Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa
File:                     aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (raw, json)
Hash identifier:          c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=
Subject key identifier:   68:09:11:7B:B2:66:D7:E7:71:D2:E4:3D:E5:B8:C1:FB:10:A8:48:97
Certificate issuer:       /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial:       019420680457393077282C4618EEA0A7CA4D
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa
Signing time:             Wed 01 Jan 2025 05:47:55 +0000
ROA not before:           Wed 01 Jan 2025 05:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34645
IP address blocks:        194.143.128.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:04:57:39:30:77:28:2c:46:18:ee:a0:a7:ca:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
        Validity
            Not Before: Jan  1 05:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6809117bb266d7e771d2e43de5b8c1fb10a84897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:da:34:e3:e9:71:51:e9:cb:23:21:79:c2:5e:
                    dd:22:80:d7:c0:9a:22:2c:c1:86:61:5f:d5:13:1c:
                    a3:c8:c4:2e:ff:39:b4:ca:af:fc:d5:c5:d1:9c:34:
                    6d:c8:f5:53:04:33:2c:1c:7d:09:0e:c4:d4:0a:6b:
                    9c:ef:0c:c5:0c:3e:34:bd:73:2b:8a:43:80:49:4d:
                    13:be:42:e9:b5:e1:80:fc:d2:f4:1d:8e:e3:3e:ad:
                    a0:07:7c:a0:60:07:c4:21:79:41:a7:ec:d6:57:df:
                    6a:e8:bf:8e:c7:78:70:2e:39:ad:3f:c9:0b:36:42:
                    b0:0c:e8:ce:fc:95:29:e3:2d:ca:bb:b4:cb:68:83:
                    1a:b9:c8:1a:85:ca:f2:50:14:91:8c:74:f5:e8:a2:
                    a5:b9:b7:52:65:4d:2b:2e:60:21:47:9d:10:e0:0c:
                    94:5e:a8:eb:15:2d:8c:eb:b6:22:99:83:30:35:f7:
                    46:cf:92:46:4f:55:fc:38:88:be:52:da:89:d4:ee:
                    8c:f4:28:5c:be:06:66:ad:62:5c:ee:fa:92:ed:3a:
                    0c:ce:1b:92:ac:37:3d:0b:db:92:42:3b:ca:f4:1c:
                    cc:8a:3d:2e:bf:26:ea:2e:48:7f:b4:1e:de:5f:d8:
                    fe:60:2f:9a:e2:cc:4f:35:f6:61:c2:60:16:a4:9c:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:09:11:7B:B2:66:D7:E7:71:D2:E4:3D:E5:B8:C1:FB:10:A8:48:97
            X509v3 Authority Key Identifier:
                keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.143.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:c7:e9:50:f4:df:a3:53:33:50:48:4c:ac:9c:12:e3:81:
         88:b7:98:85:ad:62:d1:fe:47:fc:f0:3b:9b:0c:d7:47:21:3b:
         d7:4f:c1:23:e7:e5:71:d5:37:e7:56:f4:80:3e:bd:18:e9:54:
         76:8c:f5:2c:2e:b1:30:a7:6b:e2:3c:1b:15:65:e6:d4:f9:f0:
         70:4d:22:98:a5:25:57:7f:68:c9:55:18:f0:c7:b6:29:0b:5b:
         6e:42:3f:7f:5e:e3:db:36:9a:ad:1c:4f:62:a1:83:59:1c:86:
         75:fc:e0:2f:ff:94:b6:f6:c9:e9:bb:29:b6:3d:63:93:5a:d6:
         75:e3:34:7f:8a:8b:8d:f2:d6:3d:38:25:a6:bf:4c:e8:06:15:
         06:d2:9a:0a:87:c7:84:e9:7d:1d:3e:55:e5:ff:bb:3f:ea:e2:
         d7:e1:5e:a1:82:b4:9f:d1:08:de:11:3b:f7:49:cb:31:af:84:
         ef:53:35:db:8a:9b:36:ac:4e:bb:6f:f4:25:4f:cd:6a:db:ff:
         1b:b4:51:cd:84:7d:1a:21:c5:06:24:c0:20:24:fb:82:43:86:
         0d:d9:f6:d2:7c:1e:07:c5:eb:1d:28:d3:a8:ac:1d:a5:21:e9:
         b9:9d:78:dc:fc:d2:da:e9:b8:6c:af:4e:bd:36:24:95:ea:6f:
         85:98:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----