Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/2k8hxNct16j34n9vu40oYzWb_IQ.roa
File:                     2k8hxNct16j34n9vu40oYzWb_IQ.roa (raw, json)
Hash identifier:          LH9QtE0WXXNUf6Hhwh7taJhal8ATBhWsjEi1WZLEP04=
Subject key identifier:   DA:4F:21:C4:D7:2D:D7:A8:F7:E2:7F:6F:BB:8D:28:63:35:9B:FC:84
Certificate issuer:       /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial:       018CC5DC3470CCD0096B062193D51A9C446A
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/2k8hxNct16j34n9vu40oYzWb_IQ.roa
Signing time:             Mon 01 Jan 2024 16:29:52 +0000
ROA not before:           Mon 01 Jan 2024 16:29:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203455
IP address blocks:        185.133.132.0/22 maxlen: 32
                          2a05:70c0::/29 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:34:70:cc:d0:09:6b:06:21:93:d5:1a:9c:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
        Validity
            Not Before: Jan  1 16:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da4f21c4d72dd7a8f7e27f6fbb8d2863359bfc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ce:28:8c:87:ed:e3:05:3a:36:c0:dd:d2:84:
                    cb:06:a8:71:38:f8:47:83:a7:7e:bf:1a:d1:ff:f0:
                    1a:0c:63:cb:1f:81:3d:25:ef:c8:7a:46:77:b0:a5:
                    62:d0:54:a4:4e:fd:36:a7:36:9e:30:31:fa:ef:89:
                    47:80:60:35:b2:1b:25:bc:c2:4c:3c:22:2e:d2:25:
                    e4:db:69:33:4d:b3:7c:27:27:c9:ab:4b:0c:c3:2c:
                    43:6f:e8:b7:05:75:be:6e:d2:67:c5:0b:d1:1c:42:
                    ab:63:9d:71:09:4e:89:be:f0:a0:a7:54:3b:64:58:
                    1f:95:5e:d3:33:31:d2:91:31:74:10:78:4c:6c:b8:
                    5b:1c:6a:bf:32:0d:ce:50:09:2c:22:e5:a3:1f:2d:
                    e1:0d:2d:95:66:6f:a6:56:bd:3b:8a:73:b8:54:8d:
                    db:f2:cf:8f:fa:31:71:37:4e:90:c8:93:cf:eb:d5:
                    2f:da:f1:f2:04:3a:6a:be:54:d8:ba:b1:9e:45:a3:
                    81:e9:81:3b:91:6d:5b:95:2d:93:de:4b:f1:22:08:
                    61:49:ad:83:19:55:e0:c0:07:70:0b:b7:78:e6:9e:
                    e9:7d:a6:86:1d:4c:bc:92:79:da:ac:09:49:96:a6:
                    6b:a3:6d:83:0d:13:43:6f:0e:92:22:61:04:90:98:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:21:C4:D7:2D:D7:A8:F7:E2:7F:6F:BB:8D:28:63:35:9B:FC:84
            X509v3 Authority Key Identifier:
                keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/2k8hxNct16j34n9vu40oYzWb_IQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.132.0/22
                IPv6:
                  2a05:70c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:90:5a:ba:52:da:6d:3d:42:f6:55:b1:d8:f1:66:7f:b0:
         77:09:aa:4d:a8:48:f1:d7:65:97:7c:ec:91:2d:55:da:8e:72:
         aa:df:45:60:a1:3f:61:4b:b0:c8:cf:1c:ce:99:02:ee:b2:b3:
         2a:a7:c2:cf:d3:bf:86:d2:44:ef:08:ea:6d:44:3a:34:53:c4:
         99:01:21:8e:96:e1:f5:4c:b2:74:4f:d9:d7:b3:e0:cd:aa:6b:
         6a:91:c1:ce:9c:f6:a5:be:a6:6e:77:e3:a3:46:30:ff:27:40:
         d5:f9:98:9b:cf:f0:74:3d:7f:69:71:2c:4a:0f:c3:cd:38:9e:
         d4:2d:0a:48:29:a2:ec:f1:83:cc:35:7c:ea:67:20:e0:c6:21:
         b3:03:68:62:87:cf:90:9a:16:7c:d2:5a:07:25:4e:80:e3:82:
         7a:f8:2f:88:ba:b3:e5:93:20:43:f2:e7:8c:73:fa:e1:5f:9f:
         c0:55:17:6b:5f:6d:a5:8a:02:be:b1:4e:9e:7d:b1:45:2b:39:
         f1:d1:58:0c:c1:31:4f:7f:bb:89:e3:01:d6:2d:45:b6:fc:2c:
         c8:1c:7c:d5:f4:a4:00:5b:7f:62:16:ec:5c:bf:0e:b4:49:bf:
         c1:fc:1d:4b:d4:e8:6d:28:85:e4:72:b2:43:70:ff:f9:be:8b:
         7e:43:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----