Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/MOCwLZlblZQoo_YoYCbZ92anb2M.roa
File:                     MOCwLZlblZQoo_YoYCbZ92anb2M.roa (raw, json)
Hash identifier:          jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=
Subject key identifier:   30:E0:B0:2D:99:5B:95:94:28:A3:F6:28:60:26:D9:F7:66:A7:6F:63
Certificate issuer:       /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial:       0194206811BB89B778B55A3EB6562DC5FB83
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/MOCwLZlblZQoo_YoYCbZ92anb2M.roa
Signing time:             Wed 01 Jan 2025 05:47:58 +0000
ROA not before:           Wed 01 Jan 2025 05:47:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206706
IP address blocks:        185.126.32.0/24 maxlen: 24
                          2a10:18c0::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:11:bb:89:b7:78:b5:5a:3e:b6:56:2d:c5:fb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
        Validity
            Not Before: Jan  1 05:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=30e0b02d995b959428a3f6286026d9f766a76f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:41:a7:9a:68:94:87:ac:56:10:9b:2f:90:
                    92:cd:92:5e:d3:08:c5:04:5f:dd:ce:2f:76:6b:11:
                    ae:25:ae:0b:3e:0e:2e:ae:fb:ca:2e:a6:70:e9:c7:
                    07:8c:9a:ef:33:64:1d:42:ed:9d:1a:d5:73:32:73:
                    8e:e8:51:59:99:1e:0b:14:83:4b:36:03:06:61:f1:
                    ee:69:02:52:0f:ca:90:22:35:ca:15:79:ff:ba:59:
                    28:74:32:ca:68:bb:03:df:36:cb:6a:3e:b9:2f:37:
                    ac:30:87:a1:d1:b6:c9:0c:89:90:bf:40:85:af:9b:
                    08:ae:76:db:b8:1a:a9:b5:41:7f:7b:ac:e0:88:a5:
                    5e:f8:9e:08:d0:79:0e:99:06:77:71:6d:9a:ed:fe:
                    b5:a7:84:b6:c2:49:4b:fa:96:64:34:63:d6:c4:32:
                    1d:e5:8c:e3:7d:2c:de:6b:2f:27:04:b9:c6:91:e0:
                    d5:24:6c:c7:28:c1:96:22:8f:a8:57:4d:29:c8:aa:
                    a4:57:9a:1d:bb:09:f4:5b:71:72:06:5b:49:d5:36:
                    8a:dc:95:91:e5:df:f6:31:60:3b:e0:04:58:d9:60:
                    cf:7e:7c:67:79:52:cb:81:a0:6a:9a:50:9e:fe:8d:
                    24:30:bf:86:d4:38:4c:68:1b:f2:3f:ad:97:92:cf:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:B0:2D:99:5B:95:94:28:A3:F6:28:60:26:D9:F7:66:A7:6F:63
            X509v3 Authority Key Identifier:
                keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/MOCwLZlblZQoo_YoYCbZ92anb2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.32.0/24
                IPv6:
                  2a10:18c0::/30

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:dd:b7:78:8c:fd:68:21:6a:fc:2e:a9:da:5c:7f:98:e2:
         9e:35:56:1c:19:3b:6a:d5:5b:ee:82:4f:51:48:ac:18:02:d4:
         e2:5b:57:8a:b0:1c:c5:09:6b:98:13:9b:02:a9:96:34:cf:97:
         6f:12:5c:bb:8a:3c:02:b9:95:86:2d:23:b7:80:d6:0a:46:f7:
         74:16:1d:47:15:49:83:81:62:5b:b0:4a:23:e1:48:66:49:01:
         88:ec:d2:5f:a4:b3:84:d7:05:17:be:c1:55:43:33:fd:fe:d4:
         7d:38:e1:1e:18:70:ee:0d:c9:a5:7a:64:0e:f5:76:2d:d2:6f:
         f5:6f:81:ee:8b:8c:79:ad:b4:a8:02:07:8d:fa:41:f0:c6:96:
         4f:37:f9:89:95:5f:3a:7e:aa:ce:74:74:77:1a:ae:13:ee:ea:
         97:f8:14:4b:a2:e8:30:44:9b:89:eb:d7:06:28:c1:6d:8c:6d:
         dd:85:2e:96:59:2c:33:33:75:28:68:f6:6c:f3:a0:0f:b1:78:
         0d:cb:65:d1:21:1a:82:05:24:ee:83:4f:2f:2c:38:45:63:27:
         63:ff:3e:fe:e4:5e:74:02:68:6a:ad:ce:90:ec:5e:8f:3f:5e:
         21:c6:b7:0f:67:7a:da:05:ea:3f:b5:fe:82:c0:0e:a1:ef:6d:
         e6:68:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----