Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/j0079Gdow0tNd5CU-iJwLzd7i5w.roa
File:                     j0079Gdow0tNd5CU-iJwLzd7i5w.roa (raw, json)
Hash identifier:          jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=
Subject key identifier:   8F:4D:3B:F4:67:68:C3:4B:4D:77:90:94:FA:22:70:2F:37:7B:8B:9C
Certificate issuer:       /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial:       019427B5F573FEE5441400A6495159E782E5
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/j0079Gdow0tNd5CU-iJwLzd7i5w.roa
Signing time:             Thu 02 Jan 2025 15:50:23 +0000
ROA not before:           Thu 02 Jan 2025 15:50:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207463
IP address blocks:        94.231.206.0/24 maxlen: 24
                          2a10:1800:1::/48 maxlen: 48
                          2a10:1800:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:f5:73:fe:e5:44:14:00:a6:49:51:59:e7:82:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
        Validity
            Not Before: Jan  2 15:50:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f4d3bf46768c34b4d779094fa22702f377b8b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:50:40:e7:0a:92:db:7e:b3:b7:62:cd:32:
                    28:02:a2:d5:9a:ed:9c:37:52:ba:a5:f6:10:8d:1a:
                    2f:51:63:77:97:b7:89:dc:8d:d3:6b:d2:42:0a:62:
                    d3:9a:d0:15:92:02:cc:20:ab:2a:12:5b:b6:b2:e5:
                    3f:48:d3:be:4d:07:9b:68:e4:2b:42:35:ad:c3:2b:
                    43:8c:f7:52:97:a8:a3:f2:3d:be:a9:57:4b:0b:e3:
                    86:b9:d2:ad:ee:a5:85:47:98:7a:9b:9d:d1:fb:ec:
                    06:b7:5c:79:d3:6b:92:66:42:8a:dd:e2:8b:63:f9:
                    37:eb:a4:c6:f2:51:6b:34:47:ff:46:80:f5:fa:dd:
                    94:66:26:5f:c8:7d:65:56:81:3e:a5:e2:a4:7d:10:
                    ad:6b:3f:83:56:32:ae:d4:14:ee:21:5a:bb:21:bc:
                    38:0a:96:94:4c:ad:0d:7f:9f:a0:37:dc:37:50:12:
                    98:f2:c7:2d:52:c7:b5:f8:22:55:72:f3:c6:a3:bf:
                    ff:74:5b:17:b1:9d:0b:fa:7f:e4:8c:97:e4:03:a6:
                    58:13:78:67:fd:04:a8:9d:9d:33:0e:c2:e7:e1:2f:
                    ff:6b:f7:d6:39:8e:4c:13:91:6c:cf:64:00:01:d0:
                    1e:eb:1e:5b:c2:c5:85:0e:3f:e9:a8:ee:a8:24:59:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:3B:F4:67:68:C3:4B:4D:77:90:94:FA:22:70:2F:37:7B:8B:9C
            X509v3 Authority Key Identifier:
                keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/j0079Gdow0tNd5CU-iJwLzd7i5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.206.0/24
                IPv6:
                  2a10:1800:1::-2a10:1800:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:82:fc:ce:a2:00:92:86:01:60:00:93:fd:57:f2:51:08:
         bf:d9:05:8b:a1:7d:cb:47:86:ef:aa:f0:ff:39:8a:9e:dd:5e:
         20:c1:53:e8:1e:3d:e5:2e:3c:9f:f1:a2:db:6f:b6:da:67:c9:
         fa:a0:52:94:cc:e7:ea:55:80:c7:3e:6c:42:37:ad:0e:43:1a:
         31:5d:32:f0:99:e9:89:14:cd:a4:68:0a:c3:8c:11:ff:db:14:
         a2:ca:e0:1e:2f:41:0f:d4:a2:61:cc:3b:40:05:69:56:62:8a:
         78:e3:6b:b4:27:56:00:1e:26:22:8a:aa:59:c0:54:41:71:88:
         4e:a7:59:42:05:95:28:73:f8:b8:1e:03:fb:51:ff:2e:c1:80:
         8a:1b:a1:f5:a8:16:55:21:b8:f7:f8:6a:f6:77:49:42:69:b2:
         b4:5b:53:9a:10:b9:23:8f:5f:4e:2f:85:a3:8d:05:2b:16:73:
         af:93:22:8f:94:1c:f6:4f:aa:e9:20:63:1d:bf:99:70:e7:e0:
         12:7d:dc:ab:8e:c4:aa:a7:e9:b1:c7:30:6b:36:1d:ab:f9:d4:
         b2:90:ac:0f:f0:ab:08:83:23:90:23:02:89:fc:5f:34:2f:21:
         6d:90:a5:95:93:26:16:4c:96:b5:19:19:72:32:4e:b7:b5:b0:
         76:98:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----