Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa
File:                     UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (raw, json)
Hash identifier:          /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=
Subject key identifier:   52:B0:E5:31:ED:2A:A6:FB:12:FF:87:3A:CF:D2:23:30:4F:54:FF:2B
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019421B1B57C270993E7F2C3838E23A70EE9
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa
Signing time:             Wed 01 Jan 2025 11:48:01 +0000
ROA not before:           Wed 01 Jan 2025 11:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12703
IP address blocks:        185.43.76.0/22 maxlen: 24
                          2a01:6ca0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:b5:7c:27:09:93:e7:f2:c3:83:8e:23:a7:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Jan  1 11:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=52b0e531ed2aa6fb12ff873acfd223304f54ff2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:f7:05:4d:2d:51:61:a8:66:7f:a9:fe:47:
                    8f:84:e6:cb:d5:73:c1:53:9d:50:3e:2a:e6:58:02:
                    e1:b8:ff:67:d5:bc:94:f8:aa:3b:01:e6:0c:3d:4c:
                    f2:91:fb:cf:40:db:15:95:ca:2f:93:aa:51:2e:e9:
                    a5:b5:aa:a0:ff:5c:89:65:1c:b9:52:d0:92:4e:90:
                    45:09:9b:26:01:ac:0a:6d:cd:ed:cd:48:4f:29:39:
                    22:53:5f:d1:a5:d4:d2:16:06:14:cf:13:56:d7:37:
                    30:70:70:78:ef:ac:bd:83:a0:80:44:22:ae:9e:85:
                    f9:4d:12:00:7c:a6:1c:75:7c:93:9b:ec:12:95:ca:
                    7b:fa:f2:35:0d:11:fc:4a:ed:9d:f1:f6:5d:b3:2f:
                    81:59:fe:db:54:08:77:c0:6c:72:33:8a:fa:d7:c3:
                    3d:5d:48:ad:7d:64:53:38:f3:ec:1a:28:b6:a3:56:
                    ca:ba:a3:48:e3:9e:78:19:7d:92:33:ef:89:93:f8:
                    11:e3:6f:a3:59:4a:59:e4:77:16:10:c5:8a:f0:47:
                    72:d5:d2:9e:ac:c8:9a:d2:41:21:8c:de:17:25:93:
                    b0:90:af:3e:0c:eb:28:df:08:f6:53:04:de:cd:fd:
                    72:14:0b:c0:1d:e7:0b:70:e4:99:b8:0a:c9:5c:7f:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:E5:31:ED:2A:A6:FB:12:FF:87:3A:CF:D2:23:30:4F:54:FF:2B
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.43.76.0/22
                IPv6:
                  2a01:6ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:e2:df:f1:8a:67:57:67:37:d4:83:33:db:35:47:78:87:
         cd:da:f4:c2:8a:22:73:26:e9:28:8a:c2:c8:d6:aa:5c:64:99:
         82:07:c0:fd:61:7a:ef:f5:37:d9:d8:51:ac:bb:42:e5:df:5b:
         6f:c8:64:26:9c:75:7c:e0:6d:d9:d2:64:d9:41:7c:fc:6f:78:
         81:45:79:4c:f7:f1:0b:b1:a2:25:e8:23:0b:aa:44:1f:8f:f0:
         41:4d:e5:3b:27:9a:40:71:ae:42:56:2a:67:bd:68:d9:2f:d8:
         e9:f0:42:41:98:84:7b:19:96:82:19:46:51:a2:c7:5b:a1:e6:
         bd:37:99:79:4d:c8:d7:42:2e:3a:55:31:01:9e:d3:92:fc:9a:
         48:10:99:bb:25:3f:56:61:86:bc:4b:2a:6f:eb:9c:d3:72:23:
         8e:28:a5:8e:70:14:c5:7c:3c:9f:e1:0c:33:85:22:83:48:f1:
         bf:02:87:a9:99:0e:71:7f:e8:7a:81:70:04:67:17:a8:49:74:
         45:c7:13:f0:82:6c:13:ac:89:c4:a3:90:27:95:83:9d:8e:01:
         70:67:72:b6:7f:b2:0a:39:34:69:d8:78:4b:66:ee:c8:45:b5:
         49:7b:b3:77:13:2c:e8:d8:70:aa:a2:ad:1a:4c:58:19:43:f7:
         21:86:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----