Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/vmuuQgL6_7WR0X9Si-dA4VoNZG4.roa
File:                     vmuuQgL6_7WR0X9Si-dA4VoNZG4.roa (raw, json)
Hash identifier:          zi2U0j0le7PxT48Hk3VmiNFebjyyfSofjL0vt9KKHvA=
Subject key identifier:   BE:6B:AE:42:02:FA:FF:B5:91:D1:7F:52:8B:E7:40:E1:5A:0D:64:6E
Certificate issuer:       /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial:       018FB992E40EB8248CFAD87B98673EF6B508
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/vmuuQgL6_7WR0X9Si-dA4VoNZG4.roa
Signing time:             Mon 27 May 2024 10:22:42 +0000
ROA not before:           Mon 27 May 2024 10:22:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215958
IP address blocks:        185.241.41.0/24 maxlen: 24
                          2a14:4900:5900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b9:92:e4:0e:b8:24:8c:fa:d8:7b:98:67:3e:f6:b5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
        Validity
            Not Before: May 27 10:22:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=be6bae4202faffb591d17f528be740e15a0d646e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:63:f2:04:48:c6:3d:c5:de:1b:06:ea:7e:
                    c7:7c:f2:07:cb:9d:7d:e9:6b:9b:11:82:56:79:3c:
                    b5:e9:19:17:13:86:74:a3:27:ad:b3:91:af:81:09:
                    63:49:ae:c4:a5:65:27:d3:07:49:9c:df:ee:e4:32:
                    cb:ff:0c:f0:86:17:7a:90:a2:2e:50:ba:15:bb:14:
                    51:82:03:96:04:53:8a:79:1c:91:5a:5f:61:f6:e3:
                    03:d6:db:28:ed:82:c2:cc:26:fe:16:85:06:a6:01:
                    e9:ac:eb:13:fa:62:8f:ef:e7:60:ab:03:17:36:bc:
                    69:36:8c:a3:4a:6a:82:f9:4c:41:df:36:4b:58:31:
                    d1:b2:74:fb:c4:8c:67:b9:d6:0e:bd:18:30:89:6a:
                    33:b5:75:bb:96:46:4e:17:9e:44:53:44:2e:9a:1b:
                    c6:2f:7b:7c:2e:b8:c3:af:a0:35:12:82:d8:ea:df:
                    9f:0e:3b:6a:28:9c:31:e6:b7:c6:78:15:82:13:52:
                    b3:5d:bb:f1:29:93:28:68:ec:56:fd:93:81:67:b9:
                    d6:9a:01:e4:36:f8:47:75:85:a4:5b:7d:ef:9a:5f:
                    5e:e8:e1:41:d1:7b:b9:fd:f4:07:0d:8c:5f:33:21:
                    db:5b:7b:55:dd:0e:20:96:e7:0e:a9:62:08:62:e5:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:AE:42:02:FA:FF:B5:91:D1:7F:52:8B:E7:40:E1:5A:0D:64:6E
            X509v3 Authority Key Identifier:
                keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/vmuuQgL6_7WR0X9Si-dA4VoNZG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.41.0/24
                IPv6:
                  2a14:4900:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:39:89:a8:f9:73:75:2c:51:38:fb:87:a8:1c:98:8a:d1:4f:
         95:0a:e1:f0:81:50:97:c3:7a:69:e6:98:db:36:32:c3:df:df:
         66:78:56:55:21:16:e7:82:c7:65:06:64:19:0e:4b:78:b1:84:
         8c:bc:a3:a6:f4:66:0b:98:16:f6:16:79:a7:73:49:3e:50:48:
         13:05:a7:33:70:b0:fc:d5:a8:6d:1a:57:98:cc:3f:9f:71:3e:
         54:37:15:34:d8:05:53:ca:39:a8:f5:c9:84:9a:9d:6e:69:7f:
         d7:f7:d1:52:e9:b3:c0:a8:78:13:05:0e:f2:4a:2b:7b:bc:ed:
         29:b9:df:ea:54:39:8c:49:4a:71:1f:a4:20:8f:14:ca:bb:6b:
         b8:48:6e:cc:f8:3d:4a:2c:8d:8d:d2:5a:0f:62:bc:c7:82:70:
         00:25:0a:55:44:d9:c2:14:e7:7c:7e:0f:09:d5:4a:d5:0c:0e:
         a3:1c:b2:a6:a1:21:4d:3d:09:20:98:a4:0b:cf:c8:4c:24:ff:
         33:aa:60:67:a2:10:eb:1a:2d:8d:86:83:ff:5d:51:86:3c:9e:
         08:4d:dd:b7:ae:bb:6d:d1:42:83:ce:73:a4:b1:e6:07:bc:a3:
         bc:30:89:8d:e9:aa:b4:eb:12:2b:5d:5a:1e:fa:c6:a2:83:d2:
         91:54:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----