Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/2pOIOt6X219VN3XtCdkvfoMV1HM.roa
File:                     2pOIOt6X219VN3XtCdkvfoMV1HM.roa (raw, json)
Hash identifier:          KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=
Subject key identifier:   DA:93:88:3A:DE:97:DB:5F:55:37:75:ED:09:D9:2F:7E:83:15:D4:73
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       01941FFA1FEA28FFF6D11B280676AED2273A
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/2pOIOt6X219VN3XtCdkvfoMV1HM.roa
Signing time:             Wed 01 Jan 2025 03:47:53 +0000
ROA not before:           Wed 01 Jan 2025 03:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25309
IP address blocks:        194.116.99.0/24 maxlen: 24
                          2001:7f8:23::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:1f:ea:28:ff:f6:d1:1b:28:06:76:ae:d2:27:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Jan  1 03:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da93883ade97db5f553775ed09d92f7e8315d473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:40:3f:9a:44:c3:2d:b4:8d:d6:a1:8e:a3:
                    96:2e:df:39:c0:d7:2f:13:48:fb:f1:e9:ae:95:1a:
                    8c:ec:ab:c3:43:83:65:d0:5e:81:8b:79:e6:ca:bd:
                    1b:30:e4:6f:d0:1b:04:0f:20:d4:fe:2d:2a:38:bc:
                    1b:1f:52:c7:ff:bd:dc:e6:01:5f:8f:6b:ce:65:44:
                    5a:49:60:11:3e:42:cb:fa:6a:c8:81:78:4d:d9:97:
                    f2:e7:ea:1e:56:ae:26:86:a6:cf:d5:91:ce:87:9e:
                    a5:d1:b3:cc:12:ef:d7:59:eb:a5:fe:39:91:8b:8d:
                    ef:94:2d:7c:2e:99:d9:df:49:0a:12:4e:5c:b2:02:
                    01:b1:e9:8b:0e:c8:3e:3a:9b:c3:56:ec:ae:bb:06:
                    6b:0b:52:d3:83:71:0d:c8:06:73:32:b0:4d:f7:d0:
                    29:c2:38:3f:2a:93:4a:79:7a:59:4b:ef:68:2c:23:
                    69:7e:ad:47:10:06:b2:a9:e2:27:45:00:df:5c:01:
                    fe:14:9f:b3:64:87:8f:fd:0c:9e:c8:1e:70:c1:4b:
                    fc:98:a1:82:29:0e:91:da:09:a1:b1:ac:25:a9:b5:
                    c6:c7:28:c5:b3:e8:45:0a:c1:50:e9:6f:99:5c:6d:
                    a3:6b:a4:d5:f6:9a:85:50:63:1d:26:b0:3e:cc:73:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:88:3A:DE:97:DB:5F:55:37:75:ED:09:D9:2F:7E:83:15:D4:73
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/2pOIOt6X219VN3XtCdkvfoMV1HM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.99.0/24
                IPv6:
                  2001:7f8:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:84:67:90:3b:d0:cd:9f:28:72:ad:bf:4f:e7:f0:b2:e0:
         42:38:49:e6:d0:01:10:78:01:b8:d8:fa:1f:9b:3b:ee:16:22:
         48:b2:b5:1b:3e:9f:56:94:47:fb:01:77:51:96:f7:de:d1:b1:
         1b:c2:b8:f2:69:86:a8:ad:31:5b:a8:32:b2:dc:ef:22:f9:91:
         c9:ae:c2:7f:d1:4d:f6:30:c0:89:d4:5a:e7:d7:58:33:29:f5:
         1b:42:f2:38:db:23:6d:2e:2c:1a:b5:6d:6f:94:18:27:62:b2:
         21:d9:17:05:74:00:52:1d:da:3d:3d:a4:b7:53:82:60:05:ca:
         b0:cc:0a:06:a5:16:49:7e:ee:df:fe:8a:f2:f9:36:61:59:73:
         21:c3:d3:ef:de:29:aa:23:07:2d:79:94:ba:5d:ca:02:ef:f1:
         70:e9:46:4e:b4:f4:c0:da:bf:6e:2d:51:19:94:b2:a0:8e:ce:
         98:1e:68:56:97:23:f3:4f:46:fb:de:31:c0:d6:5c:41:07:2b:
         5f:29:ca:c2:33:c5:17:2a:dc:d0:66:91:3c:94:d5:38:1d:44:
         d2:07:62:4f:ed:d4:93:a3:e2:e8:a5:01:79:53:35:46:d1:cf:
         fc:0e:e8:f7:8b:6e:d9:5f:7b:c9:7a:25:47:8d:1e:36:1a:94:
         f2:80:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----