Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/xiXR5CA0LknEtnJqptzk0g7U8nI.roa
File:                     xiXR5CA0LknEtnJqptzk0g7U8nI.roa (raw, json)
Hash identifier:          hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=
Subject key identifier:   C6:25:D1:E4:20:34:2E:49:C4:B6:72:6A:A6:DC:E4:D2:0E:D4:F2:72
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019424B385CF231C7886CEC0D7B4659722AB
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/xiXR5CA0LknEtnJqptzk0g7U8nI.roa
Signing time:             Thu 02 Jan 2025 01:48:52 +0000
ROA not before:           Thu 02 Jan 2025 01:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57405
IP address blocks:        46.143.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:85:cf:23:1c:78:86:ce:c0:d7:b4:65:97:22:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  2 01:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c625d1e420342e49c4b6726aa6dce4d20ed4f272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:40:76:36:31:dd:8e:cd:42:6d:12:e5:e3:
                    ee:fa:f2:89:6d:db:be:17:f2:7e:63:98:91:93:75:
                    cc:20:2c:64:85:80:a9:b1:8c:6d:2e:e3:3a:87:82:
                    7c:4e:60:f0:2e:2c:96:72:df:75:a4:32:91:14:46:
                    26:a8:cd:ce:b8:2c:14:27:23:b5:de:92:dc:00:68:
                    25:c8:14:9c:65:e6:2a:94:6e:6d:5d:73:3f:dc:6a:
                    0e:b4:d3:34:26:11:01:84:e1:67:e7:25:c5:33:73:
                    82:56:0d:86:d9:04:12:21:91:de:9c:6c:c3:ee:a8:
                    32:14:83:ae:6d:aa:5e:68:28:0a:69:71:7b:21:2f:
                    df:53:fc:0d:9f:41:81:96:8d:e4:a7:ab:01:ce:de:
                    3f:18:c2:af:72:22:2c:a5:1d:40:a3:ea:05:56:88:
                    6d:26:74:94:42:33:5f:66:d9:f5:30:6e:d2:32:d5:
                    ea:d2:fe:f7:c8:61:83:e7:5d:b3:35:f4:f5:96:f0:
                    2c:fa:2c:d1:54:90:bf:92:7b:65:03:0b:12:42:48:
                    ad:b1:7d:59:a8:73:20:46:0d:c3:08:05:27:43:ab:
                    b0:4d:29:1c:40:79:9d:92:2f:0f:dc:a9:f7:21:b7:
                    96:0b:82:e7:ed:04:de:35:51:d3:16:6b:8b:9c:26:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:D1:E4:20:34:2E:49:C4:B6:72:6A:A6:DC:E4:D2:0E:D4:F2:72
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/xiXR5CA0LknEtnJqptzk0g7U8nI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:54:03:f1:3e:a9:19:e7:e6:31:1e:7a:fb:25:9a:05:62:
         8f:fa:84:16:31:0c:2b:12:0e:c1:82:0e:da:d4:52:f3:e8:ea:
         2e:b7:60:59:49:86:e1:77:51:47:30:b4:5e:dd:bd:cb:9c:b9:
         12:71:11:4c:9b:ee:8c:05:ac:1b:67:54:bc:3d:aa:83:21:19:
         df:01:65:ea:f4:a9:e0:cb:24:1a:4d:9c:49:10:51:97:36:2f:
         26:46:81:40:9b:12:e1:1d:97:c0:3e:02:62:db:b4:48:54:06:
         48:c5:a6:48:d1:86:1e:98:c1:09:fe:6d:29:64:05:4f:3c:d8:
         6e:ad:d4:54:5b:1d:c4:3e:3e:8a:65:06:06:9c:6d:72:3f:63:
         1e:33:a7:33:7b:27:ff:23:f5:33:50:b7:ed:30:c1:82:f2:fc:
         ae:58:8c:32:42:44:12:16:89:3e:8d:92:72:80:d5:74:55:5f:
         2b:d3:50:b6:f8:13:77:69:02:f2:54:c1:b6:d5:37:96:ed:38:
         c8:48:28:69:c4:aa:db:8b:d7:e7:0d:34:53:c0:eb:a9:f9:57:
         73:ce:c9:b8:4b:af:30:1f:f4:49:1c:7c:bd:11:d0:fb:80:0f:
         ae:0a:c8:2c:03:c0:ea:53:f5:7b:40:d3:3f:95:ff:86:ea:6e:
         be:4b:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----