Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/r-LdmNgDJxor_chtzxn23ViAn4E.roa
File:                     r-LdmNgDJxor_chtzxn23ViAn4E.roa (raw, json)
Hash identifier:          MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=
Subject key identifier:   AF:E2:DD:98:D8:03:27:1A:2B:FD:C8:6D:CF:19:F6:DD:58:80:9F:81
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       0194236A25AF2F5422F13F37E19DD4754051
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/r-LdmNgDJxor_chtzxn23ViAn4E.roa
Signing time:             Wed 01 Jan 2025 19:49:06 +0000
ROA not before:           Wed 01 Jan 2025 19:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25057
IP address blocks:        195.216.214.0/23 maxlen: 24
                          2001:67c:214::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:25:af:2f:54:22:f1:3f:37:e1:9d:d4:75:40:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Jan  1 19:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=afe2dd98d803271a2bfdc86dcf19f6dd58809f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:78:74:02:d1:c3:02:94:54:ca:fb:a0:c9:
                    4e:34:4f:91:eb:bc:83:5d:e6:f7:13:0d:d4:71:93:
                    2b:b7:3a:e7:6f:a7:46:2d:f0:97:d5:8c:82:9b:2c:
                    c8:50:85:8e:01:52:ed:19:7d:4a:d0:98:d0:3c:f9:
                    73:d7:2a:49:22:2a:0f:2c:81:2b:b9:a1:dd:5b:91:
                    28:9e:e5:3d:d4:2d:f5:30:0a:73:c9:40:fa:71:5e:
                    fb:3a:9f:b1:c9:71:ae:ca:c9:33:07:81:2a:89:f8:
                    bb:fd:44:e4:0b:f5:46:b8:a3:d3:b4:6c:a0:87:dc:
                    d5:9d:bd:87:16:e8:4b:18:45:72:60:d2:21:be:20:
                    89:93:a6:88:f4:e7:c6:14:70:56:6b:3c:6c:fd:cc:
                    cd:16:57:c8:36:b9:6d:18:e9:f5:a0:72:2b:09:a5:
                    2f:a6:34:ab:c8:ab:73:0d:6b:7f:c8:90:a4:5b:13:
                    9e:a2:b5:e3:01:bc:c5:a1:7c:b9:64:b6:8d:1e:32:
                    21:63:26:bf:77:96:7e:e2:42:fb:02:53:c8:7e:81:
                    fd:1a:f4:a9:8c:c6:27:b5:dc:64:24:f7:9d:87:84:
                    47:1b:5e:40:9d:af:62:58:17:b8:6e:60:a0:63:c0:
                    13:25:ac:ee:b4:10:13:77:f4:1f:dc:8f:29:0c:05:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:DD:98:D8:03:27:1A:2B:FD:C8:6D:CF:19:F6:DD:58:80:9F:81
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/r-LdmNgDJxor_chtzxn23ViAn4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.214.0/23
                IPv6:
                  2001:67c:214::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:17:ba:c4:df:51:94:b2:c0:ba:d0:f3:7e:9c:4f:98:e1:e1:
         81:b1:cf:29:8d:b5:56:ea:9f:59:53:c0:1b:6b:09:32:29:46:
         55:96:d2:ff:98:97:12:5b:4c:ce:d5:d0:27:47:9a:27:07:b4:
         ea:35:bd:d5:40:f3:1d:4b:46:b1:d2:ad:f1:cd:c8:9f:fc:70:
         82:f8:5f:d9:d2:af:12:9e:24:6b:70:36:20:9c:df:5a:cc:5e:
         93:69:fb:d0:87:14:2e:5d:80:47:14:3f:94:dc:3f:bf:d9:ed:
         c0:fd:53:b2:49:de:e2:3d:ae:0c:17:20:da:d2:c6:99:7f:cc:
         d1:a0:ad:cf:04:2f:5b:34:86:80:ab:ae:f6:51:ad:41:c5:0f:
         da:68:1c:2d:51:ff:fd:f0:eb:67:d4:17:6e:5d:84:7d:08:b9:
         84:bd:a9:2c:3c:3d:37:15:71:50:30:e8:73:f0:e3:31:05:fa:
         e1:dc:88:e4:28:40:0f:b1:14:f5:42:95:c4:36:e2:44:f4:60:
         25:3f:7a:8d:97:66:68:ea:bb:eb:85:51:4a:1e:8c:c8:b0:66:
         37:88:2e:04:44:ed:7f:2a:ff:cb:25:05:50:0c:e8:6c:6a:4b:
         60:a2:9a:5d:0b:c3:48:ca:87:63:ea:d7:9d:8e:7d:3b:de:43:
         a8:84:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----