Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/o1owePWPwjNd3b3qg8Jnc7YGiQI.roa
File:                     o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (raw, json)
Hash identifier:          GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=
Subject key identifier:   A3:5A:30:78:F5:8F:C2:33:5D:DD:BD:EA:83:C2:67:73:B6:06:89:02
Certificate issuer:       /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial:       019425FC4F27736F6A6F51A900A7B3E068F0
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/o1owePWPwjNd3b3qg8Jnc7YGiQI.roa
Signing time:             Thu 02 Jan 2025 07:47:59 +0000
ROA not before:           Thu 02 Jan 2025 07:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15432
IP address blocks:        212.126.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:4f:27:73:6f:6a:6f:51:a9:00:a7:b3:e0:68:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
        Validity
            Not Before: Jan  2 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a35a3078f58fc2335dddbdea83c26773b6068902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:28:e7:c2:68:09:42:69:98:e7:7b:3b:9b:
                    eb:49:66:6d:00:63:d4:21:b3:48:9b:77:f9:f2:18:
                    ad:5d:b4:0a:b0:11:ad:ff:5b:50:c1:bb:79:2d:80:
                    b6:82:f3:ae:cb:0a:a5:88:72:1a:b2:e2:0b:6c:d9:
                    c3:53:c4:6e:cf:b2:5b:7e:45:94:c9:2e:c8:a7:85:
                    a4:53:54:54:28:6b:55:47:da:85:a8:ff:0d:55:49:
                    7a:25:05:95:f2:50:cc:db:73:7c:76:4f:b9:f1:25:
                    1c:fd:2a:e3:0d:05:c6:e5:65:8d:e2:90:1e:73:97:
                    ce:3f:37:b1:62:48:02:16:2c:82:fe:cd:f3:37:2b:
                    2c:a0:48:7f:1f:bf:fd:fc:8b:80:72:19:ae:5d:28:
                    59:42:50:57:ed:fd:73:d6:29:be:9f:98:c4:d9:3a:
                    e5:e9:4b:46:64:bc:f8:43:64:b8:14:ac:76:fc:62:
                    75:2d:81:52:41:d8:72:1f:06:59:8b:43:9a:b7:b6:
                    3b:1a:ba:d4:25:83:4c:83:16:81:21:56:5b:31:c9:
                    9f:ad:7a:b8:2b:69:aa:76:7a:5a:4d:8d:c2:98:75:
                    37:77:9e:26:f2:91:69:0d:66:78:2d:11:1f:e8:30:
                    cb:54:c3:f7:61:27:6f:a1:7f:8e:3c:6d:3f:67:50:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5A:30:78:F5:8F:C2:33:5D:DD:BD:EA:83:C2:67:73:B6:06:89:02
            X509v3 Authority Key Identifier:
                keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/o1owePWPwjNd3b3qg8Jnc7YGiQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.126.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:3e:15:f7:31:17:74:c5:4f:9f:77:23:0a:8b:7b:6c:47:
         91:b0:10:6c:af:ae:93:6d:d3:ca:83:a7:20:da:8a:47:73:49:
         15:00:06:af:77:ac:c6:fb:73:62:02:0a:f2:fc:23:27:62:de:
         91:c2:56:b2:4f:a0:c5:7b:84:a7:ca:52:57:91:93:f4:0b:79:
         7d:8a:29:29:38:70:98:c9:6f:b3:fe:43:80:e9:97:a0:7f:e2:
         35:7b:ea:6b:e7:cc:46:14:dc:b0:f6:f2:cd:b8:f3:72:39:93:
         52:37:d3:05:77:25:83:d9:c9:17:36:bd:31:32:30:b8:fa:65:
         fe:db:ff:77:58:d1:e6:a9:d5:12:77:06:70:ee:ad:a1:a6:cb:
         49:4b:d8:8c:8a:57:84:60:5f:7f:d2:e5:3f:a9:79:03:01:08:
         6e:d3:34:03:58:af:28:c1:14:17:58:4d:3b:32:24:26:98:2f:
         8e:8d:45:de:42:6a:ec:83:6a:89:ec:6e:e7:bc:09:a6:28:08:
         2a:2d:ac:66:d3:d7:10:10:89:dc:18:88:e4:49:6a:84:f2:22:
         0c:2d:aa:37:db:f5:f1:bf:69:95:73:6d:8f:22:bf:9b:ac:f0:
         f4:9c:3d:df:1d:a7:f4:0b:02:fe:ec:38:78:34:50:f9:9c:ec:
         50:9b:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----