Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/uTuNjfIZX7cHr_FCWEj7KGCsXUg.roa
File:                     uTuNjfIZX7cHr_FCWEj7KGCsXUg.roa (raw, json)
Hash identifier:          3K7/4FlfMU4VIa54JmYd8dgrnqQYO4VqTJ9b8BtPG6c=
Subject key identifier:   B9:3B:8D:8D:F2:19:5F:B7:07:AF:F1:42:58:48:FB:28:60:AC:5D:48
Certificate issuer:       /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial:       0194845D2DB4803AF27367F6C49F52207A33
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/uTuNjfIZX7cHr_FCWEj7KGCsXUg.roa
Signing time:             Mon 20 Jan 2025 15:38:06 +0000
ROA not before:           Mon 20 Jan 2025 15:38:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206114
IP address blocks:        87.255.160.0/19 maxlen: 19
                          87.255.189.0/24 maxlen: 24
                          2a04:2800::/29 maxlen: 29
                          2a04:2801::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:84:5d:2d:b4:80:3a:f2:73:67:f6:c4:9f:52:20:7a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
        Validity
            Not Before: Jan 20 15:38:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b93b8d8df2195fb707aff1425848fb2860ac5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:88:aa:77:60:02:93:48:96:67:e0:e7:18:
                    2e:a5:a9:48:7c:47:d9:c9:f7:bf:62:60:81:5d:19:
                    c7:aa:ba:ed:30:d1:3d:70:b9:df:de:eb:16:b7:c8:
                    31:14:47:8b:2a:13:46:61:11:6d:ae:71:2e:cd:e0:
                    ff:f4:fb:cb:2f:7b:d6:57:fd:26:c3:49:3d:ad:87:
                    23:26:6c:bc:b3:df:29:84:91:57:a9:68:cd:99:11:
                    14:b6:28:b5:63:ac:69:3e:b9:39:c4:8d:74:6b:af:
                    63:c1:4d:2a:12:c7:f4:06:22:f1:b1:28:11:14:a8:
                    80:fb:b9:a1:69:20:42:e6:b6:e2:a7:f1:ce:a3:c6:
                    f6:81:2a:3d:12:50:9c:ea:4f:84:c2:20:cb:a9:81:
                    51:f1:e9:b8:81:94:7f:18:1f:3e:cd:5d:ef:bf:93:
                    d0:5c:cd:f8:a9:8d:66:1f:0e:e5:a2:64:9c:68:58:
                    56:3a:c5:c3:8d:16:91:96:27:c6:30:27:0d:6f:44:
                    40:f4:f4:33:58:87:c9:c0:6c:c8:df:ee:d7:fe:fe:
                    04:a7:df:7c:0c:5a:a2:ac:02:fe:58:bf:a5:d4:94:
                    60:84:ce:fa:a6:d1:e2:ec:a7:3e:4e:15:ad:ae:f7:
                    e6:b5:31:c3:8d:03:77:8f:38:37:8c:52:b5:f8:0c:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3B:8D:8D:F2:19:5F:B7:07:AF:F1:42:58:48:FB:28:60:AC:5D:48
            X509v3 Authority Key Identifier:
                keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/uTuNjfIZX7cHr_FCWEj7KGCsXUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.255.160.0/19
                IPv6:
                  2a04:2800::/29

    Signature Algorithm: sha256WithRSAEncryption
         17:18:0e:3c:46:4a:43:cb:bb:e1:63:9a:8e:dd:8e:64:5c:61:
         37:44:15:39:1b:b6:48:ce:56:1c:8c:58:4d:dd:0b:bb:58:1e:
         21:d0:ed:9a:66:86:09:c9:90:60:ba:c4:f0:c1:cc:49:cd:d6:
         46:2b:f7:47:05:2a:95:9f:75:2f:6c:37:e5:c3:8f:75:13:94:
         97:5f:e6:5c:4d:fd:56:38:e3:5e:80:3f:3c:3b:33:61:ce:e8:
         02:46:79:1e:d2:a3:81:26:da:1a:f6:5e:d1:e9:98:71:f4:20:
         fe:43:3f:90:6e:30:dc:9c:e0:e2:80:37:81:0d:19:01:aa:b2:
         43:e8:d5:df:80:8c:ce:03:cb:05:a3:97:ba:fe:b7:ce:50:38:
         3f:6d:ed:5e:1a:76:2c:1f:59:3f:e8:bf:6c:2c:a4:66:96:e0:
         48:3f:78:46:22:0b:8c:b9:97:ea:37:0e:46:21:21:7b:a5:62:
         99:f9:71:a9:42:21:00:86:5c:17:8f:e3:6b:4b:0a:cb:0b:19:
         91:36:4e:4d:72:4f:e8:a7:98:68:52:29:75:da:eb:42:98:45:
         9b:49:53:f4:7f:2c:ef:9c:b8:23:6f:4c:a4:aa:b2:6f:83:97:
         93:4d:93:53:83:28:66:5a:d9:f2:06:7e:1c:66:be:64:f8:b2:
         05:8f:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----