Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/XkoFzkhGOVU5LUerqTHh__leFZg.roa
File:                     XkoFzkhGOVU5LUerqTHh__leFZg.roa (raw, json)
Hash identifier:          z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=
Subject key identifier:   5E:4A:05:CE:48:46:39:55:39:2D:47:AB:A9:31:E1:FF:F9:5E:15:98
Certificate issuer:       /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial:       019423D7EE0201F771FCFAD895A2B7AD8119
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/XkoFzkhGOVU5LUerqTHh__leFZg.roa
Signing time:             Wed 01 Jan 2025 21:49:01 +0000
ROA not before:           Wed 01 Jan 2025 21:49:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213216
IP address blocks:        194.61.0.0/24 maxlen: 32
                          2a13:7fc0:4201::/48 maxlen: 48
                          2a13:7fc0:a42a::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:ee:02:01:f7:71:fc:fa:d8:95:a2:b7:ad:81:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
        Validity
            Not Before: Jan  1 21:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e4a05ce48463955392d47aba931e1fff95e1598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:22:c5:37:42:22:f1:45:e0:89:1e:c9:b7:
                    85:73:da:14:a2:04:63:c9:02:d7:c8:de:f1:a2:a4:
                    5e:cc:19:3b:27:5a:69:20:1a:44:64:43:fc:22:38:
                    84:ea:5d:8d:2e:0e:63:53:97:b0:da:f1:f7:36:b3:
                    47:a4:40:f3:f0:07:48:a2:5a:88:a8:99:4a:eb:73:
                    0f:45:ac:cb:37:51:55:76:b4:b6:6c:9a:18:6f:42:
                    40:08:9f:6b:a5:d3:22:19:37:44:e6:b7:48:2c:6c:
                    02:61:d4:72:88:13:8d:81:24:28:ab:6f:f1:2b:52:
                    de:1d:3a:27:b1:5a:5a:69:25:d3:c6:dd:a3:70:40:
                    81:64:5b:ec:02:22:f4:44:85:c5:52:0e:34:5e:bf:
                    be:db:36:bc:b9:b0:c3:ff:87:b3:b2:7f:68:dc:76:
                    94:e6:21:4c:d6:22:9c:46:2d:48:6b:1b:73:70:27:
                    a4:fb:f0:1e:91:d6:4c:6d:ec:ea:ec:e6:e2:df:e3:
                    e4:ba:9c:1d:a4:0b:f1:68:5f:41:1d:05:64:36:db:
                    8a:5b:15:5a:cc:00:71:0d:5f:21:42:aa:c0:b1:b3:
                    96:0d:e8:7f:c5:ca:8b:af:2c:32:51:ff:28:de:7b:
                    ca:57:26:41:60:87:fc:fb:19:20:33:73:e0:53:83:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:05:CE:48:46:39:55:39:2D:47:AB:A9:31:E1:FF:F9:5E:15:98
            X509v3 Authority Key Identifier:
                keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/XkoFzkhGOVU5LUerqTHh__leFZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.0.0/24
                IPv6:
                  2a13:7fc0:4201::/48
                  2a13:7fc0:a42a::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:6b:38:4a:98:a5:cf:60:e1:17:00:68:80:13:fa:27:04:
         82:29:00:51:66:32:45:8f:4b:ec:13:a8:62:32:22:2d:40:1b:
         d3:03:ad:4d:06:41:46:ce:20:5a:21:0c:9a:22:f0:64:69:7c:
         f5:51:e2:9b:3f:fb:f0:66:8f:f6:25:32:df:7d:16:00:b3:45:
         29:49:5b:3b:8b:f1:db:78:32:73:cb:5f:69:b1:4e:52:20:01:
         24:90:da:a0:97:f2:d2:3b:63:ed:ae:35:70:68:6e:1a:72:1b:
         19:8a:c0:13:ba:b3:01:fa:98:c0:52:3e:c7:11:b2:95:c2:84:
         ca:d1:5b:4c:a8:22:2c:59:6c:47:ee:61:fc:57:58:35:35:4b:
         7c:cd:e3:be:3f:eb:24:b2:56:8a:cb:62:cb:e3:72:37:b2:04:
         61:c0:45:58:87:43:4b:25:88:41:5e:a9:3d:87:15:23:ad:97:
         28:a0:bf:03:60:b5:44:2e:c9:35:68:85:2a:a2:0a:59:91:31:
         d7:78:27:ce:e5:43:cf:93:bf:8c:32:9d:a9:50:b8:f0:3d:18:
         f4:b3:1e:11:e0:77:53:0d:3a:0d:62:3e:c6:5f:91:5e:d9:2a:
         da:e2:dc:87:c5:15:ec:a9:62:9c:cf:8f:9b:1c:08:5d:6f:7b:
         5f:db:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----