Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/bred8jKnNPms1BCagsD8kMQFkWQ.roa
File:                     bred8jKnNPms1BCagsD8kMQFkWQ.roa (raw, json)
Hash identifier:          VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=
Subject key identifier:   6E:B7:9D:F2:32:A7:34:F9:AC:D4:10:9A:82:C0:FC:90:C4:05:91:64
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019423D6C4895CF944BCDBB3AB1CF6817237
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/bred8jKnNPms1BCagsD8kMQFkWQ.roa
Signing time:             Wed 01 Jan 2025 21:47:45 +0000
ROA not before:           Wed 01 Jan 2025 21:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199627
IP address blocks:        185.9.20.0/24 maxlen: 24
                          2a03:42c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:c4:89:5c:f9:44:bc:db:b3:ab:1c:f6:81:72:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jan  1 21:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6eb79df232a734f9acd4109a82c0fc90c4059164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:81:10:da:7a:7b:60:27:27:5b:b6:67:f2:
                    22:8a:1f:67:01:67:b5:35:b3:dc:ad:12:bc:f7:b0:
                    4a:a5:38:bd:44:9f:fd:73:68:aa:88:3e:9f:1c:fa:
                    27:97:d3:a8:80:da:10:6f:71:9c:4b:c5:94:52:72:
                    3b:cb:0b:61:27:af:96:d4:2c:15:07:1b:48:3c:15:
                    36:f3:1a:ff:24:b5:e6:4b:f7:a7:01:49:8d:51:d0:
                    70:a6:cb:26:64:3a:d0:a3:01:ba:b6:15:05:41:d1:
                    01:34:eb:51:23:0a:e8:8b:2d:2b:94:4e:32:f2:71:
                    cf:28:0b:64:4c:c3:62:1c:02:b4:49:a4:17:7e:fc:
                    70:83:e5:ea:00:cd:28:66:62:e9:29:9c:e4:f6:05:
                    7a:58:4e:1d:c6:4c:73:a0:cb:79:36:d6:55:34:48:
                    1d:67:dc:7b:50:a6:f2:20:5b:8d:06:90:0a:6a:a4:
                    a7:68:60:cc:3d:ae:8a:a7:dc:18:56:6c:2f:0c:d0:
                    28:a3:e7:29:fc:e5:d8:37:57:04:84:9a:75:ba:2e:
                    28:54:f4:90:51:20:78:c2:86:88:17:14:fa:8a:bc:
                    8c:12:a8:48:7f:ed:94:44:2e:6f:6c:96:b2:ec:ea:
                    c5:a4:67:09:e4:ac:27:c7:a3:ea:22:f0:d2:22:8f:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B7:9D:F2:32:A7:34:F9:AC:D4:10:9A:82:C0:FC:90:C4:05:91:64
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/bred8jKnNPms1BCagsD8kMQFkWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.20.0/24
                IPv6:
                  2a03:42c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:4b:b6:9b:6b:a2:06:29:59:75:9a:c9:4e:7b:0c:25:95:
         e1:1d:8d:d1:01:ef:d7:58:08:53:f6:5e:62:2a:e8:91:66:7a:
         f8:80:3e:43:38:b0:61:f2:0b:08:84:e3:51:2f:86:e5:86:4a:
         3d:2d:9a:c9:ed:ec:a1:cc:7a:e6:7a:70:9a:95:c1:c3:ac:9d:
         71:17:dc:ff:46:8a:79:cb:81:2c:ee:3c:06:f9:ef:b8:64:87:
         a9:72:55:d4:5b:fa:6d:10:6c:bc:16:15:00:7c:45:4b:08:52:
         9d:7c:cb:5f:ba:01:26:89:87:c4:b5:38:6e:6a:b4:36:b1:c8:
         66:23:4f:d8:b3:18:1b:8c:a2:de:04:ee:aa:61:d9:09:2d:9c:
         18:02:ee:ff:ed:58:f6:2d:6c:5a:81:0a:f6:b6:d3:26:e1:7f:
         8c:2b:a6:5f:1a:32:21:2c:f0:1b:25:bd:c3:3c:dd:52:5f:e5:
         35:33:46:30:b6:ef:a6:14:f0:69:d0:dd:bf:05:0d:e4:b8:28:
         73:b9:b2:96:1c:6a:f2:00:01:19:f0:99:12:d7:9a:91:75:a0:
         ec:c1:4f:e1:9d:31:32:7d:2d:e9:25:66:0f:e6:a3:b1:ec:31:
         69:9c:27:b2:f5:14:d3:18:6b:ae:f3:53:95:6d:c3:07:65:f5:
         12:3e:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----