Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/TV8n2Nhf92M5RowrecsMHv_G6_Q.roa
File:                     TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (raw, json)
Hash identifier:          gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=
Subject key identifier:   4D:5F:27:D8:D8:5F:F7:63:39:46:8C:2B:79:CB:0C:1E:FF:C6:EB:F4
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019426D955DF9EBD3751F4E19B5CAE536945
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/TV8n2Nhf92M5RowrecsMHv_G6_Q.roa
Signing time:             Thu 02 Jan 2025 11:49:24 +0000
ROA not before:           Thu 02 Jan 2025 11:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205107
IP address blocks:        185.230.156.0/24 maxlen: 24
                          2001:678:570::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:55:df:9e:bd:37:51:f4:e1:9b:5c:ae:53:69:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jan  2 11:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4d5f27d8d85ff76339468c2b79cb0c1effc6ebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:a4:e4:8b:9e:f1:2f:d0:11:ec:62:2e:69:
                    36:a9:d4:ab:92:19:0b:92:1f:63:cc:bd:b7:0b:46:
                    b8:61:1d:d7:97:b4:4e:00:93:d9:71:06:be:25:61:
                    de:57:e3:41:7b:a0:65:aa:9e:2f:9a:0a:ac:dd:a2:
                    4a:41:3d:0b:aa:75:be:15:f3:1a:08:a9:11:27:ec:
                    64:51:8a:87:11:69:73:7b:00:d5:9a:40:3f:87:7e:
                    ba:34:e1:e4:ee:f6:20:90:41:0e:53:2e:c6:b0:64:
                    f6:e7:d4:11:83:1f:88:0c:a5:d4:0a:62:27:c7:fa:
                    87:3e:2b:34:9c:d4:50:04:54:16:ad:65:69:15:c6:
                    4c:5e:58:4a:43:00:58:2c:c9:7a:21:c5:b2:d8:a8:
                    46:29:dc:49:e0:fd:1e:5d:f7:c7:bf:2f:0a:33:e7:
                    11:e3:e0:f0:d6:ce:f4:00:9e:41:92:4a:91:e4:91:
                    48:a7:da:fb:70:8b:24:3d:34:94:4c:7a:bb:01:97:
                    1e:5e:c3:ed:42:6a:5b:4b:dd:e3:76:a0:36:1a:24:
                    a5:ea:13:46:67:dd:7a:2e:c0:8a:06:cf:2b:09:14:
                    ae:ec:e1:f2:dc:8e:89:77:cb:a4:84:36:1c:99:e8:
                    2b:87:66:6d:99:66:24:f0:39:7b:59:1e:dd:66:20:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:27:D8:D8:5F:F7:63:39:46:8C:2B:79:CB:0C:1E:FF:C6:EB:F4
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/TV8n2Nhf92M5RowrecsMHv_G6_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.156.0/24
                IPv6:
                  2001:678:570::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:48:62:26:4f:2c:28:dc:04:8d:23:1c:0d:7c:a1:20:5d:0c:
         53:5f:0b:ff:39:b8:39:89:ff:d8:a5:82:3a:96:08:63:c9:50:
         0e:63:9a:50:23:51:63:d9:f0:1c:9b:48:9b:3d:bc:6f:ba:85:
         66:79:65:9a:b4:51:17:61:3d:8a:81:02:9d:03:cb:93:0b:51:
         59:3f:44:ab:03:43:b6:09:41:f4:d7:7a:00:e4:ce:0d:47:e0:
         e7:9f:cd:ad:c0:c2:9b:f1:8b:4b:50:9d:4b:53:2e:f7:1c:b6:
         46:90:07:42:63:e3:6b:0b:08:d6:42:f6:51:f4:48:4b:56:71:
         15:f8:bd:d2:f0:57:64:d0:7f:79:cc:72:2a:91:02:f0:70:3c:
         bb:35:a2:ef:2a:6b:a1:a4:eb:a4:d8:4d:7c:dd:77:9c:d7:e4:
         2d:ab:77:03:ce:e9:9b:fa:e7:4e:96:8f:a2:a7:2c:db:49:ce:
         62:49:42:cd:a5:18:b9:05:40:98:38:19:40:d1:99:f5:3f:e8:
         d1:46:7e:89:b8:a0:db:e8:94:a1:34:5f:64:30:bf:d6:55:d1:
         15:a7:82:8e:cb:2d:28:8b:24:4d:f0:77:15:60:84:00:57:37:
         76:4c:86:a6:1b:69:64:9f:b2:44:36:8a:51:ba:94:bb:67:be:
         ca:2f:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----