Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/LSE36n14OlFyT2JPffWytn2VECM.roa
File:                     LSE36n14OlFyT2JPffWytn2VECM.roa (raw, json)
Hash identifier:          aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=
Subject key identifier:   2D:21:37:EA:7D:78:3A:51:72:4F:62:4F:7D:F5:B2:B6:7D:95:10:23
Certificate issuer:       /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial:       0194274781DF1696C48D1BBEB0862514BA51
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/LSE36n14OlFyT2JPffWytn2VECM.roa
Signing time:             Thu 02 Jan 2025 13:49:45 +0000
ROA not before:           Thu 02 Jan 2025 13:49:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213299
IP address blocks:        185.155.116.0/24 maxlen: 24
                          2a10:40c0::/32 maxlen: 32
                          2a10:40c0:1::/48 maxlen: 48
                          2a10:40c0:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:81:df:16:96:c4:8d:1b:be:b0:86:25:14:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
        Validity
            Not Before: Jan  2 13:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d2137ea7d783a51724f624f7df5b2b67d951023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:1b:6c:31:5b:35:77:61:bf:ed:4b:a3:9d:
                    f6:16:2c:cb:25:10:c4:80:cb:ce:31:14:51:f0:15:
                    a9:a4:05:7a:75:a4:10:40:71:0f:ff:64:22:2d:38:
                    15:81:14:61:93:19:58:01:f4:ef:f8:e4:5d:81:34:
                    2c:09:96:55:02:6a:b8:69:ef:ef:35:e6:cb:dd:88:
                    21:3b:b9:59:52:9b:1f:fb:67:cf:a7:44:38:8e:5a:
                    0f:1c:2d:58:53:8b:a7:b9:18:0f:d3:8a:b7:23:1f:
                    39:d0:38:33:90:6b:27:75:29:30:56:a5:fc:96:53:
                    85:6e:95:e8:49:e5:f6:5b:b3:9c:06:8b:df:11:d7:
                    d8:e2:25:f1:27:a0:ef:7b:0f:28:75:21:29:a5:b7:
                    f8:b9:93:2a:b5:5c:a1:f9:52:86:6d:bd:27:0b:74:
                    ce:a5:27:11:f2:28:01:2e:b6:07:41:8d:74:4d:ab:
                    dd:26:88:7e:34:ef:62:b8:60:09:17:e5:a8:26:7e:
                    c0:e7:ff:1e:5b:5d:49:8b:04:bc:d3:31:c8:f0:a6:
                    f9:85:31:f1:f5:84:73:d0:d1:f7:60:26:ab:2d:44:
                    5f:2f:be:66:d4:34:16:73:a9:30:f7:c2:70:98:7c:
                    59:75:96:db:4a:d7:ad:6e:50:74:3c:bd:b7:26:6f:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:37:EA:7D:78:3A:51:72:4F:62:4F:7D:F5:B2:B6:7D:95:10:23
            X509v3 Authority Key Identifier:
                keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/LSE36n14OlFyT2JPffWytn2VECM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.116.0/24
                IPv6:
                  2a10:40c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:cf:72:46:ae:79:da:7c:13:d8:84:42:a2:dd:4f:cb:09:
         a4:0b:a9:d6:67:c9:4e:8d:af:bd:8d:88:79:eb:51:4b:06:e6:
         a0:e4:01:55:ec:52:b9:5e:6b:c2:06:5d:13:84:f9:cf:70:0b:
         d5:0a:f5:04:7b:42:08:98:db:68:df:99:f4:ad:bf:88:c2:3c:
         a8:e8:fc:f5:51:78:99:8f:70:04:b6:19:17:25:d6:b9:10:da:
         c3:79:b1:4c:bb:f0:22:8a:64:a4:20:88:2b:a9:ea:d4:8c:fa:
         c6:12:dd:8a:35:04:fb:e4:7e:8d:d6:56:5f:6d:f3:2d:35:67:
         2a:7d:27:ec:de:71:04:64:b4:b3:a7:40:62:a6:e0:8b:4e:62:
         94:71:47:f6:14:5f:69:58:04:b7:d1:4f:de:af:0d:6f:bb:f0:
         1a:81:01:b0:c9:68:af:1b:65:0f:ea:a6:5e:32:f7:7e:6f:66:
         1f:f6:7e:92:81:c8:ee:af:43:b1:72:fa:82:35:ee:0a:b9:27:
         1b:9f:93:bf:5e:d5:3c:4d:63:e5:03:04:63:bd:43:10:7f:1f:
         c2:6e:ba:4c:39:da:7e:ce:0d:dc:f8:52:78:91:10:9f:24:fc:
         94:88:2d:95:57:83:51:b1:c8:fd:2a:50:59:3b:22:17:60:57:
         96:1c:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----