Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa
File:                     Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (raw, json)
Hash identifier:          reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=
Subject key identifier:   16:EF:29:B0:4F:DB:CC:DC:89:FA:E0:BD:B3:1F:AB:4C:9F:B7:0B:96
Certificate issuer:       /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial:       019420D5ABD7BBA07FCD27EFE6CE91B49DC3
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa
Signing time:             Wed 01 Jan 2025 07:47:41 +0000
ROA not before:           Wed 01 Jan 2025 07:47:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214193
IP address blocks:        82.115.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:ab:d7:bb:a0:7f:cd:27:ef:e6:ce:91:b4:9d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Validity
            Not Before: Jan  1 07:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16ef29b04fdbccdc89fae0bdb31fab4c9fb70b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:9c:7d:63:9f:29:18:04:40:c5:c7:de:52:
                    25:0e:8f:e2:e7:89:81:b8:98:e2:f3:1c:2b:aa:47:
                    20:06:fe:c7:92:16:42:2e:1e:e1:31:0b:94:ba:f9:
                    d7:7c:02:ea:1b:82:ba:fe:6c:d2:56:5e:86:e4:1d:
                    a5:f1:98:33:46:4d:8c:7f:66:b4:84:e8:ef:aa:d9:
                    5c:c2:75:10:8d:35:8a:76:23:c8:ba:75:fb:db:51:
                    43:3b:60:75:d7:57:e4:c8:33:de:58:42:e7:b4:b9:
                    0d:c6:3f:df:bc:68:ea:0b:d3:46:71:b2:be:a3:e6:
                    f3:14:a1:a1:78:0c:11:f5:dc:2d:d7:27:e8:ac:2e:
                    3e:a3:91:cd:36:3d:73:26:0a:17:f1:88:39:2d:fc:
                    e6:de:40:0a:4b:cd:bf:d9:65:08:3a:74:5b:b6:05:
                    50:1f:d9:1c:1b:45:be:c8:1b:35:9c:31:d4:e4:8e:
                    28:9d:f1:4a:24:a6:42:f3:2a:89:47:e5:e8:8e:7c:
                    dd:7c:bc:98:1b:31:a9:5b:72:38:db:9c:3e:66:6c:
                    7a:9c:23:3e:4e:70:cd:3d:30:71:77:fb:dd:a6:0e:
                    cc:a9:fc:ac:ae:e6:54:40:4e:5e:13:65:ef:a0:26:
                    8b:68:8e:a2:62:a8:bf:3c:38:e6:b1:8e:83:7d:6e:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:29:B0:4F:DB:CC:DC:89:FA:E0:BD:B3:1F:AB:4C:9F:B7:0B:96
            X509v3 Authority Key Identifier:
                keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:60:2e:a6:c6:d0:de:70:8d:af:da:4a:6f:ef:a4:3a:0b:c3:
         9d:a3:30:46:c8:ed:f6:a9:31:a9:19:fe:a2:26:ab:0b:ee:5e:
         bf:1d:92:40:be:4d:08:48:fe:6d:77:fd:c3:7c:5e:f8:08:00:
         33:40:1b:d1:7a:1c:c7:ac:19:93:0e:3b:3c:85:a5:f1:44:34:
         8f:86:2c:fd:9d:1f:6c:bf:88:82:d1:c4:29:b4:90:5b:65:56:
         05:22:09:df:ac:4b:a8:e9:03:25:36:8a:37:63:81:2c:47:4f:
         ac:55:12:60:e3:ec:23:8c:96:7f:36:e8:63:d2:2a:09:7d:26:
         02:88:00:ce:02:a7:1b:72:93:64:d3:fd:c8:b0:6a:58:23:5e:
         67:76:d4:0f:d9:46:f6:ba:6a:7d:bf:f3:56:82:24:3b:d9:e2:
         af:a3:c9:ee:6b:6e:70:89:4d:5e:3a:87:15:84:33:39:88:45:
         85:1c:6c:2e:ea:6b:0c:3a:02:01:59:13:71:6e:d7:83:97:85:
         8c:3e:79:95:87:7f:ea:42:1b:8e:82:5b:8a:f6:32:94:f8:69:
         1c:bb:0f:cc:49:ee:c7:38:90:c2:d8:88:18:41:54:6e:ac:61:
         c6:85:e8:4d:eb:a5:eb:a3:62:6a:00:c7:c1:81:d2:96:0b:dd:
         01:1a:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----