Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/agRUYODGUgcgQjP7ijxcZLYm3nc.roa
File:                     agRUYODGUgcgQjP7ijxcZLYm3nc.roa (raw, json)
Hash identifier:          f6YBLXl3ZPBgWVXG5y2MoTRUZ2l1iv1DIF9aPxpzV6M=
Subject key identifier:   6A:04:54:60:E0:C6:52:07:20:42:33:FB:8A:3C:5C:64:B6:26:DE:77
Certificate issuer:       /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial:       019565A9AECB42F1D594BD9440E9D8E59742
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/agRUYODGUgcgQjP7ijxcZLYm3nc.roa
Signing time:             Wed 05 Mar 2025 09:36:13 +0000
ROA not before:           Wed 05 Mar 2025 09:36:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48603
IP address blocks:        45.147.92.0/24 maxlen: 24
                          2a0f:f800::/29 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:65:a9:ae:cb:42:f1:d5:94:bd:94:40:e9:d8:e5:97:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
        Validity
            Not Before: Mar  5 09:36:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a045460e0c65207204233fb8a3c5c64b626de77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:87:0e:0c:48:9e:a1:36:76:a0:43:8c:07:
                    f4:fd:34:65:ee:f2:90:b4:59:88:d6:78:86:ae:8c:
                    e7:52:ef:d7:8d:53:cd:90:0c:ad:2b:63:83:59:0b:
                    30:9c:79:75:19:15:9a:82:4e:0a:bc:1f:03:4d:52:
                    c5:0a:73:93:1f:21:d7:1a:53:1d:79:62:01:6b:7d:
                    78:8e:fc:7c:e0:82:34:f7:3c:e1:ba:25:de:3d:df:
                    eb:bd:ae:68:dd:e2:f2:29:52:34:21:40:14:39:81:
                    f9:34:af:64:bd:b5:cb:08:41:c0:da:6b:86:82:50:
                    90:7d:d8:9d:e9:2b:be:7b:57:6d:88:40:75:1e:08:
                    00:37:cb:60:f0:89:d1:07:a2:7c:0d:89:f7:df:fc:
                    40:e1:5c:3c:5e:f3:1f:2b:f4:6c:b9:96:11:b5:86:
                    be:e1:d6:32:4f:39:3a:18:97:08:0d:47:69:60:7d:
                    ae:93:02:6f:1b:03:08:26:71:04:f8:77:20:90:7f:
                    30:0a:bc:e3:75:70:76:0b:10:bf:ae:d8:f5:68:64:
                    78:55:cb:27:47:24:9c:9c:ef:5d:82:42:8a:37:cd:
                    f9:b7:2d:07:a9:e7:8a:eb:17:1d:c6:43:18:05:f3:
                    aa:65:37:13:5a:31:a4:e3:f2:a3:ac:60:98:be:ce:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:54:60:E0:C6:52:07:20:42:33:FB:8A:3C:5C:64:B6:26:DE:77
            X509v3 Authority Key Identifier:
                keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/agRUYODGUgcgQjP7ijxcZLYm3nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.92.0/24
                IPv6:
                  2a0f:f800::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:39:6a:9c:54:3f:53:27:5d:52:57:83:01:43:80:a0:53:a3:
         b2:8a:83:1e:d0:e3:74:75:6e:03:f0:de:6a:71:c6:3d:cb:42:
         fc:fd:96:c8:16:4f:35:b4:d0:a0:22:b9:8d:c2:ce:eb:69:3a:
         2b:0d:2c:64:42:45:8d:47:fc:3f:76:cb:98:8f:dc:8d:e7:02:
         0d:47:df:bf:35:62:f7:6d:7f:18:ca:65:12:9d:85:8d:8d:15:
         c3:05:88:ec:19:e0:aa:1b:c4:c6:06:18:3d:f7:84:90:22:c2:
         f4:c2:33:a5:ad:bb:c7:9a:ad:55:65:53:7d:72:d4:08:e6:bb:
         c9:ce:39:56:54:a2:72:cf:f8:ad:f1:df:ca:05:c5:82:ed:ca:
         5e:cf:96:57:30:e1:58:14:7a:35:2c:0e:4b:93:71:30:b1:cf:
         1a:05:1c:2b:63:4a:39:5a:bc:3a:24:6e:49:2a:a0:e0:f7:31:
         95:c0:1a:2c:e1:68:67:5f:9a:9b:4b:42:eb:14:3b:dd:35:ce:
         58:fe:da:f8:2c:2b:63:26:a8:73:cd:df:33:66:88:1c:2b:c9:
         1f:21:67:b1:8c:af:55:50:f3:fc:3c:87:2f:55:62:43:49:7d:
         8f:dd:07:75:96:04:69:05:49:aa:69:5f:f6:7c:c0:f4:3d:df:
         2d:27:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----