Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa
File:                     MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (raw, json)
Hash identifier:          iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=
Subject key identifier:   30:51:EA:9A:A2:22:D2:57:3F:45:EF:4F:A1:8A:4B:D4:FC:3E:01:38
Certificate issuer:       /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial:       019427B545BE63519F22ECF47FB8A0B241AA
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa
Signing time:             Thu 02 Jan 2025 15:49:38 +0000
ROA not before:           Thu 02 Jan 2025 15:49:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62357
IP address blocks:        185.39.184.0/22 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:45:be:63:51:9f:22:ec:f4:7f:b8:a0:b2:41:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
        Validity
            Not Before: Jan  2 15:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3051ea9aa222d2573f45ef4fa18a4bd4fc3e0138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:6f:fa:e4:4b:d3:4d:7b:00:0c:5b:30:21:
                    bf:0f:14:60:53:7c:1a:28:da:9d:6e:47:e6:f2:99:
                    e9:30:56:08:7c:3a:af:9c:1d:fa:98:7c:e3:18:f4:
                    74:42:e9:40:c1:a6:ad:61:f9:b9:1a:1f:37:e8:f5:
                    37:56:86:be:49:5f:13:17:e0:c7:8b:25:22:42:fb:
                    25:12:a3:76:f3:61:50:62:b5:46:2e:2c:74:46:1d:
                    6c:5a:17:9d:94:3e:61:b4:94:6f:3b:d0:95:80:54:
                    55:3f:7e:6a:c9:e2:b5:6c:93:4b:13:33:20:02:cd:
                    62:86:65:eb:46:e9:d8:71:91:b2:1b:14:f1:ce:6c:
                    3d:11:8b:58:29:e4:2d:0b:2a:90:ad:f2:ca:e7:e0:
                    12:36:2c:9c:67:d7:38:18:9b:1c:90:31:ee:06:32:
                    11:82:d1:10:4c:42:cf:1c:9c:55:89:5b:7c:54:04:
                    c0:4c:47:b1:c9:62:77:0a:5c:e3:b6:5a:bc:34:37:
                    48:f7:08:69:2a:6d:bd:73:3d:80:59:6d:00:71:77:
                    59:30:38:59:c1:7e:d9:36:e6:21:b7:52:32:6f:3d:
                    8e:f6:34:23:99:56:4b:97:7b:f2:38:b6:f5:4c:3b:
                    85:1c:2d:01:db:54:47:b1:0c:5b:ea:2e:e8:0b:86:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:EA:9A:A2:22:D2:57:3F:45:EF:4F:A1:8A:4B:D4:FC:3E:01:38
            X509v3 Authority Key Identifier:
                keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:81:80:42:23:70:cb:1e:f4:fa:eb:33:36:77:a9:5c:82:94:
         5f:b7:e5:58:a8:49:f8:ea:4d:e7:62:b7:66:04:3e:50:12:42:
         91:0e:f8:82:a4:db:4f:16:ee:4a:3f:03:b2:82:49:ae:3a:03:
         36:f4:ff:e3:7c:58:3e:df:ff:d8:db:72:ec:e3:1e:dc:05:93:
         88:03:83:11:87:1a:23:11:4d:9d:5a:96:7a:da:85:d1:ca:05:
         86:11:aa:0d:10:f0:4a:02:ca:21:59:b3:91:ed:86:93:ff:53:
         24:dd:d9:8f:61:c3:eb:dd:58:a0:0f:31:0f:24:f0:fd:33:54:
         a8:14:75:15:2f:15:89:06:34:cb:43:ad:87:a8:a0:f5:e6:89:
         60:f7:8d:26:97:45:04:e5:1d:50:47:93:92:82:1c:18:d1:7a:
         15:56:ba:b0:51:44:a1:cf:94:55:90:c7:9b:aa:3f:e8:61:af:
         8a:94:1d:06:bd:5f:9d:74:cd:95:cc:df:d8:de:a2:28:80:04:
         3c:c8:6a:34:d7:51:c1:36:84:ff:68:83:1f:5e:18:24:bf:90:
         71:10:92:f2:07:56:a0:6c:d5:1e:ef:30:91:f8:b8:e8:00:09:
         06:19:a9:00:4b:79:d1:5e:9b:5e:f4:da:16:58:2a:89:ad:9f:
         5c:8c:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----