Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/6fX3AcGq-C5YFIqBi50as54EhPA.roa
File:                     6fX3AcGq-C5YFIqBi50as54EhPA.roa (raw, json)
Hash identifier:          1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=
Subject key identifier:   E9:F5:F7:01:C1:AA:F8:2E:58:14:8A:81:8B:9D:1A:B3:9E:04:84:F0
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       019425219E459A7F29C5293FC1C37AFFB935
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/6fX3AcGq-C5YFIqBi50as54EhPA.roa
Signing time:             Thu 02 Jan 2025 03:49:07 +0000
ROA not before:           Thu 02 Jan 2025 03:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60795
IP address blocks:        185.80.32.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:9e:45:9a:7f:29:c5:29:3f:c1:c3:7a:ff:b9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jan  2 03:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e9f5f701c1aaf82e58148a818b9d1ab39e0484f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:e4:28:32:ae:72:b5:fd:dc:42:d8:5c:2f:
                    10:58:8d:20:4d:b6:b6:7f:1c:46:58:02:81:9f:60:
                    a7:a4:ed:fa:6e:9b:df:e0:20:8e:38:34:56:61:73:
                    04:a2:39:23:a3:91:d8:a2:44:1c:3d:ac:74:ae:3f:
                    48:df:e0:ff:a0:c0:71:f5:de:3e:b3:bf:a9:27:e8:
                    e4:89:26:fb:2c:72:c1:bb:9e:82:ba:1f:61:9f:0c:
                    ff:d0:11:8c:22:19:84:29:dd:61:2c:5a:64:85:94:
                    7e:f3:a8:c2:34:ba:86:f0:09:8a:0e:01:90:0a:bc:
                    37:40:86:7a:30:61:c0:d4:04:83:23:9f:c6:9c:04:
                    8b:91:7d:ec:fa:6d:7a:ff:42:bb:03:4b:b6:72:01:
                    58:ef:82:ab:c7:21:d9:2a:22:a6:d1:46:4c:cb:88:
                    f7:e2:fd:4a:0f:32:0a:58:a7:6d:06:62:5f:11:15:
                    be:d8:99:81:62:51:65:69:50:2e:3c:cb:54:5c:49:
                    50:5b:aa:94:98:80:06:7b:8c:e7:66:05:da:37:11:
                    6f:51:73:45:17:2c:4b:4c:e4:62:2e:5c:27:c7:ea:
                    41:93:df:1f:d8:24:b8:0c:1a:54:bb:d9:a1:62:59:
                    14:1f:ca:38:0d:bb:c2:f5:12:84:38:5c:de:63:ea:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F5:F7:01:C1:AA:F8:2E:58:14:8A:81:8B:9D:1A:B3:9E:04:84:F0
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/6fX3AcGq-C5YFIqBi50as54EhPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:37:66:de:e9:3a:92:6e:8f:75:53:4b:fd:23:99:1d:73:c0:
         34:4b:0e:06:f5:a1:42:90:1a:9b:c5:5c:69:5a:53:c8:fb:e5:
         b7:64:53:46:fc:f3:7a:b9:cb:d7:60:7a:be:9c:4d:61:04:1c:
         1b:2d:ca:4d:cc:69:86:08:cf:92:92:2a:ed:34:06:64:41:27:
         95:72:a3:4c:b1:4f:68:d6:d0:71:26:72:7d:40:10:27:1b:84:
         89:8e:3e:f8:07:0d:68:5b:e1:42:60:95:d4:5f:91:91:2c:00:
         05:3a:cd:16:29:5e:e3:b8:a5:96:e3:47:7c:bd:b3:ca:bc:af:
         9e:fe:0b:55:1a:20:f9:c8:f9:4b:dc:49:33:41:60:c7:42:02:
         54:26:7a:d7:ca:57:7d:58:a9:81:91:aa:40:a1:5c:32:2d:44:
         82:7b:73:a8:a3:bb:05:6a:c7:3c:01:50:68:b3:88:83:ff:9f:
         73:ef:12:b0:1c:0d:e9:9e:09:9a:77:81:04:c8:d0:49:ee:e8:
         fb:f8:f8:80:0f:73:b0:c0:72:b5:31:c1:50:ce:5f:06:18:e6:
         62:86:1b:ae:cb:1b:a4:24:67:a6:c8:f2:01:d8:27:5e:7b:d6:
         f6:4d:27:85:08:66:af:62:9c:47:e8:ca:0d:d0:54:53:0e:52:
         57:7d:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----