Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/V3CR4lYDNh-Wfn6M2vlTj-37od8.roa
File:                     V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (raw, json)
Hash identifier:          n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=
Subject key identifier:   57:70:91:E2:56:03:36:1F:96:7E:7E:8C:DA:F9:53:8F:ED:FB:A1:DF
Certificate issuer:       /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial:       01942825B677115772334CA0825BBDB21AD3
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/V3CR4lYDNh-Wfn6M2vlTj-37od8.roa
Signing time:             Thu 02 Jan 2025 17:52:27 +0000
ROA not before:           Thu 02 Jan 2025 17:52:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41127
IP address blocks:        212.74.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:b6:77:11:57:72:33:4c:a0:82:5b:bd:b2:1a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
        Validity
            Not Before: Jan  2 17:52:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=577091e25603361f967e7e8cdaf9538fedfba1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:54:1b:50:51:1c:6b:fc:d0:79:c5:fd:a4:
                    5b:a8:f1:0c:d0:8a:d4:d0:09:76:42:2c:0e:bd:99:
                    45:7d:51:d2:e1:7a:94:bb:e5:6b:8f:2d:11:49:12:
                    a4:f0:e6:1b:28:ff:1e:c1:bd:59:28:5a:9a:8c:8d:
                    cf:ae:87:53:2e:c7:36:ef:0b:37:62:fa:dd:b4:df:
                    f5:b2:dc:ed:37:7b:15:a5:76:ad:44:8d:1a:52:8c:
                    85:d8:20:ce:af:76:f5:61:5d:82:ee:0f:7f:2e:3d:
                    a8:96:c2:44:ae:c8:37:b8:8d:13:8a:fd:8d:18:00:
                    6d:b1:32:1f:07:a6:87:72:a4:8c:fb:ee:58:be:7f:
                    c5:f5:b7:e6:5e:9b:ba:00:5a:45:be:c1:fd:f6:72:
                    19:84:1a:2a:f5:66:c4:4b:ee:2a:b6:29:0c:0d:fe:
                    61:64:92:68:1f:80:03:5b:d1:c4:79:2c:72:ef:b3:
                    36:48:d0:47:c9:1d:d5:a4:dc:26:22:e2:10:a3:e8:
                    35:39:01:9a:6e:52:d8:2e:57:62:ba:56:a1:12:47:
                    df:15:6d:d3:24:85:af:14:74:37:52:0b:9b:fb:15:
                    5e:b9:c6:86:8c:74:f7:2d:49:80:33:2f:33:e6:ce:
                    29:2f:09:ed:8d:56:46:3e:c8:36:86:47:eb:9d:32:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:91:E2:56:03:36:1F:96:7E:7E:8C:DA:F9:53:8F:ED:FB:A1:DF
            X509v3 Authority Key Identifier:
                keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/V3CR4lYDNh-Wfn6M2vlTj-37od8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:74:12:dc:4a:4c:5a:e6:0f:cc:f2:25:95:87:f4:3d:83:
         cb:2a:81:67:df:57:ec:53:e6:06:bf:7f:1c:7c:11:75:44:b7:
         d1:20:cc:cd:e5:05:0e:b9:ee:55:0b:c6:a6:bc:5b:58:64:df:
         cc:05:b8:ac:b8:49:d4:14:80:f3:40:b6:8d:cb:ee:b6:14:56:
         a8:50:90:1f:bb:89:b8:e1:ed:78:ca:a3:d7:8c:c7:11:9c:3c:
         be:c4:58:3d:c1:0c:72:d0:fb:1c:b8:f8:b5:1f:21:4a:5f:8c:
         00:35:37:17:99:6d:9b:f6:23:5c:d7:a8:34:ef:88:c6:8b:8e:
         5f:5f:59:26:2b:92:5e:2d:1c:ab:75:ac:80:ca:02:9d:5b:3d:
         2d:39:ad:7f:a1:86:db:b5:37:d0:37:98:b5:9d:f6:f9:0a:9e:
         b4:e2:6a:a9:82:37:3c:28:f4:81:13:33:80:84:31:e0:0a:71:
         ce:75:f0:d7:14:1d:c7:65:b7:ff:6f:16:75:c0:85:aa:1a:be:
         7f:0d:aa:1f:7f:9d:c5:58:68:26:84:1b:01:1d:ee:3e:4f:0d:
         fc:5c:30:ef:f1:e7:75:6d:2a:08:2a:b7:25:be:94:c8:28:7c:
         50:b6:3f:56:41:c5:d6:10:63:78:6c:bf:1f:d3:0d:cf:0f:b8:
         b1:07:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----