Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa
File:                     e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (raw, json)
Hash identifier:          z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=
Subject key identifier:   7B:F8:DD:1D:9F:54:3D:7F:1F:33:35:20:03:2A:A1:D5:85:2B:AF:48
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       0194228D6E5322B30373477CC8E58046D611
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa
Signing time:             Wed 01 Jan 2025 15:48:01 +0000
ROA not before:           Wed 01 Jan 2025 15:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60491
IP address blocks:        185.30.92.0/22 maxlen: 22
                          2a00:afe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:6e:53:22:b3:03:73:47:7c:c8:e5:80:46:d6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Jan  1 15:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7bf8dd1d9f543d7f1f333520032aa1d5852baf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:a5:c1:42:6e:a9:21:5a:fe:a0:2b:b4:c1:
                    66:6b:e0:ef:f6:be:fb:12:0d:78:fe:bc:42:59:cc:
                    50:cf:b3:64:3e:95:9a:fc:4b:21:06:a5:47:80:57:
                    94:54:57:25:07:e3:b5:d8:45:d3:da:4c:db:05:95:
                    77:37:21:36:bc:35:ba:88:6e:0c:ab:fd:5b:02:f1:
                    e2:16:88:68:96:5a:09:05:30:6f:e5:ec:61:07:62:
                    cf:85:9c:47:be:5d:e9:05:24:6a:76:99:4c:fe:d6:
                    17:74:db:12:a2:7f:d8:96:04:d9:2e:97:bd:6d:46:
                    95:b0:36:6b:cb:34:b0:50:6d:1d:a8:ec:86:8d:b9:
                    3b:8d:9e:9f:ec:2f:f4:8c:7e:0a:c9:74:bb:2c:08:
                    c5:d7:38:c7:f5:ec:3e:b1:fd:78:ff:2d:1f:a0:1f:
                    b6:35:b2:16:89:57:03:4a:f4:ac:c7:57:aa:eb:79:
                    7b:99:31:31:6f:64:33:e2:ce:1f:97:75:d9:76:a0:
                    67:76:11:14:e3:da:54:a3:44:23:ca:92:72:d5:29:
                    ab:aa:35:4d:4f:3d:9c:bb:cb:5a:81:1b:dd:83:23:
                    9c:f2:04:a6:29:f6:63:56:a9:e4:ba:78:59:3e:d4:
                    90:c7:a9:f8:14:79:83:5e:0c:01:a2:a2:c6:10:9f:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:DD:1D:9F:54:3D:7F:1F:33:35:20:03:2A:A1:D5:85:2B:AF:48
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.92.0/22
                IPv6:
                  2a00:afe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:ea:95:6f:f6:1f:eb:f4:51:ca:05:a8:8b:5e:c8:d6:a0:
         98:95:81:b0:64:ab:a4:48:16:33:97:1b:a3:00:0b:15:c3:97:
         47:1b:87:c3:02:1d:76:6d:2b:80:43:a7:99:c6:70:18:80:48:
         75:08:23:b9:80:5d:8e:03:ef:b4:e2:3f:ee:ec:09:de:16:35:
         76:cd:33:65:d2:48:12:b5:3c:64:49:b4:7e:77:f2:42:ec:57:
         21:ec:4f:78:94:50:4d:2a:4b:af:75:ef:f3:ef:23:61:4b:3b:
         43:3a:a1:93:b5:9c:af:d7:a9:62:33:84:a8:8b:43:ee:c9:a3:
         cd:b9:91:8a:c7:f6:46:73:58:02:4e:16:3c:d7:33:fe:ef:98:
         bc:d9:e4:4e:1e:be:f3:fc:3f:b9:35:ec:65:17:6d:b6:bb:b2:
         c5:71:59:0b:83:43:c2:a8:85:48:64:5c:31:e5:a5:69:c4:5c:
         c7:35:0c:f0:34:7a:75:33:23:42:2a:49:1d:d6:f9:e9:55:6e:
         77:3e:6d:6b:ed:b1:76:46:53:0e:05:1f:f5:88:b1:db:66:84:
         5a:fe:a4:e3:69:a9:b8:ff:28:f0:17:3e:a5:f6:c8:31:b2:d3:
         89:93:3e:28:b6:10:25:44:5b:58:10:c6:64:9a:4d:01:56:73:
         3e:f4:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----