Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TCNerbOYM531qLiSNUelOuHidRg.roa
File:                     TCNerbOYM531qLiSNUelOuHidRg.roa (raw, json)
Hash identifier:          3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=
Subject key identifier:   4C:23:5E:AD:B3:98:33:9D:F5:A8:B8:92:35:47:A5:3A:E1:E2:75:18
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       0194266B986E3E41FB6A81D4408E443D6404
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TCNerbOYM531qLiSNUelOuHidRg.roa
Signing time:             Thu 02 Jan 2025 09:49:33 +0000
ROA not before:           Thu 02 Jan 2025 09:49:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201343
IP address blocks:        89.46.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:98:6e:3e:41:fb:6a:81:d4:40:8e:44:3d:64:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Jan  2 09:49:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c235eadb398339df5a8b8923547a53ae1e27518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:d0:39:54:b8:ff:24:c2:a4:dd:8d:43:10:
                    d6:cf:c5:40:74:4f:03:4e:dd:5e:cc:c9:e7:68:41:
                    8c:cb:9a:2e:09:05:48:10:3d:b5:d9:a4:51:29:43:
                    b2:03:d3:85:67:04:3e:ab:76:c3:0a:c8:1c:81:32:
                    cf:59:cf:a7:23:ca:d5:5c:71:39:c0:53:84:9c:d3:
                    f7:53:f9:87:11:1a:89:9d:d0:58:42:00:5b:e3:da:
                    b8:3e:27:33:5a:f5:a4:69:54:25:12:38:3a:69:27:
                    36:b8:0b:1c:a7:f2:6c:2a:d4:6a:90:78:3e:a4:68:
                    8c:66:6c:43:a1:39:36:9e:75:48:6c:be:65:fb:62:
                    da:8f:ce:a5:35:fa:8f:ed:ab:6b:79:cc:3d:5c:98:
                    34:dd:40:ff:79:35:54:ed:5f:46:4c:15:72:c4:1c:
                    73:a0:10:c9:45:3c:1e:51:7e:0e:f8:41:03:a9:61:
                    cd:d8:f7:6f:a1:75:0c:52:82:de:3d:5b:a5:da:99:
                    07:15:a5:27:41:42:86:0a:53:31:f2:18:88:81:87:
                    46:8a:b5:93:08:aa:2f:86:82:0f:80:f1:f2:6f:04:
                    d2:0c:98:40:76:b1:46:1d:f2:f2:d7:23:99:ff:5a:
                    58:1d:86:f7:bc:e5:5e:63:39:2f:42:a0:98:bf:84:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:23:5E:AD:B3:98:33:9D:F5:A8:B8:92:35:47:A5:3A:E1:E2:75:18
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TCNerbOYM531qLiSNUelOuHidRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.46.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:94:7e:8a:ad:80:6e:00:d8:f8:5e:af:73:98:d9:db:88:
         11:1a:c2:11:9c:d3:cc:87:5c:ba:02:0b:ec:db:f9:c1:eb:71:
         6a:d5:e0:ce:ae:28:0e:41:bf:fe:70:72:ae:c3:f6:1b:bb:71:
         2d:e7:04:c3:f1:8d:40:7a:59:b6:12:fb:64:df:db:d3:ee:df:
         8a:bc:42:f6:cd:aa:f0:40:78:0c:82:4e:c7:5c:6c:40:21:e9:
         5c:36:41:fc:0b:41:36:a7:74:77:dc:1c:1f:a4:50:ae:92:8e:
         db:f8:ea:39:ef:4e:94:33:e1:08:a2:1d:36:26:51:db:22:7f:
         d2:7b:7d:8b:dd:66:38:49:57:ad:ac:77:b6:d8:a0:0e:b2:b8:
         b6:59:96:c9:ee:75:65:84:c4:1c:df:3c:1f:76:13:7e:d1:fa:
         80:ae:c8:cf:31:8f:18:11:9d:1b:d2:50:16:0d:16:92:5b:c6:
         9f:d5:93:f9:03:a5:b3:e7:cc:77:80:38:ba:05:86:b9:af:1a:
         cd:eb:e2:aa:b7:da:df:f2:70:01:7c:04:ab:c9:ee:11:2b:be:
         67:3f:26:04:bd:d5:e1:fc:d0:08:ea:e9:28:ec:90:c9:9e:13:
         cf:b2:bb:65:68:56:fe:ed:ed:79:f9:2c:a5:ac:96:00:34:44:
         83:62:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----