96:51:d8:33:a8:ce:08:fe:
         22:02:30:49:f2:81:06:bb:e0:26:f5:6c:f2:8c:de:32:7a:fb:
         e7:cb:47:75:ed:78:4f:73:75:76:df:c0:48:1b:0f:92:cb:c4:
         a1:8d:dc:55:32:a5:e2:21:85:98:2f:7e:aa:ed:cf:de:2a:10:
         1d:f2:5d:c1:6c:9a:6d:cc:bc:f3:b6:b2:48:f3:67:31:dd:a5:
         34:e9:52:98:30:47:e4:37:4e:cc:76:6e:86:08:d5:ce:99:0d:
         4d:42:b0:91:e7:bf:b8:3e:84:bf:38:0c:94:84:d1:41:3a:05:
         24:7c:ef:cf:63:d6:76:ae:ad:e1:b2:bb:da:91:7d:de:4e:90:
         51:d4:be:ac:20:4a:f4:c6:38:fe:4b:32:92:c7:d1:e7:ab:96:
         2c:bb:90:f4:c2:1c:af:51:34:1f:5a:02:a1:d0:90:d3:d8:87:
         45:6e:7a:2b:08:f3:1a:d5:c6:1b:18:8a:50:96:d8:c5:fa:fb:
         cf:57:84:b7:c9:a7:3a:80:21:da:a7:83:b9:5a:63:c9:28:a1:
         3f:29:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----