Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa
File:                     92eglBFm4UMAVtPH9IkG9URQIWk.roa (raw, json)
Hash identifier:          bpICQo3Md95UoWjh41NuV2joPCJhpEI/T4pNh3i8ITQ=
Subject key identifier:   F7:67:A0:94:11:66:E1:43:00:56:D3:C7:F4:89:06:F5:44:50:21:69
Certificate issuer:       /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial:       019420D631A1568486A81D7372F181BACC15
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa
Signing time:             Wed 01 Jan 2025 07:48:15 +0000
ROA not before:           Wed 01 Jan 2025 07:48:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39022
IP address blocks:        195.66.134.0/23 maxlen: 23
                          2001:67c:2464::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:31:a1:56:84:86:a8:1d:73:72:f1:81:ba:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
        Validity
            Not Before: Jan  1 07:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f767a0941166e1430056d3c7f48906f544502169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:6a:25:fb:3c:ae:6d:7d:e2:ff:12:e0:b3:
                    76:02:a1:c6:43:46:b0:67:4e:83:23:16:05:54:92:
                    ae:58:ae:9b:63:9d:6e:c6:51:a9:d2:e4:a5:00:98:
                    51:66:0d:1e:a5:24:48:65:c0:c2:33:30:b4:c1:a0:
                    6c:90:02:bf:d0:8f:a0:c8:31:ff:90:32:97:07:0b:
                    70:ba:8b:0f:75:6f:60:f6:57:fb:93:20:36:ba:c8:
                    d9:d3:0d:db:9a:56:68:85:4a:24:88:e6:25:af:74:
                    a6:63:e5:b6:26:66:4c:16:65:b7:3b:b3:d8:8d:8a:
                    d4:27:c7:6f:d1:8a:d7:f3:91:32:20:33:5e:ed:cf:
                    cd:f2:12:fb:0e:91:af:14:a5:84:7e:24:a0:7e:37:
                    dc:37:8f:c4:45:d9:d4:39:0a:aa:f5:84:e3:b5:f3:
                    06:c5:ad:9b:59:8b:f3:06:b3:c3:1f:32:85:df:e1:
                    e6:58:9c:55:ff:35:2e:02:c9:98:b0:ad:3e:0f:31:
                    46:70:36:b3:0d:ec:14:3d:73:8e:b5:ca:3f:fb:e8:
                    10:53:01:4e:7b:b0:78:ed:04:f7:52:6f:d1:e6:7d:
                    af:3a:df:f0:90:b0:f9:00:a6:78:b1:3c:da:4e:be:
                    05:a4:0a:0e:3f:66:bd:2b:55:fb:99:a3:db:ee:8d:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:A0:94:11:66:E1:43:00:56:D3:C7:F4:89:06:F5:44:50:21:69
            X509v3 Authority Key Identifier:
                keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.134.0/23
                IPv6:
                  2001:67c:2464::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:08:a3:51:54:f8:a6:f6:c6:b8:e6:fe:f4:a8:d1:14:40:
         15:ca:2e:b4:b0:33:ef:ef:f3:40:08:ac:8d:06:17:c2:ec:7e:
         15:9b:88:f3:1d:0a:67:93:4d:c4:f8:ff:13:f4:74:51:4a:e3:
         5f:5b:58:a5:f9:d0:b6:e4:85:3e:91:25:0b:5c:6a:91:7d:01:
         7f:14:75:83:4a:f0:3b:1f:21:3d:6a:7b:6a:0e:76:c1:6f:dc:
         99:23:ed:ac:cd:de:73:be:18:69:fd:0c:84:cd:a4:4c:a7:20:
         69:5a:10:69:9c:4b:df:27:65:f3:6c:1b:1d:3d:5e:bf:13:39:
         58:be:b1:49:b7:4e:fe:8e:a5:72:68:c3:09:8d:04:cb:e8:fa:
         1d:93:8a:23:57:9d:5b:85:bd:72:b3:81:b8:9b:88:22:5f:37:
         ce:b2:92:7e:f6:c7:2b:84:50:c5:35:a7:e3:86:b2:8d:ad:7d:
         77:66:d8:91:a1:8a:b5:ff:a8:62:7e:21:a8:07:2f:82:c3:d1:
         fd:48:ce:82:54:95:aa:a4:cc:86:67:3e:6b:78:12:02:2d:6f:
         b8:17:ce:23:75:ae:a7:fc:7f:5d:ac:2c:66:a2:ce:80:93:55:
         b2:19:0c:47:99:de:67:f8:37:69:88:1b:c3:d0:25:47:13:4f:
         0c:f8:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----