Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa
File:                     yDzxRDVDLfA4d6q4RWibqaKop1U.roa (raw, json)
Hash identifier:          3N8xRr8cjYZasUdpSTTtsCCDo/WTXLeLwTWluuViv90=
Subject key identifier:   C8:3C:F1:44:35:43:2D:F0:38:77:AA:B8:45:68:9B:A9:A2:A8:A7:55
Certificate issuer:       /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial:       018CC726EF62FDFBA4A2A3888421481EBB1D
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa
Signing time:             Mon 01 Jan 2024 22:31:06 +0000
ROA not before:           Mon 01 Jan 2024 22:31:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211660
IP address blocks:        185.1.201.0/24 maxlen: 24
                          2001:7f8:10d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:ef:62:fd:fb:a4:a2:a3:88:84:21:48:1e:bb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
        Validity
            Not Before: Jan  1 22:31:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c83cf14435432df03877aab845689ba9a2a8a755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:79:a4:83:7a:25:12:59:d6:0c:a3:28:ee:
                    6b:94:b9:da:67:47:5e:31:f9:d6:23:62:86:5a:95:
                    0f:be:7f:44:6b:c6:02:51:a2:9e:04:08:2a:e8:b6:
                    dc:9b:b8:74:2e:af:2e:bd:d2:f3:b9:c2:f0:6f:78:
                    5f:5e:77:0c:0e:79:c7:0c:28:29:e5:a1:86:d6:48:
                    0b:fa:87:e8:5a:d1:a7:05:55:3b:b2:55:18:fc:10:
                    d5:60:6a:a4:c2:14:98:c3:91:9d:09:75:f2:5c:58:
                    59:6b:6a:ec:ac:47:3f:dc:96:28:de:fb:f0:27:a8:
                    c3:4a:2f:5d:83:42:1a:de:25:b0:4c:7c:60:6d:3b:
                    35:89:47:f4:f0:f8:a5:89:1e:56:11:24:36:1d:26:
                    fe:04:56:ab:71:8f:1e:67:c2:fb:b3:12:cf:3e:01:
                    66:a4:56:93:fb:83:46:23:2c:62:e5:d4:a9:f6:0b:
                    79:20:de:35:31:0b:d2:7e:5a:3b:c5:69:cc:ea:8f:
                    1a:1b:b7:15:53:95:7d:93:91:eb:89:e2:b1:4c:47:
                    cb:1b:eb:50:f8:52:df:54:00:75:a5:02:86:c8:90:
                    6e:28:cc:f7:12:15:8e:96:a9:97:c8:8f:51:55:61:
                    e6:de:ff:37:ce:4f:5b:e7:7d:7e:ff:a0:01:14:b2:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:F1:44:35:43:2D:F0:38:77:AA:B8:45:68:9B:A9:A2:A8:A7:55
            X509v3 Authority Key Identifier:
                keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.201.0/24
                IPv6:
                  2001:7f8:10d::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:27:8c:4f:97:47:f6:c3:63:0c:f7:30:77:54:5a:d3:6a:
         dd:13:fe:0d:c4:c5:59:b2:ac:a0:a6:6d:02:41:f1:69:9a:c4:
         e1:c1:ed:66:66:2e:a0:66:85:f2:16:03:bd:dc:9a:23:88:f8:
         cc:31:cd:40:8c:74:d8:32:b9:dd:df:06:8f:9f:26:ec:21:6b:
         47:d7:56:0c:e7:57:79:5a:b3:3b:dc:58:4c:67:3b:dc:33:e2:
         c5:2a:67:dd:ac:bb:51:ff:b8:50:79:b5:7e:a6:30:28:b2:5f:
         43:62:12:db:22:86:e7:17:35:c3:47:82:b6:98:ae:c7:15:1b:
         60:67:d4:c1:ea:98:0b:55:2b:46:d6:42:24:11:91:8c:41:5f:
         52:9a:b7:2a:8a:d9:d5:29:9e:ab:5f:b6:90:34:6d:42:0f:7c:
         ed:75:cd:84:af:72:18:e0:2f:61:2b:0d:b9:b0:1d:a0:ad:eb:
         27:8d:75:53:56:9b:76:4a:c0:3c:e3:ab:58:8a:9c:38:af:5a:
         13:03:cf:23:7b:ae:41:cb:19:6c:d1:e6:00:2a:de:73:31:0d:
         3c:7b:c8:7f:be:71:5e:ad:a1:55:be:ac:57:72:cb:63:47:8c:
         5f:51:df:1e:52:1d:83:aa:db:79:10:93:06:53:14:ba:5f:c3:
         28:48:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----