Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa
File:                     YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (raw, json)
Hash identifier:          UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=
Subject key identifier:   61:81:FB:81:7E:4F:0A:87:9E:66:57:D9:06:40:E7:13:97:D9:3C:6C
Certificate issuer:       /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial:       019423D727683DC29739781EDDD7A9BE1A57
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa
Signing time:             Wed 01 Jan 2025 21:48:10 +0000
ROA not before:           Wed 01 Jan 2025 21:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212636
IP address blocks:        193.23.52.0/24 maxlen: 24
                          2a10:5ac0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:27:68:3d:c2:97:39:78:1e:dd:d7:a9:be:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
        Validity
            Not Before: Jan  1 21:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6181fb817e4f0a879e6657d90640e71397d93c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:37:28:d9:ae:04:87:ba:21:5b:39:bc:8d:
                    60:8e:70:c3:5e:30:1c:fe:c2:f9:04:7d:88:73:51:
                    74:d1:1b:23:de:1e:26:c3:d8:03:47:df:19:e7:bc:
                    fd:47:e5:a3:5d:69:66:af:71:75:e8:97:e3:59:c5:
                    c0:57:fc:75:46:79:a4:9e:17:9d:42:13:94:c5:35:
                    58:a3:59:41:c5:55:be:0a:d9:d2:bd:cd:aa:c2:9e:
                    45:c2:f3:dd:87:b7:de:2d:d9:57:07:33:77:93:f9:
                    ab:ce:07:0c:4c:b2:02:31:55:de:a0:fb:c1:18:9b:
                    d0:72:5e:a0:58:56:31:6a:73:6a:ac:cb:20:29:26:
                    32:1d:b4:05:ec:cf:64:91:29:ce:cf:3d:2a:c9:79:
                    fe:f8:60:2d:5d:a1:01:c3:3d:fa:f6:c6:36:4b:79:
                    01:7f:06:0f:37:d1:10:16:ba:ac:d8:1a:d1:50:08:
                    4f:6c:cb:af:18:5c:f7:ae:57:9f:6e:b4:32:6d:35:
                    dd:79:7e:2b:ac:e0:4c:96:38:ed:a3:ef:ca:7d:77:
                    7a:09:93:67:c7:ac:de:a7:f8:8d:df:9e:74:ba:57:
                    d4:88:d3:c2:09:ca:51:25:55:92:55:d3:db:a4:46:
                    aa:58:d0:a3:3d:fc:c6:29:63:19:b8:08:ca:dc:1b:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:81:FB:81:7E:4F:0A:87:9E:66:57:D9:06:40:E7:13:97:D9:3C:6C
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.52.0/24
                IPv6:
                  2a10:5ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:ee:04:8a:a7:68:a8:70:b1:32:2f:a3:6d:76:e1:95:0b:
         b0:27:f1:e0:2d:85:77:3b:c7:59:b0:d7:90:88:8e:87:19:23:
         b1:dc:27:e8:2e:5b:9a:fb:3a:14:6e:f4:7f:3b:ee:56:34:0e:
         05:20:4a:a9:58:8b:c9:fb:61:42:b4:95:2f:e6:e2:a3:b2:a7:
         48:6e:22:ae:c6:ce:f8:02:24:8a:70:5f:81:e3:2b:4d:18:ef:
         aa:b3:6d:25:fe:95:82:04:c8:7b:cf:3b:ab:9a:0b:9f:f1:9f:
         a7:96:14:0a:1c:d1:ad:a5:54:05:44:05:9f:a2:b5:8c:fd:ee:
         b3:7a:b6:b9:0a:30:6d:1a:93:31:48:38:a2:d2:cc:70:e8:09:
         f0:71:e1:2b:f9:88:9d:af:bf:d3:2a:96:b5:cb:52:0a:05:bc:
         77:5b:f4:7f:fa:15:78:d0:b8:c4:93:9b:ac:59:d7:73:e9:e7:
         04:1c:de:25:d4:9f:a0:05:3b:b9:bf:3b:99:a0:5e:b1:48:2e:
         7f:c2:51:4c:f6:e9:83:87:d2:f9:35:bd:58:76:28:a1:28:9e:
         4a:ac:71:c5:cd:18:b0:70:3f:d1:af:f1:d0:51:76:a2:ce:2b:
         f1:e5:22:85:a4:be:1b:d1:ed:3f:08:b1:a1:f4:32:eb:81:60:
         f1:b6:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----