Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IaifUimRjLV0wimYFwuBxS5X-tQ.roa
File:                     IaifUimRjLV0wimYFwuBxS5X-tQ.roa (raw, json)
Hash identifier:          cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=
Subject key identifier:   21:A8:9F:52:29:91:8C:B5:74:C2:29:98:17:0B:81:C5:2E:57:FA:D4
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019420D5F862CF70E292439AE70EFA8BBCC3
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IaifUimRjLV0wimYFwuBxS5X-tQ.roa
Signing time:             Wed 01 Jan 2025 07:48:01 +0000
ROA not before:           Wed 01 Jan 2025 07:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212576
IP address blocks:        185.196.62.0/24 maxlen: 24
                          2a10:74c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f8:62:cf:70:e2:92:43:9a:e7:0e:fa:8b:bc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Jan  1 07:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=21a89f5229918cb574c22998170b81c52e57fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:bb:33:eb:8d:c8:75:9e:c1:0a:f2:fc:2d:
                    81:77:16:fc:8f:8a:82:6f:8b:69:f8:cb:ff:51:41:
                    6d:f0:5e:15:9e:a4:1d:73:88:69:f1:44:cb:59:09:
                    25:fc:e6:0f:71:5c:75:bd:0e:fa:b0:92:f6:e8:60:
                    14:37:57:46:22:3f:ca:5c:b5:7d:d0:83:0d:29:6c:
                    58:00:31:0e:b6:2c:86:1f:b3:5e:15:be:05:5d:98:
                    c6:75:a4:cc:eb:6c:c3:b2:91:a2:2c:f7:e9:59:ff:
                    03:82:72:f5:d0:f1:7d:e9:3c:3d:74:3c:52:27:75:
                    a7:52:12:03:3c:23:d7:4c:fc:77:c8:c5:c9:d8:f6:
                    4b:26:2b:f7:d9:e1:56:2d:d5:7b:02:e2:e6:28:75:
                    32:5f:51:63:63:d4:8e:d7:aa:cd:df:e8:0a:b0:bb:
                    ae:41:c7:a6:ef:ef:40:55:29:57:d1:6d:9c:7b:d5:
                    aa:33:86:8f:96:8c:7c:25:15:78:4d:8f:1b:6b:6f:
                    57:9f:65:54:d3:a9:e5:7d:f9:89:05:02:c7:26:3b:
                    49:0c:e6:5b:a7:5b:77:14:dd:44:88:3e:63:c1:f5:
                    2c:60:93:40:09:ee:a4:86:bd:b9:90:c9:89:cb:4a:
                    38:01:6d:44:58:26:fd:d2:a0:da:4c:c7:e9:aa:6c:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:9F:52:29:91:8C:B5:74:C2:29:98:17:0B:81:C5:2E:57:FA:D4
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IaifUimRjLV0wimYFwuBxS5X-tQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.62.0/24
                IPv6:
                  2a10:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:78:ed:20:c6:8d:4d:32:be:29:b3:97:7f:9e:df:a7:91:
         75:76:37:0a:73:da:7b:80:a1:ac:0e:46:63:27:ff:44:ab:16:
         e1:d9:48:57:d8:93:d0:69:22:55:d1:58:b3:cf:17:ec:4e:5e:
         13:10:e7:ab:03:31:28:e1:e2:44:b6:8e:26:ba:06:d8:55:5f:
         e2:cc:a4:cf:23:49:fb:6d:a9:e1:5a:1a:33:c8:4d:47:39:a2:
         3c:e2:dc:fe:be:cd:40:b8:6a:9b:2b:64:03:f6:fe:59:98:3c:
         8b:2c:e5:e6:fd:8d:e5:b7:50:ee:6a:e1:8b:4d:5d:69:9f:97:
         0e:14:df:be:f5:6d:64:02:af:26:7d:ff:da:54:0b:fc:ad:26:
         bd:b7:33:e3:20:1a:aa:93:46:0c:40:42:cd:51:e1:e4:49:98:
         85:b6:bf:60:15:45:67:44:11:64:3a:d9:44:22:cc:d4:96:18:
         ef:70:f6:44:8e:ba:b1:c5:41:8e:fc:14:f0:6a:6d:b1:1c:8e:
         c4:2c:6f:00:4d:22:94:a2:04:00:32:76:a9:9b:92:b7:d1:72:
         0c:fb:58:f3:07:cd:51:7d:e9:50:95:1d:8d:bb:a8:f7:ed:e5:
         53:77:37:ca:9c:0f:01:9c:e8:f3:5f:49:bc:11:85:21:5b:bd:
         f9:4f:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----