Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3xmEvyh7uM27_BwlB4F0uSkGlAI.roa
File:                     3xmEvyh7uM27_BwlB4F0uSkGlAI.roa (raw, json)
Hash identifier:          1t/WYQhyg/HnMxY8aTVvNd4fR/T9MHFU9rNOJu0WyWI=
Subject key identifier:   DF:19:84:BF:28:7B:B8:CD:BB:FC:1C:25:07:81:74:B9:29:06:94:02
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       0195ED0E44D2AFD76BAF92B44020CC533CDE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3xmEvyh7uM27_BwlB4F0uSkGlAI.roa
Signing time:             Mon 31 Mar 2025 16:34:50 +0000
ROA not before:           Mon 31 Mar 2025 16:34:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212118
IP address blocks:        93.171.212.0/24 maxlen: 24
                          2a02:128:4100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ed:0e:44:d2:af:d7:6b:af:92:b4:40:20:cc:53:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Mar 31 16:34:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=df1984bf287bb8cdbbfc1c25078174b929069402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:67:67:64:6a:36:1d:ea:71:2d:4c:c3:41:
                    c4:0b:cb:2c:8a:c8:d6:70:a7:96:85:61:15:8f:3d:
                    86:ab:45:5a:36:a7:b8:34:73:2b:11:53:5b:af:2e:
                    85:1a:c7:79:12:bf:9f:a8:89:36:87:a7:a6:0a:5e:
                    3b:48:ab:ca:7b:c0:2a:dc:0b:8d:24:af:96:0d:54:
                    92:b3:9b:c7:21:d5:72:65:83:df:e3:af:77:1f:64:
                    69:97:0f:7c:db:6b:1d:7c:f8:3e:00:b0:94:61:ed:
                    2c:dc:1b:5c:f1:9c:bf:33:a4:50:9f:a7:5e:a7:b9:
                    07:ed:de:75:78:f9:4a:4d:52:e3:20:55:b4:e9:89:
                    61:93:37:78:69:07:b9:88:48:1a:e2:01:09:ac:fa:
                    4e:15:1d:40:51:d2:56:a7:dd:20:2c:4e:2d:13:61:
                    2f:24:66:d8:0a:d2:e9:02:2e:51:db:d0:d8:d4:b1:
                    42:69:1c:5a:53:b6:13:86:66:3c:a4:de:db:a5:33:
                    30:68:99:d2:0e:1f:23:0b:c0:08:c4:35:ae:18:a1:
                    f8:1d:59:31:7f:21:2f:77:2c:a3:c5:4c:25:9b:53:
                    9b:cd:0d:03:d6:ed:93:de:d7:f4:c9:97:fb:e0:f9:
                    28:7f:7e:61:cb:85:ca:bb:7b:af:d9:66:3a:02:d6:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:84:BF:28:7B:B8:CD:BB:FC:1C:25:07:81:74:B9:29:06:94:02
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3xmEvyh7uM27_BwlB4F0uSkGlAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.212.0/24
                IPv6:
                  2a02:128:4100::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:3e:39:9c:a4:82:7f:8f:6f:0c:3e:6b:64:e7:51:a8:66:
         89:49:c7:80:16:e8:db:7b:64:8b:14:73:f9:5a:05:a4:94:c3:
         cd:46:7c:7f:17:c9:91:66:08:14:bb:cd:b6:32:18:0f:fa:98:
         50:f7:03:e4:ad:b2:50:93:0f:02:0a:57:63:99:a6:8f:dd:28:
         4b:f7:14:e6:2e:dc:7f:9d:39:f3:cf:3a:d9:65:e0:6c:07:fb:
         20:a8:aa:2a:8e:2d:8b:71:3e:5e:33:96:a4:5f:f7:50:a9:c1:
         5f:3e:4c:50:17:67:f0:b2:fe:4a:a4:9d:05:65:08:de:0f:69:
         75:7b:2b:52:3e:c5:1a:7b:65:dc:0f:26:d3:3e:98:c6:3e:d9:
         2e:21:d4:e0:b5:f6:99:c6:bc:ad:01:22:66:19:3b:a1:81:10:
         fb:07:88:16:96:c4:b2:bb:c1:4f:79:9f:ee:47:7e:48:8b:b6:
         2b:d6:04:4d:36:0c:a4:04:5f:de:76:95:79:49:90:95:ea:8b:
         4f:bb:5b:86:b9:4d:73:b7:0c:d5:5b:c5:b8:76:d7:9f:13:7e:
         bd:45:3d:6f:b6:ff:a0:99:ff:a0:07:5d:41:5a:70:e4:41:16:
         1c:b6:ab:d0:ef:e3:2e:1f:0b:de:c0:e5:a1:ad:32:09:8a:30:
         13:eb:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----