Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/LUxnI4gkqH7yAwk0S-IwEaOnth8.roa
File:                     LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (raw, json)
Hash identifier:          N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=
Subject key identifier:   2D:4C:67:23:88:24:A8:7E:F2:03:09:34:4B:E2:30:11:A3:A7:B6:1F
Certificate issuer:       /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial:       019423D7F87C31EF9C3BC8C77B243E0F1ACC
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/LUxnI4gkqH7yAwk0S-IwEaOnth8.roa
Signing time:             Wed 01 Jan 2025 21:49:03 +0000
ROA not before:           Wed 01 Jan 2025 21:49:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49859
IP address blocks:        194.32.111.0/24 maxlen: 24
                          2a00:e780:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:f8:7c:31:ef:9c:3b:c8:c7:7b:24:3e:0f:1a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
        Validity
            Not Before: Jan  1 21:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d4c67238824a87ef20309344be23011a3a7b61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:1f:ab:85:6f:6c:37:d9:96:dd:e9:5f:d9:
                    1f:42:9a:f3:e1:2b:62:2f:f0:f9:d5:70:ce:b2:65:
                    42:61:27:eb:16:04:03:74:73:e9:ef:be:24:de:28:
                    8d:00:24:09:d5:9f:3c:10:fa:ee:a3:b4:6e:21:30:
                    10:62:50:f6:3a:2b:98:59:7c:83:b3:41:ca:65:d9:
                    ed:25:cb:b6:d4:5e:34:23:68:04:3e:cb:db:17:7a:
                    a5:24:87:f3:30:09:06:46:95:3c:7c:80:4a:b7:be:
                    4b:c2:94:79:c9:7d:1c:46:5a:dd:22:d9:c1:70:2e:
                    9d:a4:e1:2b:87:62:f2:80:0d:f6:ef:ce:a7:75:32:
                    b5:9f:31:ed:fa:22:16:d7:01:90:69:78:a2:61:20:
                    74:01:3e:69:92:39:e8:da:da:74:d8:26:d0:bb:ae:
                    b1:cb:12:1d:7d:02:20:33:1f:e0:b0:7e:f1:ee:9c:
                    db:d6:ff:91:8d:33:ea:1f:84:2f:77:1a:54:ff:14:
                    4a:69:1c:8c:da:55:77:2e:bf:f3:13:a2:90:6e:9c:
                    e9:46:8a:ba:de:df:7a:27:0e:16:00:c2:dd:cd:b9:
                    ca:92:c0:a0:ff:4f:88:06:86:b9:43:79:b8:47:8b:
                    f1:af:21:62:18:05:80:09:2f:85:3a:ec:d4:b7:79:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4C:67:23:88:24:A8:7E:F2:03:09:34:4B:E2:30:11:A3:A7:B6:1F
            X509v3 Authority Key Identifier:
                keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/LUxnI4gkqH7yAwk0S-IwEaOnth8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.32.111.0/24
                IPv6:
                  2a00:e780:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:94:31:fc:9b:43:3f:32:07:d1:69:49:84:47:52:11:9f:
         ec:fe:18:f6:54:29:06:06:ef:5a:cd:ec:60:33:a8:04:4f:f2:
         df:e0:29:7d:65:38:04:3f:08:a5:f9:d0:2b:66:04:a2:3b:01:
         24:5f:c0:04:5a:16:cd:23:03:b7:5e:1d:68:38:9b:83:9a:8c:
         aa:19:de:e9:f6:62:71:cc:7e:38:95:57:37:e9:9e:90:98:c3:
         a5:23:33:0d:80:7e:64:3d:fb:b9:f5:07:8f:13:82:b9:d6:01:
         85:3d:19:8f:ec:d8:09:8d:22:be:01:ec:99:0c:36:1f:57:ed:
         4c:f4:47:b7:4e:be:76:32:d8:7c:fc:0b:84:0d:b5:ad:0d:e2:
         45:90:7c:4b:bc:fb:5e:7a:57:10:ac:39:3b:f9:ad:93:01:6e:
         e9:7f:3e:16:4e:ab:b3:db:3a:e9:c0:4d:3a:e0:3a:8b:bc:5b:
         e0:d2:f3:b6:4f:b8:5b:46:da:e5:6a:5f:80:6a:02:43:21:67:
         df:78:84:02:32:c0:40:61:12:9d:d3:06:a9:b3:60:5a:d6:af:
         d5:d9:af:ae:14:1a:8e:19:9a:b5:4d:52:c5:d4:95:12:78:d3:
         ac:57:16:f8:23:1d:11:2a:2a:61:d5:58:af:bb:f4:78:30:b9:
         07:72:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----