Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa
File:                     Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (raw, json)
Hash identifier:          VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=
Subject key identifier:   16:8F:B4:04:E5:6B:2C:99:38:31:E2:31:B4:7F:8E:51:8D:FD:48:8E
Certificate issuer:       /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial:       01941F8C38FE28899E689CCA083718354D8C
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa
Signing time:             Wed 01 Jan 2025 01:47:50 +0000
ROA not before:           Wed 01 Jan 2025 01:47:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48417
IP address blocks:        193.169.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:38:fe:28:89:9e:68:9c:ca:08:37:18:35:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
        Validity
            Not Before: Jan  1 01:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=168fb404e56b2c993831e231b47f8e518dfd488e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:3e:58:3f:13:de:52:9e:d3:65:14:6d:a9:
                    5a:42:78:bd:73:09:8b:ac:da:3a:dc:5f:3b:ff:a3:
                    1b:09:3b:05:6c:c7:ad:37:0a:8c:a8:c1:0c:cd:e0:
                    1c:fd:46:5f:7b:db:3f:1e:9f:0c:92:58:45:98:46:
                    5e:39:d1:d7:6f:0a:1b:83:2b:cd:ec:1d:25:b7:7a:
                    57:ea:39:e3:16:09:2b:5b:91:cb:7f:55:b2:4f:25:
                    a1:ca:74:a9:90:3d:55:50:20:99:b6:92:86:bd:2f:
                    b2:ff:3e:7b:0e:7d:96:5b:81:36:a3:25:68:85:ad:
                    d5:cf:19:ea:55:e7:ef:67:0c:a5:c9:ce:a1:f2:a6:
                    27:1f:51:99:ff:c2:4e:5e:eb:e8:5e:3a:fb:6e:60:
                    42:23:1f:a2:d0:72:16:2b:3b:6d:04:98:52:60:f1:
                    34:07:aa:56:b0:d0:11:12:5f:45:4c:f7:c9:c8:b7:
                    a0:36:64:1d:46:77:f6:52:b3:c8:73:b5:81:8f:7f:
                    6b:ba:65:5d:af:0d:10:b8:46:46:20:e8:16:a6:87:
                    92:94:ca:64:29:e3:4c:89:e0:dc:f5:b0:86:6c:e7:
                    00:35:aa:f8:22:9c:9b:08:0e:39:0e:a6:12:6e:4d:
                    14:2f:72:f5:63:50:d3:4f:fe:dd:a1:e7:00:2c:e4:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:B4:04:E5:6B:2C:99:38:31:E2:31:B4:7F:8E:51:8D:FD:48:8E
            X509v3 Authority Key Identifier:
                keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:f5:b9:90:de:74:10:5a:8c:61:5d:66:42:ce:ed:62:5c:
         5e:12:04:e8:71:5c:a8:85:fe:74:02:50:94:b2:75:aa:ec:6a:
         1d:c3:7f:5c:7d:a4:5e:57:c8:0d:7e:9c:03:59:5d:f5:fe:85:
         04:61:5e:65:d4:2f:50:b3:55:78:3d:26:57:cb:e7:4c:ec:d5:
         07:57:a7:d7:6c:50:7d:23:2f:00:53:8c:5a:aa:93:91:09:a8:
         95:88:13:4b:49:82:80:9b:52:bb:4d:01:e1:1d:c6:e4:43:9e:
         73:82:d3:a5:3f:f6:81:5e:77:82:15:ca:c6:24:11:c0:e2:ce:
         21:b0:77:3e:e2:40:21:19:b1:99:19:69:34:f7:a8:84:8b:18:
         fb:d3:53:6b:15:52:1c:c4:e1:7d:d3:39:43:25:c1:3b:86:a7:
         9f:e4:da:5a:9b:98:c7:14:8c:9f:a7:12:3b:da:51:c9:65:77:
         3e:51:66:0e:f8:7b:81:bb:2d:21:56:6b:57:69:0f:f8:ba:d9:
         db:00:9f:b3:52:f0:42:c7:6d:f6:11:83:ac:c6:7f:e8:1f:e3:
         a8:62:e2:c4:28:0f:88:84:56:9f:2e:66:01:2c:41:69:c1:ea:
         90:69:7e:28:bf:87:aa:82:27:b4:20:e3:4a:d0:c9:f0:8b:b0:
         e4:4d:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----