Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa
File:                     VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (raw, json)
Hash identifier:          fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=
Subject key identifier:   56:BC:C1:4B:B8:98:31:0E:C2:52:01:57:78:86:14:2A:26:EE:AB:87
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       0194228D76F1AABED7C4156032A3CBE7B123
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa
Signing time:             Wed 01 Jan 2025 15:48:03 +0000
ROA not before:           Wed 01 Jan 2025 15:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204260
IP address blocks:        185.109.8.0/22 maxlen: 22
                          185.109.8.0/23 maxlen: 23
                          185.109.8.0/24 maxlen: 24
                          185.109.9.0/24 maxlen: 24
                          185.109.10.0/23 maxlen: 23
                          185.109.10.0/24 maxlen: 24
                          185.109.11.0/24 maxlen: 24
                          194.34.0.0/21 maxlen: 21
                          194.34.0.0/22 maxlen: 22
                          194.34.0.0/24 maxlen: 24
                          194.34.1.0/24 maxlen: 24
                          194.34.2.0/24 maxlen: 24
                          194.34.3.0/24 maxlen: 24
                          194.34.4.0/22 maxlen: 22
                          194.34.4.0/24 maxlen: 24
                          194.34.5.0/24 maxlen: 24
                          194.34.6.0/24 maxlen: 24
                          194.34.7.0/24 maxlen: 24
                          2a02:e600::/30 maxlen: 30
                          2a02:e600::/48 maxlen: 48
                          2a02:e600:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:76:f1:aa:be:d7:c4:15:60:32:a3:cb:e7:b1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Jan  1 15:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=56bcc14bb898310ec25201577886142a26eeab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:d0:8f:ec:06:a4:33:cf:a9:f7:bf:65:6a:
                    1f:24:9a:8f:a0:2e:42:cc:b0:74:f3:0c:a8:66:54:
                    63:c9:0b:ca:d5:27:b4:94:e7:2b:e6:0d:b4:d9:b8:
                    c4:ce:80:65:df:2b:be:fd:65:d7:44:6b:dd:46:1a:
                    d6:84:18:60:fb:c3:8b:c4:39:8a:79:dc:ee:8d:eb:
                    a5:5f:06:a0:2a:cd:63:24:43:c3:4a:a2:62:0e:ee:
                    0f:49:89:e7:27:07:fc:36:6e:50:ad:81:76:d9:46:
                    5c:a0:01:4c:a4:1a:5d:67:5b:26:5d:86:5d:14:89:
                    ad:32:1c:59:48:af:98:57:fd:68:54:9c:13:10:9a:
                    c8:fb:c6:cc:3c:63:de:71:28:91:56:08:41:f4:94:
                    80:9d:9d:58:67:18:eb:08:ff:fe:8b:45:46:09:52:
                    ba:97:02:d7:e6:ca:19:e0:19:d7:d1:64:6b:20:cc:
                    49:ee:dc:90:93:44:35:23:41:81:4d:fb:6f:dd:2c:
                    8e:d3:17:96:e3:09:f5:bf:77:ca:d0:1d:02:c7:d3:
                    2d:06:77:a8:47:67:b4:63:b4:21:34:2a:d3:91:7f:
                    0b:26:f2:70:38:00:2e:fc:a5:91:e3:ce:ed:b5:07:
                    26:f4:d7:85:cb:56:bb:61:f4:18:2a:f8:dc:45:8c:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BC:C1:4B:B8:98:31:0E:C2:52:01:57:78:86:14:2A:26:EE:AB:87
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.109.8.0/22
                  194.34.0.0/21
                IPv6:
                  2a02:e600::/30

    Signature Algorithm: sha256WithRSAEncryption
         86:98:ec:98:1b:e4:33:fc:db:11:3c:7f:0d:4c:d1:1c:9b:b1:
         be:3f:ac:74:06:d3:6a:54:88:70:8e:46:bb:f4:6d:43:d3:5a:
         92:ae:50:d4:66:5e:4a:b9:82:ac:71:2f:c1:b9:1c:52:bf:0b:
         36:8a:cf:6d:3c:c9:8a:bb:86:c1:95:cf:9d:3c:ab:a1:f7:24:
         ae:31:ba:2b:0d:b2:a7:75:82:c4:a6:db:2d:90:b4:34:22:39:
         2e:d1:ee:cf:18:b2:3c:be:75:2b:a4:63:8e:fd:68:34:db:6a:
         4b:7b:1d:39:88:4f:94:7b:02:3d:d8:57:ca:04:4a:46:dc:c9:
         35:55:ca:de:ff:cc:92:7c:cb:e3:f2:49:59:73:27:24:af:30:
         ab:18:f6:a6:36:c5:5e:79:1a:eb:b3:87:59:a6:e3:a2:b1:99:
         72:80:3a:96:fb:60:d0:29:88:4c:b7:4c:71:04:36:d2:2b:32:
         ff:e7:30:2b:b7:17:65:93:37:52:99:b5:41:e2:19:82:e1:cc:
         e0:0e:ab:b3:c7:1b:41:ed:d2:18:89:ac:fc:c1:0a:ab:66:8e:
         bf:30:d6:c8:7f:82:9a:41:4a:dd:85:b4:79:62:95:71:e6:99:
         86:03:44:2a:7f:41:79:fe:1f:49:08:32:ac:c3:10:db:c8:86:
         0f:4d:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----