Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa
File:                     4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (raw, json)
Hash identifier:          ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=
Subject key identifier:   E0:5D:E4:67:B1:98:22:4A:09:AA:53:2C:3C:56:41:C2:5C:D0:4A:EC
Certificate issuer:       /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial:       019426D92CD4B68905FBEBDDB8E14B837236
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa
Signing time:             Thu 02 Jan 2025 11:49:14 +0000
ROA not before:           Thu 02 Jan 2025 11:49:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5491
IP address blocks:        193.163.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:2c:d4:b6:89:05:fb:eb:dd:b8:e1:4b:83:72:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
        Validity
            Not Before: Jan  2 11:49:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e05de467b198224a09aa532c3c5641c25cd04aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e8:3c:91:31:da:f0:3e:b4:c2:45:b1:65:f0:
                    c6:e7:49:47:d6:37:7a:57:44:c2:47:c7:9f:53:45:
                    ec:11:8b:39:e1:34:e5:30:83:91:d6:8d:92:48:3c:
                    99:5d:67:36:86:c1:4c:bc:5e:03:59:60:0d:d0:89:
                    cb:d8:f8:7b:9d:81:ea:39:cc:13:90:79:46:69:ca:
                    ec:74:15:48:ec:3d:7f:bb:39:0a:86:f0:7e:98:13:
                    e8:d4:39:30:c2:66:e5:37:ec:24:a5:a4:61:dd:fa:
                    48:1d:52:5b:9d:a6:80:7d:cc:45:82:19:c6:b8:7c:
                    8e:68:58:00:20:1b:f2:a3:c0:a0:9c:7a:e3:ba:d3:
                    bf:4f:52:a1:9c:0c:fb:5d:be:1c:1d:21:23:bb:ba:
                    12:e1:37:62:79:9c:f9:6f:48:12:a5:b7:82:73:f6:
                    d6:8e:62:33:a9:e8:d7:3e:24:5f:39:27:39:64:0b:
                    0a:99:a3:bb:c8:dd:10:63:ac:4d:d3:55:af:29:e4:
                    a5:e8:4b:67:c7:c0:4b:d1:98:32:ac:1c:99:30:5a:
                    2f:90:d2:eb:d5:58:b9:da:ac:6e:31:8c:4a:18:30:
                    03:41:21:bf:b3:c2:9c:3d:2d:92:a1:e4:e5:e6:64:
                    18:c2:a9:96:2a:33:52:33:34:39:dc:3d:bf:32:55:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5D:E4:67:B1:98:22:4A:09:AA:53:2C:3C:56:41:C2:5C:D0:4A:EC
            X509v3 Authority Key Identifier:
                keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:68:d8:6e:a6:e7:21:1e:0f:68:93:6f:71:8c:8d:dd:ed:
         ca:79:49:d7:4b:08:0d:3b:2c:a9:d1:48:88:b2:b2:58:48:c6:
         39:ff:f8:6f:5b:e1:16:f9:9c:91:8f:f6:c6:74:d1:91:bf:70:
         fc:78:e7:58:6a:36:6c:a8:08:ec:52:68:8d:7b:68:38:6d:78:
         1a:33:e9:99:3b:b9:9c:f0:28:12:07:33:e8:f5:5f:d2:f5:e0:
         eb:c1:19:9c:ce:51:57:f0:91:5f:77:48:d4:de:4f:c1:8e:cc:
         0f:1d:aa:c9:b9:36:71:9f:0e:58:30:c5:1c:57:65:cc:fe:23:
         a1:2a:64:80:6f:4f:8b:38:28:87:ea:81:b6:af:7a:1c:d5:a4:
         81:1c:15:44:58:b7:50:4a:af:65:1d:1f:d5:f2:bb:1c:41:f0:
         0c:14:e6:08:08:1b:8b:31:b9:d2:6f:f4:ee:18:70:9e:b7:9b:
         57:77:0f:70:63:e0:01:c1:f8:9e:94:ed:1e:22:9f:a0:5c:eb:
         cb:68:0d:0c:bf:6e:8f:98:a4:30:7f:ef:91:a9:7c:43:1a:fd:
         fc:4f:54:e1:bd:e7:e8:70:2f:b7:c0:c9:ff:19:ee:74:bb:29:
         20:5c:47:e8:7d:21:6d:59:88:20:db:fb:c6:a2:2c:1c:65:9f:
         1e:02:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----