Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bU2AXq0COT-gfxvOPvvIiJLVsJM.roa
File:                     bU2AXq0COT-gfxvOPvvIiJLVsJM.roa (raw, json)
Hash identifier:          odg8YYcjhCHJF4nV2+xCwxtNhZ9VHL8UqnkYQ/3JpSU=
Subject key identifier:   6D:4D:80:5E:AD:02:39:3F:A0:7F:1B:CE:3E:FB:C8:88:92:D5:B0:93
Certificate issuer:       /CN=6d5be666d804d0f8b387fc62209d13006c6644aa
Certificate serial:       019427B4701982886EB1B897B9850BB36A4D
Authority key identifier: 6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bU2AXq0COT-gfxvOPvvIiJLVsJM.roa
Signing time:             Thu 02 Jan 2025 15:48:44 +0000
ROA not before:           Thu 02 Jan 2025 15:48:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43442
IP address blocks:        185.224.188.0/22 maxlen: 22
                          2001:678:424::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:70:19:82:88:6e:b1:b8:97:b9:85:0b:b3:6a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5be666d804d0f8b387fc62209d13006c6644aa
        Validity
            Not Before: Jan  2 15:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d4d805ead02393fa07f1bce3efbc88892d5b093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:d9:25:92:13:0f:e7:e0:1d:af:a7:ef:f1:
                    d0:dd:8f:9d:14:02:11:40:34:40:6f:3b:9b:e1:70:
                    2d:12:64:68:62:32:34:f7:f7:e0:8f:a6:a8:6c:7b:
                    29:01:e4:ef:98:2d:97:e9:33:dc:69:de:87:00:83:
                    9e:f0:67:78:ce:38:63:0e:e5:e5:ec:56:42:5f:8a:
                    bd:0c:f8:0d:fe:60:24:31:e8:75:f5:b7:93:a6:7b:
                    e1:31:3a:f0:8f:03:b7:d3:06:41:e8:ee:7f:30:75:
                    bc:8a:9d:03:88:90:34:32:8f:c0:bf:9e:0b:73:2e:
                    e8:9b:b1:bf:20:0a:93:31:d5:eb:ff:d2:f3:7c:53:
                    0a:9a:65:21:25:20:f2:78:30:6f:52:92:6e:58:69:
                    01:db:65:35:56:8a:c8:1b:05:93:3b:98:53:fc:70:
                    02:31:a3:9d:7a:25:a5:8c:80:91:17:44:82:70:58:
                    2a:c5:b5:4d:c6:43:01:9e:1e:8e:3e:2b:29:3d:53:
                    4f:80:e1:e9:64:b5:2a:1a:c8:b4:b4:1a:59:a5:35:
                    df:45:5a:5d:09:05:4c:8e:66:51:51:0b:e4:b9:c1:
                    7a:9c:f6:5d:93:36:19:d6:9a:37:3e:3b:09:e6:63:
                    bc:7a:54:da:5c:e5:50:1d:a6:47:b3:91:df:c6:1e:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4D:80:5E:AD:02:39:3F:A0:7F:1B:CE:3E:FB:C8:88:92:D5:B0:93
            X509v3 Authority Key Identifier:
                keyid:6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bU2AXq0COT-gfxvOPvvIiJLVsJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.188.0/22
                IPv6:
                  2001:678:424::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:f9:b5:c1:5e:aa:d8:89:02:9e:30:df:bb:01:13:4b:5f:
         7e:d7:0d:13:b2:67:36:59:5e:80:fb:8f:23:fa:03:d8:26:05:
         20:0c:38:2f:e3:d1:28:82:2e:1c:59:9d:33:4c:6a:ff:db:75:
         af:00:53:96:21:da:79:00:6f:ba:91:1b:94:f2:eb:da:0c:d4:
         f7:a3:0f:cb:3d:a6:a3:18:0e:55:88:cc:1e:d6:62:19:f8:d1:
         90:d6:74:54:47:ec:1e:53:94:4c:29:dc:2f:02:7c:ac:ce:3a:
         77:b3:fb:f2:e1:96:82:2a:8f:73:20:2e:b8:0a:70:c5:79:28:
         73:43:a3:23:b3:2a:74:a3:74:db:db:cb:e7:c5:da:b7:40:5e:
         34:bf:fc:ea:ab:3f:ed:43:9c:88:43:f3:d5:67:f7:93:62:56:
         5b:3b:02:d1:12:0c:03:da:66:5e:b5:61:f3:64:a6:f1:11:fe:
         94:61:48:9c:d3:37:07:e6:b4:48:a4:4d:f1:78:e6:00:50:ad:
         99:cc:45:a0:8d:54:76:14:95:4c:70:d4:80:58:82:b6:5b:2b:
         4d:1f:cb:88:70:f5:4c:ca:0e:e3:70:56:d3:29:39:fb:55:10:
         b6:6e:4a:a9:fc:c3:98:d9:6a:4e:4d:c7:34:d5:cb:91:f7:18:
         37:21:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----