Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/nEBdPp8T67QR8mweX1iUKnRWtrg.roa
File:                     nEBdPp8T67QR8mweX1iUKnRWtrg.roa (raw, json)
Hash identifier:          AlYt7CG9AvYmCEg+fVuLEO9S0Hf1g2sdl5nnt5DGKfs=
Subject key identifier:   9C:40:5D:3E:9F:13:EB:B4:11:F2:6C:1E:5F:58:94:2A:74:56:B6:B8
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       01954686033E16B7647D84022BC097B6CE9C
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/nEBdPp8T67QR8mweX1iUKnRWtrg.roa
Signing time:             Thu 27 Feb 2025 08:29:02 +0000
ROA not before:           Thu 27 Feb 2025 08:29:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47347
IP address blocks:        79.142.32.0/22 maxlen: 22
                          79.142.32.0/23 maxlen: 23
                          2a01:7b40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:86:03:3e:16:b7:64:7d:84:02:2b:c0:97:b6:ce:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Feb 27 08:29:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c405d3e9f13ebb411f26c1e5f58942a7456b6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:f2:be:f2:45:bb:aa:c9:2b:af:eb:00:88:
                    ea:f3:41:b9:35:6e:72:9e:cf:fb:6b:7d:02:e1:fb:
                    a8:71:63:06:0d:35:02:94:55:60:8b:4c:3c:d0:dd:
                    13:46:d5:aa:06:88:79:18:3e:38:e9:13:0e:2c:4a:
                    d1:8b:04:21:a5:a4:d7:f3:99:ce:4d:b2:5a:a5:d0:
                    e4:53:52:46:d8:12:26:4e:a7:83:df:bb:2c:4f:01:
                    61:2f:04:17:53:b7:21:b9:78:fd:7c:12:8e:3f:9b:
                    dd:2b:ec:7c:cf:e5:f6:2d:96:a3:cb:ac:e1:5b:4c:
                    6f:3f:36:63:6b:1e:9e:d8:01:80:e2:05:39:6f:04:
                    19:c5:a0:b4:61:78:94:72:62:92:ef:12:2f:07:2b:
                    17:9a:b5:77:98:c3:02:cb:23:de:e0:9d:e6:69:47:
                    7e:74:30:df:51:33:19:09:af:24:f8:62:81:12:45:
                    90:c6:f3:13:86:32:82:94:7b:ae:34:be:0f:32:14:
                    b3:5c:4a:7b:0e:d3:4e:b2:05:b0:46:e4:c6:8a:9e:
                    d8:76:3b:0e:1a:99:88:c8:4b:32:2a:65:9b:3e:29:
                    b5:dd:4f:07:34:47:86:20:29:62:67:8e:38:83:8c:
                    fd:bd:99:0c:7c:f8:7a:39:dd:d3:a4:e4:b4:10:bf:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:40:5D:3E:9F:13:EB:B4:11:F2:6C:1E:5F:58:94:2A:74:56:B6:B8
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/nEBdPp8T67QR8mweX1iUKnRWtrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.142.32.0/22
                IPv6:
                  2a01:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:6d:ff:2d:5d:60:8f:43:c5:93:3f:16:3e:a3:d2:dc:e0:
         f0:09:60:58:f5:ad:60:12:b8:a8:1b:17:d2:22:c2:3e:0b:a8:
         f5:5e:f5:30:e4:11:42:1c:fb:61:cc:e9:5d:00:c3:57:ce:0f:
         4c:2d:1f:2c:a6:92:34:7c:bf:45:9b:68:4b:68:32:b5:5c:8b:
         30:31:84:37:6e:15:b0:b7:62:91:76:cd:e0:3a:c6:09:99:c8:
         57:69:32:ac:f1:8d:44:1c:cd:fe:f4:8d:a1:04:35:4b:ec:92:
         e4:f5:c1:c1:cc:2a:ef:17:c8:c1:4a:83:96:c9:0f:8f:55:d4:
         31:a7:c6:52:64:5b:a4:21:91:14:d8:6d:01:06:6b:25:17:f4:
         37:e0:7d:c2:86:76:9e:c2:98:c1:49:ff:5e:51:7f:a4:00:cf:
         4f:6b:62:e4:d4:05:b5:97:b5:f0:38:55:7f:22:98:09:6d:e0:
         14:0b:87:08:01:85:9c:3b:57:c6:97:1b:95:0a:9c:2e:ae:8e:
         52:40:eb:a9:1a:1e:26:d9:8d:95:a4:66:cb:11:29:70:5e:26:
         2c:72:ad:8d:6c:35:e3:ba:46:f7:1c:6d:26:7e:52:b5:8b:6a:
         10:97:c1:26:4d:87:23:74:3e:3d:ec:cf:d6:4f:22:b5:08:99:
         6a:71:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----