Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/w_RZsVQnV5c6Jlesd2-orRCXsVU.roa
File:                     w_RZsVQnV5c6Jlesd2-orRCXsVU.roa (raw, json)
Hash identifier:          wXbhIxP+hDaVa5GS4+mSO9iYIDEjwaRB2ZNKaMWBSnk=
Subject key identifier:   C3:F4:59:B1:54:27:57:97:3A:26:57:AC:77:6F:A8:AD:10:97:B1:55
Certificate issuer:       /CN=263c3507760c5b82951a307cef932b0a4d36b363
Certificate serial:       0194258F3CC3F558DA399512D525B390ABFA
Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/w_RZsVQnV5c6Jlesd2-orRCXsVU.roa
Signing time:             Thu 02 Jan 2025 05:48:51 +0000
ROA not before:           Thu 02 Jan 2025 05:48:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35041
IP address blocks:        77.232.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:3c:c3:f5:58:da:39:95:12:d5:25:b3:90:ab:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363
        Validity
            Not Before: Jan  2 05:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3f459b1542757973a2657ac776fa8ad1097b155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:97:ca:1e:f6:93:63:d1:4a:71:51:9a:f6:
                    33:9f:e3:1c:39:9e:02:6c:06:f9:56:3b:eb:21:33:
                    6f:36:ca:af:03:fc:24:51:32:1e:81:16:d9:28:6d:
                    43:fe:e4:f9:4f:d2:8b:d7:5e:0a:7e:87:9e:69:b7:
                    75:34:1b:6f:00:31:ae:64:18:5c:96:ac:68:96:b4:
                    22:58:e5:6f:91:ac:16:4c:2d:d1:6d:0a:b6:1e:6b:
                    45:63:b0:6e:0d:45:16:8a:f9:05:95:50:df:f5:22:
                    0c:31:42:b2:f7:fd:e0:4b:e9:a5:1e:72:11:06:45:
                    2c:9e:3f:f0:83:14:21:60:8e:21:56:d1:41:17:f0:
                    3d:c5:78:4d:ab:be:c9:a5:26:3f:43:7a:1f:d6:eb:
                    57:7e:01:31:e5:ba:c6:b7:b8:46:29:c4:fa:97:36:
                    06:64:3e:2e:8e:df:fb:03:3b:aa:89:c6:a8:6c:69:
                    ef:6a:32:f7:24:50:eb:66:ef:ee:ca:91:65:38:1e:
                    30:db:a1:fd:99:fa:3d:56:25:42:9d:54:cb:44:3a:
                    81:e2:a9:7b:b2:a3:6e:e8:70:c9:d5:e1:84:47:50:
                    37:d7:86:ae:99:fc:bc:c5:dc:cc:39:f9:58:04:a7:
                    16:08:ef:30:ec:63:6f:36:95:bf:a1:81:07:86:65:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:59:B1:54:27:57:97:3A:26:57:AC:77:6F:A8:AD:10:97:B1:55
            X509v3 Authority Key Identifier:
                keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/w_RZsVQnV5c6Jlesd2-orRCXsVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.232.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:55:26:e0:a2:0c:25:f2:92:b3:7d:6d:e1:90:93:83:83:
         c6:ad:c2:1c:37:22:e2:0d:c1:51:ed:80:47:6d:07:00:bc:db:
         bf:a8:ec:81:bc:26:c4:f6:20:c0:75:ce:4f:f9:61:b2:72:d5:
         ed:de:e9:23:1f:00:cb:7c:d8:36:d8:99:ea:3d:0f:a8:0e:bf:
         5a:e3:d7:9f:9f:d7:6f:af:75:67:19:8e:b4:ec:9c:f3:06:e6:
         46:c4:e6:49:2b:c2:b7:6c:be:cf:3b:e0:84:b0:60:01:64:ce:
         2d:f2:2a:67:4e:74:f2:e6:94:ec:65:49:92:60:b5:e5:c5:2b:
         d7:45:24:15:d6:8e:07:8e:b0:98:81:eb:a8:02:a9:21:13:23:
         ce:21:75:bb:f9:6b:d9:94:15:07:5c:ff:26:da:74:25:e3:32:
         1d:1c:bd:06:35:33:38:63:a7:d5:29:e0:b9:ed:be:d9:7e:a3:
         53:fc:60:b2:8b:26:c3:67:a6:e6:be:db:61:7a:d3:8d:ea:02:
         79:df:26:fb:38:8c:73:7f:9b:fd:51:e0:e8:2f:1a:79:67:0f:
         05:db:b4:53:fb:06:80:23:11:cc:55:b1:9f:ed:6c:59:24:09:
         1c:f4:9e:a2:6b:b0:8f:35:bf:0b:75:2a:2f:17:45:0d:f1:8a:
         6e:1a:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----