Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/1--lfY911D4o-n0x13kTzxgPAa1c.roa
File:                     1--lfY911D4o-n0x13kTzxgPAa1c.roa (raw, json)
Hash identifier:          7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=
Subject key identifier:   FB:E9:5F:63:DD:75:0F:8A:3E:9F:4C:75:DE:44:F3:C6:03:C0:6B:57
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       0194236A0B4BEA6A5FE15FA698D92081D678
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/1--lfY911D4o-n0x13kTzxgPAa1c.roa
Signing time:             Wed 01 Jan 2025 19:48:59 +0000
ROA not before:           Wed 01 Jan 2025 19:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201300
IP address blocks:        185.79.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:0b:4b:ea:6a:5f:e1:5f:a6:98:d9:20:81:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Jan  1 19:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fbe95f63dd750f8a3e9f4c75de44f3c603c06b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:cc:ba:71:7b:f3:47:57:b8:7a:3e:80:3d:
                    91:6e:6a:61:1e:30:6d:48:d0:c2:1a:24:82:91:f9:
                    ed:06:84:95:5d:cd:df:e6:d2:a3:39:4f:8a:3e:a2:
                    22:30:9e:db:22:4b:72:97:05:0f:19:dc:82:08:e4:
                    20:37:7f:11:6c:c0:da:70:42:1e:ce:f4:4c:1b:64:
                    f0:60:8c:ce:51:e3:08:f1:33:30:c4:98:f7:4a:83:
                    5d:6c:db:82:a3:ab:e3:7c:7a:c6:2b:6f:13:36:30:
                    bd:96:2d:b2:c8:3d:2e:0c:2a:95:01:2c:e2:3b:a7:
                    c3:e7:5d:be:c7:8e:f6:ce:0a:41:88:ae:88:62:99:
                    7e:25:c5:e4:1c:64:a0:63:ef:69:04:59:64:2c:3f:
                    3e:fd:e3:46:15:d1:b2:f9:c8:32:a8:b2:98:36:d9:
                    c0:d6:22:3e:90:5f:3c:65:4b:c2:6f:a5:16:99:dc:
                    1b:ef:36:09:21:54:60:df:be:1e:c9:0e:f4:d8:c9:
                    4f:08:d4:da:27:4d:08:99:d3:e7:28:65:b9:11:28:
                    a9:86:57:a2:32:18:54:20:81:d1:0c:d9:b8:9a:25:
                    01:52:44:a0:68:11:bc:1b:ca:f7:c3:5c:54:b4:66:
                    43:8c:c0:93:df:e5:8d:47:b4:77:95:84:ca:2f:4e:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:5F:63:DD:75:0F:8A:3E:9F:4C:75:DE:44:F3:C6:03:C0:6B:57
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/1--lfY911D4o-n0x13kTzxgPAa1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:dd:e8:21:07:8e:0d:d8:30:76:ff:5d:af:3b:0c:b8:50:
         64:1f:59:a6:fc:71:bc:09:82:96:71:11:bc:c4:a6:5b:d8:6d:
         5a:76:41:d3:1b:68:af:1c:6b:d6:26:10:99:d8:31:e7:38:b0:
         c3:2a:f4:95:e9:3e:8b:77:61:86:f9:c6:4f:e8:a6:0b:6a:df:
         9c:6b:f8:f9:cd:f6:fe:78:99:99:b4:5d:80:8d:e9:db:ab:9e:
         9c:64:9e:f1:98:82:d6:fb:ac:79:6e:6b:82:ba:f4:28:ad:07:
         ed:7e:af:99:a0:94:c1:aa:8c:e4:5c:e3:8a:d8:27:ff:4f:90:
         6c:91:f1:22:40:58:bb:68:28:05:e9:77:f1:4f:3b:7b:66:18:
         97:21:66:24:e2:31:2e:34:cb:f8:e1:85:81:98:59:66:0b:32:
         51:46:52:d2:71:a2:b9:eb:81:f4:18:f1:f3:a1:6a:14:4d:3f:
         61:81:0b:99:d9:36:d5:48:78:00:77:e8:af:b0:ef:24:df:92:
         15:6c:34:9e:54:9b:98:9e:4c:e0:a3:6d:3e:94:08:bf:2b:27:
         37:31:a1:88:f8:b5:75:96:6c:9e:02:d3:7a:96:75:21:ef:1f:
         26:44:f4:3c:4f:b9:75:cc:6c:b0:87:53:99:fb:11:7f:d5:f4:
         36:fc:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----