Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/dqExZg0GTgu9TOznJg-Erf9mkrI.roa
File:                     dqExZg0GTgu9TOznJg-Erf9mkrI.roa (raw, json)
Hash identifier:          h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=
Subject key identifier:   76:A1:31:66:0D:06:4E:0B:BD:4C:EC:E7:26:0F:84:AD:FF:66:92:B2
Certificate issuer:       /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial:       019426D897B4E0EE355A71BF6C5ABAFC34E0
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/dqExZg0GTgu9TOznJg-Erf9mkrI.roa
Signing time:             Thu 02 Jan 2025 11:48:36 +0000
ROA not before:           Thu 02 Jan 2025 11:48:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41513
IP address blocks:        195.3.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:97:b4:e0:ee:35:5a:71:bf:6c:5a:ba:fc:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
        Validity
            Not Before: Jan  2 11:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76a131660d064e0bbd4cece7260f84adff6692b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:f1:5a:74:39:07:97:2d:e2:08:9e:fe:36:
                    19:d0:ed:4e:59:69:ff:d9:d3:41:e3:cf:16:17:bd:
                    4b:c2:c3:7f:7f:5a:99:e7:68:58:b6:38:cb:1c:58:
                    5d:65:d1:bb:02:d4:dd:64:6a:94:67:13:0a:60:fd:
                    40:2b:9d:35:97:56:06:5a:76:24:e4:ec:aa:0f:bd:
                    f3:1c:83:5c:01:ff:b4:04:af:65:5d:93:c6:21:86:
                    2b:ec:f1:4d:85:5e:e2:c8:fb:af:21:61:15:2f:52:
                    57:d9:66:be:7a:bf:3b:c1:ac:e2:5d:71:36:76:4b:
                    1d:a9:66:67:ea:9f:19:21:32:12:e6:31:ae:6f:dd:
                    da:41:c0:e1:e5:53:51:12:68:79:b1:0c:f1:40:7b:
                    eb:cc:a1:9f:60:6a:47:dd:31:b7:3a:c1:d6:eb:d1:
                    b9:83:3e:b9:70:1c:bc:ed:fa:4a:8d:ce:45:6e:58:
                    40:6e:ad:9c:db:0e:1b:3e:9d:8a:79:06:e8:53:9c:
                    19:59:59:8c:d2:38:d1:a7:7a:d8:c6:bc:26:3a:42:
                    60:e3:cc:16:98:4a:d6:d6:35:42:1d:6a:1a:88:2a:
                    bb:7e:d1:e8:e9:84:03:c7:73:2c:57:b7:c1:43:23:
                    65:77:b8:ed:7a:98:ea:85:bb:f7:86:92:6e:5b:51:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:31:66:0D:06:4E:0B:BD:4C:EC:E7:26:0F:84:AD:FF:66:92:B2
            X509v3 Authority Key Identifier:
                keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/dqExZg0GTgu9TOznJg-Erf9mkrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.3.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:02:76:31:af:ed:dc:12:99:1c:ec:0e:73:e5:7d:d6:c4:
         e3:d2:d4:3e:62:31:52:71:8b:7c:82:02:ea:de:07:cf:3a:2b:
         3d:28:08:5c:06:dc:db:2e:90:43:43:cd:2d:73:66:d8:dc:e7:
         db:ee:4c:94:77:7f:53:ae:75:5a:2e:2f:86:a8:2b:74:eb:5a:
         15:af:0d:e1:3c:83:e2:fa:4a:b2:24:96:20:c7:e1:eb:39:3f:
         00:fe:5a:91:61:24:de:89:7d:91:9d:08:4f:b8:ec:5a:58:02:
         4a:38:36:03:73:a6:20:0a:fe:12:74:41:a0:1e:33:f4:40:10:
         84:6b:23:24:a9:06:d0:c6:b2:39:4f:61:95:61:aa:1c:06:50:
         a6:ac:90:10:19:ba:cc:6b:0b:f6:09:a1:89:c5:b1:4a:50:ce:
         56:2f:8e:cf:e1:d2:69:93:41:d3:35:b3:08:af:f0:99:9f:3a:
         eb:87:20:4d:63:b7:27:33:b4:75:18:00:af:65:3f:40:44:fa:
         44:73:8a:e8:af:7d:e7:fd:4d:18:99:93:0d:ec:53:e6:25:41:
         21:3c:fc:39:75:6a:07:08:44:7a:61:21:3b:cb:a3:4d:99:83:
         fe:89:13:18:e0:fc:69:7b:4d:ef:40:46:41:54:cc:c6:a6:b5:
         5d:79:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----