Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/nTEco9mT1eULi7_9dIxqABgskB8.roa
File:                     nTEco9mT1eULi7_9dIxqABgskB8.roa (raw, json)
Hash identifier:          yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=
Subject key identifier:   9D:31:1C:A3:D9:93:D5:E5:0B:8B:BF:FD:74:8C:6A:00:18:2C:90:1F
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       01941F8C04C3BEBE892AF6F9E7FEC30F8BBB
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/nTEco9mT1eULi7_9dIxqABgskB8.roa
Signing time:             Wed 01 Jan 2025 01:47:37 +0000
ROA not before:           Wed 01 Jan 2025 01:47:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209729
IP address blocks:        217.24.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:04:c3:be:be:89:2a:f6:f9:e7:fe:c3:0f:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: Jan  1 01:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d311ca3d993d5e50b8bbffd748c6a00182c901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:1d:7a:8a:99:8d:0e:1e:12:82:d2:ca:fa:
                    29:b4:4a:0b:b9:a7:89:5f:a8:9a:cc:85:af:51:a1:
                    cb:08:21:3b:3a:ce:44:86:2e:ed:69:81:cf:49:6c:
                    8c:07:6d:fd:0f:4b:e4:49:73:39:79:35:d3:e0:aa:
                    07:57:6c:1d:3e:b6:5d:96:55:fa:43:8e:90:90:39:
                    b3:5d:3f:7a:4a:aa:d3:5c:13:4f:ba:4c:e2:7c:ae:
                    9b:ee:6b:7f:35:ce:8c:fa:04:72:9c:87:a5:51:4a:
                    e9:89:53:13:7b:1b:ba:5f:76:09:b2:a7:f2:92:f9:
                    f3:e9:3d:e1:18:ef:23:47:a7:64:5e:1b:4f:53:2e:
                    8e:5b:c0:f5:8b:44:f9:de:ca:78:ae:62:a4:7f:b4:
                    67:8c:07:bf:dc:d1:e6:78:20:a0:ad:c7:38:a4:6d:
                    86:ea:cd:b9:fe:3f:41:b3:a9:eb:f7:ae:35:cc:b9:
                    39:47:b7:80:cd:65:99:d4:90:4f:11:89:e1:ba:dc:
                    fa:f7:b4:cb:6a:48:94:90:17:93:cd:68:c8:3f:0c:
                    27:0b:29:20:7f:1b:d5:ff:90:50:7e:19:aa:08:07:
                    0a:3f:60:d8:07:b4:03:74:20:01:33:ae:73:e9:39:
                    ea:21:ed:4f:96:f4:0a:40:2b:9c:19:d7:78:16:b4:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:31:1C:A3:D9:93:D5:E5:0B:8B:BF:FD:74:8C:6A:00:18:2C:90:1F
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/nTEco9mT1eULi7_9dIxqABgskB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.24.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:94:67:e7:10:8c:b2:e2:6c:8b:21:48:98:82:4e:64:59:
         14:d8:d3:f3:ad:90:69:95:31:ed:89:8a:31:41:9b:1c:29:97:
         6e:a7:d7:ee:10:52:54:b0:27:a0:29:f5:ef:7e:e8:0d:75:de:
         e2:70:68:6c:03:04:86:b6:3e:fa:b7:6e:3b:bf:58:cc:d2:44:
         31:df:f0:f8:e3:26:0c:ba:2d:68:38:de:52:10:35:3f:15:d7:
         7c:c6:b2:af:3d:87:42:48:5f:0e:f2:6a:53:0d:07:ef:ba:81:
         bd:83:92:bc:15:4c:65:53:e7:0e:d2:cb:d4:58:ef:fe:2f:0b:
         44:dc:76:a6:36:af:6b:13:b2:bf:7b:c9:76:2e:76:f5:73:b7:
         ac:8e:26:7d:a9:8e:64:e0:1c:f9:4b:12:6c:77:2f:1d:05:25:
         69:a2:38:f2:f0:f1:03:cd:8d:5e:e9:a7:5f:a5:15:07:e0:ab:
         7e:26:cf:8f:02:19:7f:9c:6f:bc:81:4c:15:37:0d:da:b4:3c:
         c0:43:32:91:21:5c:af:52:31:e8:cd:99:5b:96:2f:75:f1:ab:
         04:d5:13:ac:d5:0e:c4:d3:31:87:c8:db:87:a5:d6:3e:59:1a:
         21:d2:80:a3:6c:01:ec:14:ce:20:23:09:a7:06:86:3e:40:68:
         6b:e4:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----