Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/780G3tJoSimhDwBBemUbFtRI2CY.roa
File:                     780G3tJoSimhDwBBemUbFtRI2CY.roa (raw, json)
Hash identifier:          K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=
Subject key identifier:   EF:CD:06:DE:D2:68:4A:29:A1:0F:00:41:7A:65:1B:16:D4:48:D8:26
Certificate issuer:       /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial:       0194258E999B4A5320DDE56ED03C740F35ED
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/780G3tJoSimhDwBBemUbFtRI2CY.roa
Signing time:             Thu 02 Jan 2025 05:48:09 +0000
ROA not before:           Thu 02 Jan 2025 05:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39078
IP address blocks:        212.23.220.0/24 maxlen: 24
                          2a12:3600::/30 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:99:9b:4a:53:20:dd:e5:6e:d0:3c:74:0f:35:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
        Validity
            Not Before: Jan  2 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=efcd06ded2684a29a10f00417a651b16d448d826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:44:40:ae:46:8a:c3:04:0d:82:8d:4b:69:
                    c7:06:cc:63:46:75:fd:9e:f8:88:e5:9b:8e:36:e3:
                    bc:6a:71:09:bd:8c:5c:8e:45:24:5b:b8:9f:e9:45:
                    ed:09:cb:c7:d9:c2:3b:b1:8c:35:71:b3:87:49:21:
                    6b:c4:f7:59:87:5a:13:86:4f:e7:b9:42:49:a5:7d:
                    e8:a5:df:e8:53:0b:50:f8:0b:c3:32:02:2d:f1:24:
                    e1:0b:cc:1a:a0:52:79:e4:0a:37:56:5f:85:2d:91:
                    07:26:f7:2d:01:17:6f:07:38:44:1c:62:db:43:c8:
                    9f:01:59:0f:49:01:70:b9:46:27:f2:c0:2e:03:f2:
                    79:5c:05:c3:39:e2:4f:20:7a:19:63:ee:f7:75:0f:
                    f4:5b:2e:51:0d:43:f2:23:8e:87:42:e5:34:ff:67:
                    06:fb:aa:47:65:e2:8a:d5:7a:ce:e9:a8:ef:5e:75:
                    0f:59:62:03:ce:e2:86:02:80:3d:42:32:25:65:76:
                    2d:dc:c0:95:5a:3f:fc:b0:68:13:a7:e7:57:db:ff:
                    f6:34:3a:b9:7f:24:b9:c1:fc:b2:f9:b2:54:e5:56:
                    f4:22:71:11:f2:e0:7c:ad:a1:ed:ae:fe:84:3e:1e:
                    4e:d4:d0:19:d8:2c:55:48:db:43:82:f9:fc:e1:ec:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:06:DE:D2:68:4A:29:A1:0F:00:41:7A:65:1B:16:D4:48:D8:26
            X509v3 Authority Key Identifier:
                keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/780G3tJoSimhDwBBemUbFtRI2CY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.220.0/24
                IPv6:
                  2a12:3600::/30

    Signature Algorithm: sha256WithRSAEncryption
         30:35:f8:58:50:96:e3:14:5b:2c:ae:54:aa:97:2b:a0:4c:93:
         d8:02:83:1c:9e:23:76:5c:4c:d4:89:66:ac:86:2f:07:0b:59:
         2e:82:2e:b4:4f:5e:12:42:68:c9:8a:97:d1:90:4b:67:4f:25:
         f4:64:16:36:6e:4f:e7:70:ee:35:42:ca:e8:db:d3:e9:0a:e5:
         9c:02:12:e8:d7:7c:89:4f:03:a3:38:90:88:4d:9c:46:a9:1c:
         38:89:ab:bb:44:ce:de:ca:87:f1:34:70:e6:da:ec:19:5b:a6:
         f4:c1:a6:ec:c2:79:cf:39:bc:0a:4a:5f:04:9d:85:49:e1:2e:
         3e:56:f8:78:b0:d4:f5:9d:c0:3a:62:80:6d:30:69:e2:f1:87:
         71:6f:21:35:ed:2e:71:c9:31:00:cf:a9:f9:ae:1b:41:da:82:
         6e:c4:78:b0:e5:63:a4:58:e0:c2:1e:31:03:21:60:29:7a:fb:
         de:90:af:46:d7:d8:c4:8d:a6:75:71:f5:7f:d7:28:86:67:83:
         88:b3:ee:aa:e1:21:85:23:09:23:18:7d:3a:97:80:5c:f8:d8:
         77:80:be:b9:10:6b:77:ed:57:d7:45:5d:fa:d8:1b:d4:f8:22:
         8c:58:50:b1:a8:06:d8:70:f2:a0:97:ec:61:0e:1c:16:ba:0a:
         1a:18:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----