Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/jp6Dk4OIH5wyM0uJlfUzSca9GNw.roa
File:                     jp6Dk4OIH5wyM0uJlfUzSca9GNw.roa (raw, json)
Hash identifier:          IFxU2OJAicnZXyMwvY0QA/kZzJs8on/NYi3IKTX6AZI=
Subject key identifier:   8E:9E:83:93:83:88:1F:9C:32:33:4B:89:95:F5:33:49:C6:BD:18:DC
Certificate issuer:       /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial:       0195F1420200B98D1ADC7FE35172EFC98F01
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/jp6Dk4OIH5wyM0uJlfUzSca9GNw.roa
Signing time:             Tue 01 Apr 2025 12:09:49 +0000
ROA not before:           Tue 01 Apr 2025 12:09:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203424
IP address blocks:        81.26.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f1:42:02:00:b9:8d:1a:dc:7f:e3:51:72:ef:c9:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
        Validity
            Not Before: Apr  1 12:09:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8e9e839383881f9c32334b8995f53349c6bd18dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:29:14:34:45:7f:70:af:4d:9a:57:f1:95:
                    d8:49:e0:91:b2:00:c1:fe:dc:65:16:74:6d:e0:3e:
                    0c:46:b6:3e:0b:d5:54:9d:eb:3d:6e:ea:42:5b:76:
                    2f:c7:6d:9c:b5:5f:7b:e4:6c:67:fd:d3:a3:86:88:
                    78:a4:40:ed:25:c6:6f:0b:70:ac:78:c5:62:1d:6f:
                    f7:e5:7a:6e:8c:c1:82:f3:3c:5c:36:8a:6b:fd:a2:
                    06:e3:ca:f7:65:f5:1d:20:6c:1e:63:69:c1:46:a1:
                    d0:76:74:43:08:72:aa:20:51:0e:97:17:0b:c8:3c:
                    7b:30:f9:8a:44:8e:91:26:11:3d:21:fb:33:fe:e5:
                    32:35:19:91:57:a5:d9:0a:30:ef:e1:49:ce:8e:35:
                    6e:20:c1:ea:d1:02:8e:28:0b:70:30:b7:33:15:14:
                    5f:5e:f7:7e:ce:be:81:3c:0e:ae:c7:07:92:71:7b:
                    0d:ac:12:9e:06:53:5b:fc:ae:39:a9:28:6c:96:e9:
                    32:ad:66:0b:f7:19:e4:b7:a3:33:4d:e2:e3:bc:3a:
                    21:73:10:db:59:04:5f:5f:77:60:6d:1f:9a:7b:1c:
                    de:ee:45:7f:9d:05:8c:b4:85:f8:16:31:98:87:b1:
                    36:70:61:f8:c0:60:cb:33:f9:b8:51:56:9e:d5:98:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:83:93:83:88:1F:9C:32:33:4B:89:95:F5:33:49:C6:BD:18:DC
            X509v3 Authority Key Identifier:
                keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/jp6Dk4OIH5wyM0uJlfUzSca9GNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:56:ac:78:d7:07:a6:f8:a0:60:13:74:44:90:9a:06:91:
         db:98:0f:53:a3:46:58:93:1a:e6:e0:4a:56:9a:e9:9d:c9:78:
         56:c8:90:7a:55:a4:38:df:dd:86:8f:a9:39:af:d1:8c:db:22:
         17:00:1a:75:b0:c7:19:df:c9:b1:7e:c4:d5:5e:d5:b1:bc:ca:
         b9:65:22:97:8b:27:95:9a:8f:fa:b3:14:04:c6:09:ee:19:9f:
         ad:5c:cf:63:57:26:81:55:a9:c8:ae:3e:38:7a:be:21:d9:8c:
         87:44:d8:fe:b1:ba:48:95:a8:31:8a:e6:18:35:30:45:2c:4d:
         ae:5c:1a:b8:ce:d4:78:3d:3e:28:f0:ab:54:1e:aa:91:d8:05:
         12:a0:68:36:51:3f:e5:47:ad:f5:89:ce:b1:da:83:48:0b:99:
         51:11:a1:d8:ad:70:7e:2b:64:4e:b4:be:6f:5f:91:6a:08:c8:
         4a:af:df:d4:13:36:f6:20:ad:aa:bf:8c:ff:0b:ee:bd:b9:a4:
         9e:20:eb:93:9e:de:bf:a2:0b:0d:9b:d1:ff:f8:b5:32:c9:61:
         b6:5f:d1:4b:fd:9d:27:a1:02:37:54:ff:e3:7c:e7:f6:8f:dd:
         64:c9:30:18:37:ad:46:28:56:27:d3:2a:eb:dc:bf:5d:1d:c1:
         a1:3b:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----