Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/MGzc8YMztAo4GeavACGbOyh49n0.roa
File:                     MGzc8YMztAo4GeavACGbOyh49n0.roa (raw, json)
Hash identifier:          PiJRBAxW1m4LR+6tM8P+lZYsEtplLXDaCeQIwgcjREs=
Subject key identifier:   30:6C:DC:F1:83:33:B4:0A:38:19:E6:AF:00:21:9B:3B:28:78:F6:7D
Certificate issuer:       /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial:       0193AD7A218115F0F2664C778D8E0EBB0E60
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/MGzc8YMztAo4GeavACGbOyh49n0.roa
Signing time:             Mon 09 Dec 2024 22:11:22 +0000
ROA not before:           Mon 09 Dec 2024 22:11:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43200
IP address blocks:        81.26.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ad:7a:21:81:15:f0:f2:66:4c:77:8d:8e:0e:bb:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
        Validity
            Not Before: Dec  9 22:11:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=306cdcf18333b40a3819e6af00219b3b2878f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:4c:d1:b8:1d:76:f8:2c:63:56:a2:6b:d5:
                    21:03:eb:3d:b1:10:78:80:81:dd:48:0b:cc:78:1f:
                    9b:8c:9e:58:dc:63:7c:b1:2a:b8:5a:81:ef:52:85:
                    6e:b4:07:fb:da:70:33:e0:eb:10:e3:2b:40:06:e8:
                    c2:fd:b3:7b:95:a2:09:70:34:e5:81:4c:15:c3:90:
                    b9:02:c7:1b:fe:31:79:2c:f8:2b:bd:0f:f0:c9:66:
                    9f:50:db:82:0d:79:6a:b3:21:bd:bd:99:cf:44:d4:
                    64:91:d1:a8:d4:43:99:4b:2f:14:d3:16:81:00:f4:
                    85:6c:74:3c:11:e6:9f:c1:61:a8:58:41:b6:e2:8e:
                    cd:cf:7b:9d:2e:42:c0:1b:17:01:bd:2d:e5:ff:32:
                    b5:1f:45:35:f4:5d:d2:77:f9:89:1c:35:25:ed:e8:
                    ea:15:1b:0f:6c:10:6f:ca:68:33:05:b4:e7:8c:1b:
                    f7:11:75:d1:1b:81:47:6f:87:e8:ac:23:86:43:a9:
                    ce:94:c9:c7:01:d6:fc:78:8c:a1:19:d8:fa:1a:54:
                    20:46:f8:39:e4:a7:c1:cf:ba:b1:24:66:68:be:11:
                    fa:8a:8a:5a:b0:8e:4c:4f:4f:ee:f3:92:ec:ca:49:
                    75:18:41:f5:34:59:2a:dc:79:86:d8:ed:71:3c:85:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6C:DC:F1:83:33:B4:0A:38:19:E6:AF:00:21:9B:3B:28:78:F6:7D
            X509v3 Authority Key Identifier:
                keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/MGzc8YMztAo4GeavACGbOyh49n0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:a5:92:b9:97:38:ca:1d:a4:ae:83:9e:83:ca:6b:47:0a:
         c6:f1:ea:cb:87:63:04:f2:81:89:22:40:a2:a8:d2:7e:bf:9c:
         aa:bd:6f:f0:ac:6f:46:71:f6:5a:ed:57:49:39:e7:33:e1:00:
         31:6a:43:07:e9:7e:85:fe:f5:f5:07:d1:9f:f8:b1:4d:74:78:
         9e:ac:73:56:64:a9:9c:9b:6a:16:df:f6:6a:8b:9a:39:59:e2:
         5f:c6:a4:a4:68:44:3b:5f:4e:1a:67:35:bd:42:15:5b:14:1d:
         b1:1f:22:26:69:6a:f9:f6:01:61:3e:fb:c8:72:76:21:78:5f:
         b6:08:35:f8:45:21:b7:82:26:18:3f:e3:4f:95:53:7d:21:e9:
         e4:5b:8b:f5:16:1f:dd:66:f2:18:be:48:22:c3:95:0d:fb:0d:
         a4:81:86:25:7f:4f:44:d2:1f:46:4d:f1:9c:06:e0:5f:e5:c6:
         da:c6:be:9e:a2:e0:03:7a:5e:5e:ed:ff:d7:ef:c4:4e:a1:32:
         f1:49:77:e9:c0:b5:8d:58:03:99:a5:82:3e:5c:a4:cb:be:6e:
         0e:81:47:60:66:5b:98:51:37:53:d8:90:ec:a3:d3:46:e5:88:
         9a:7c:16:3f:ea:91:d3:bc:2e:ff:4d:6b:c7:98:b3:5f:c6:b4:
         91:20:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----