Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/pX670p9lqGVYlJwJxGSVdPdpex8.roa
File:                     pX670p9lqGVYlJwJxGSVdPdpex8.roa (raw, json)
Hash identifier:          vH3U6U3c0Q6E5azhBlckois455z44QpWevZu8CkEanM=
Subject key identifier:   A5:7E:BB:D2:9F:65:A8:65:58:94:9C:09:C4:64:95:74:F7:69:7B:1F
Certificate issuer:       /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial:       0194221FEBDFF68BC2667D5BF57AFEA9320C
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/pX670p9lqGVYlJwJxGSVdPdpex8.roa
Signing time:             Wed 01 Jan 2025 13:48:24 +0000
ROA not before:           Wed 01 Jan 2025 13:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48062
IP address blocks:        185.197.180.0/24 maxlen: 26
                          2a10:f000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:eb:df:f6:8b:c2:66:7d:5b:f5:7a:fe:a9:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
        Validity
            Not Before: Jan  1 13:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a57ebbd29f65a86558949c09c4649574f7697b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:fd:d6:cf:64:62:62:29:93:1f:77:25:52:
                    fa:55:e8:3d:28:fc:eb:45:1e:3c:17:56:1c:b4:ec:
                    3c:7c:2e:83:84:a1:f9:73:ed:31:eb:2f:f0:02:54:
                    61:1d:7b:30:64:96:e8:69:1b:14:42:ac:41:51:48:
                    79:93:e0:30:77:ae:f7:17:ea:bd:63:81:15:d1:71:
                    42:fe:a3:d0:7e:fc:3e:50:7e:17:d5:6c:3f:c3:82:
                    75:35:90:8d:b3:98:ba:0f:f1:93:67:e6:13:12:d7:
                    8f:cc:02:6d:f2:c5:07:63:65:fd:f8:99:0f:c0:c7:
                    c0:92:15:dd:46:91:4b:7a:f2:33:3a:c7:7b:36:d8:
                    62:ae:43:45:3d:a7:05:3a:8e:8b:00:87:0d:2d:cc:
                    15:c1:0d:25:95:64:74:79:e6:21:42:f5:35:35:6d:
                    5b:83:71:f8:17:d2:35:2a:c5:63:24:85:6f:b7:ad:
                    75:bd:a5:eb:ad:1a:a1:07:74:0a:f3:e9:a6:7e:dc:
                    24:14:91:18:59:a1:f3:4c:46:2e:06:ce:3b:29:70:
                    ce:7a:55:a8:86:cd:31:50:f6:4a:97:66:51:3c:50:
                    d9:86:82:0b:3c:a1:1e:6e:e8:85:66:d7:7d:06:9f:
                    af:04:65:03:38:8a:a5:48:28:eb:a2:1a:56:ee:e9:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:BB:D2:9F:65:A8:65:58:94:9C:09:C4:64:95:74:F7:69:7B:1F
            X509v3 Authority Key Identifier:
                keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/pX670p9lqGVYlJwJxGSVdPdpex8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.180.0/24
                IPv6:
                  2a10:f000::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:d9:0f:89:92:0b:14:5f:84:45:bb:c1:be:31:b0:31:67:
         7a:4e:2f:32:8b:32:a6:62:a7:75:cd:30:e9:b1:ff:f3:ca:b6:
         51:48:d7:9c:c8:8e:10:bb:f4:5a:9b:b3:ee:93:f6:6c:c9:79:
         5e:c1:b5:23:b3:73:02:e7:e1:6f:b5:c5:94:aa:3b:65:31:b3:
         26:51:3e:6e:ed:dd:12:7a:b2:52:a0:bb:c5:c5:e0:58:29:46:
         ff:75:f2:9c:ab:24:05:77:22:05:04:26:7f:aa:ae:f6:0e:b7:
         94:62:3f:29:27:be:93:08:80:c7:e0:fb:2a:6e:ae:8a:09:e1:
         84:41:f3:1a:af:94:c6:cf:99:e4:6c:f9:56:18:98:cd:15:17:
         60:59:d8:f8:52:21:88:19:74:f9:19:86:2b:c7:90:d6:60:cc:
         13:b6:1f:5c:fb:b4:35:91:b4:a5:1c:ea:f2:dc:54:c5:f7:1e:
         7f:b9:cc:55:83:66:0d:7b:5d:89:be:02:20:87:9b:35:19:ff:
         c8:81:d8:d8:61:ee:b0:88:94:a3:d7:45:8c:9c:6e:ec:d2:f1:
         3c:33:92:7e:45:f9:58:d2:35:f8:bc:2d:0f:ae:d2:09:2f:50:
         3a:a6:34:99:a5:5b:b1:e0:0e:46:7e:f5:1f:c1:1a:df:8d:17:
         2b:4a:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----