Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa
File:                     fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa (raw, json)
Hash identifier:          gkYhGIaUuP9pIbVaUa+O+pFYYvku1Vu69Icl89ypkjo=
Subject key identifier:   7D:6D:9B:E0:C8:B8:FA:39:54:E9:6C:8E:1F:07:A3:E7:B0:63:EF:17
Certificate issuer:       /CN=b20663583a8189cbeaac88d438767997b1125549
Certificate serial:       019424B294860B5A2B2058BABF77478DB752
Authority key identifier: B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa
Signing time:             Thu 02 Jan 2025 01:47:50 +0000
ROA not before:           Thu 02 Jan 2025 01:47:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29438
IP address blocks:        213.225.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:94:86:0b:5a:2b:20:58:ba:bf:77:47:8d:b7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b20663583a8189cbeaac88d438767997b1125549
        Validity
            Not Before: Jan  2 01:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d6d9be0c8b8fa3954e96c8e1f07a3e7b063ef17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f0:5a:df:0e:5f:a8:c5:de:bd:8e:42:3d:c2:
                    df:22:ef:1e:a8:ba:ff:d4:0d:b5:e9:c3:8d:03:c1:
                    e4:df:9d:ef:42:b3:2b:15:d9:49:70:01:bd:0e:3b:
                    8a:cb:d3:cc:ec:9e:cd:c7:8f:e7:5b:38:e2:03:6b:
                    f0:0a:16:77:c9:85:cb:ee:a4:15:6c:a7:66:50:54:
                    1c:d6:81:70:4f:a7:e0:ac:5c:7f:94:63:16:cc:92:
                    77:6b:07:13:ab:81:e0:cd:78:2c:cb:e8:cb:45:7b:
                    0d:b4:15:a0:4f:b5:12:0e:b9:b4:76:bd:5f:9c:1e:
                    70:fa:00:a6:3c:fa:19:96:ed:70:cf:88:ad:19:6c:
                    2a:22:09:6d:06:05:a2:04:68:2a:67:79:73:85:d2:
                    58:cf:ea:c4:df:93:61:84:0b:6c:3b:05:0c:f9:3e:
                    c8:fe:a0:fd:55:f2:12:53:5a:c5:1e:49:44:dd:92:
                    56:5a:4d:3f:59:37:16:5a:3b:90:33:9f:a7:47:f1:
                    22:eb:ac:c8:89:fe:79:79:a1:c0:a7:9c:13:ce:9e:
                    21:3a:f9:24:94:39:b4:8b:a9:0e:40:28:8a:d1:4f:
                    e2:c4:62:b9:b9:48:14:90:f9:16:bf:fc:e1:df:2c:
                    ec:c5:23:b0:f7:94:57:ec:db:a6:fd:9e:34:f2:83:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6D:9B:E0:C8:B8:FA:39:54:E9:6C:8E:1F:07:A3:E7:B0:63:EF:17
            X509v3 Authority Key Identifier:
                keyid:B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.225.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:a7:96:64:72:4f:1e:82:d2:39:66:dd:4a:18:46:c2:9c:
         88:dc:4e:55:61:4d:13:35:f2:2f:75:5f:f5:0a:04:77:69:3d:
         f0:9f:4b:9b:0c:8e:21:93:50:32:80:06:80:ca:89:30:a5:63:
         7f:ca:40:50:44:52:7c:83:96:b8:93:bc:32:cc:95:ba:af:b3:
         b5:aa:c7:5e:d6:0c:59:9f:92:ac:b1:6f:65:52:8b:5a:2a:58:
         e1:2a:43:57:1e:31:77:e9:c6:58:27:29:4c:37:c1:df:e9:62:
         16:7b:a9:9b:f8:f3:86:82:22:6a:bd:4a:87:49:42:eb:98:76:
         62:c8:76:1c:76:c8:cd:3a:1d:2d:23:c4:cf:71:df:ab:8e:5e:
         59:38:d5:c2:bc:7c:f9:8c:ad:d3:d5:76:fd:f5:21:3d:b0:ef:
         e4:d0:81:ac:98:cb:68:de:ea:49:c0:88:c7:ac:00:98:43:84:
         b6:9a:d7:27:e4:5d:59:4f:e5:35:fc:41:73:eb:55:ce:3c:a7:
         9a:eb:06:3d:98:bd:cb:65:23:0c:db:a2:f2:b3:87:ca:3c:61:
         57:2c:da:06:0d:e0:9d:28:a1:31:97:fa:71:ae:c3:69:90:4b:
         e6:35:72:c2:e0:61:82:29:71:1e:7d:89:68:b9:6b:37:9f:b3:
         c8:42:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----